signals: remove boost::signals2 from depends and vcpkg
What changed, and why it matters
This commit simply removes an unused software component (Boost.Signals2) from two dependency lists used to build Bitcoin Core. It is a cleanup change, not a security fix.
No security action required. Treat as routine dependency cleanup.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch removes ‘signals2’ from the Boost include libraries in depends/packages/boost.mk and deletes the ‘boost-signals2’ entry from vcpkg.json. This indicates Bitcoin Core no longer depends on Boost.Signals2. There is no code change to Bitcoin Core itself and no indication of a vulnerability in either the removed library or the project.
Changed components
depends/packages/boost.mkvcpkg.jsonInspect captured patch +1 / −2
diff --git a/depends/packages/boost.mk b/depends/packages/boost.mk
index 2d027c68..b86b80c7 100644
--- a/depends/packages/boost.mk
+++ b/depends/packages/boost.mk
@@ -6,7 +6,7 @@ $(package)_sha256_hash = 913ca43d49e93d1b158c9862009add1518a4c665e7853b349a6492d
$(package)_build_subdir = build
define $(package)_set_vars
- $(package)_config_opts = -DBOOST_INCLUDE_LIBRARIES="multi_index;signals2;test"
+ $(package)_config_opts = -DBOOST_INCLUDE_LIBRARIES="multi_index;test"
$(package)_config_opts += -DBOOST_TEST_HEADERS_ONLY=ON
$(package)_config_opts += -DBOOST_ENABLE_MPI=OFF
$(package)_config_opts += -DBOOST_ENABLE_PYTHON=OFF
diff --git a/vcpkg.json b/vcpkg.json
index e034c791..49906808 100644
--- a/vcpkg.json
+++ b/vcpkg.json
@@ -4,7 +4,6 @@
"builtin-baseline": "120deac3062162151622ca4860575a33844ba10b",
"dependencies": [
"boost-multi-index",
- "boost-signals2",
"libevent"
],
"default-features": [
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.