What the developer wrote
Authored by fanquake
ci: use latest versions of lint deps
Some of the versions used here are > 2 years old. i.e mypy. Use the
latest avilable versions, except for LIEF, which is generally changed
with Guix.
What changed, and why it matters
This commit simply updates the versions of several linting tools used in Bitcoin Core's continuous integration (CI) pipeline. Linting tools check code style and catch common mistakes but are not part of the actual Bitcoin software that users run. There is no security-relevant code change here.
No security action needed. Review as normal CI dependency maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates pinned versions of Python linting dependencies in ci/lint/01_install.sh: mypy (1.4.1 → 1.18.2), pyzmq (25.1.0 → 27.1.0), ruff (0.5.5 → 0.13.2), and vulture (2.6 → 2.14). LIEF is intentionally left at 0.16.6 because it is managed with Guix. This is a routine CI maintenance change with no effect on consensus, networking, wallet, or runtime code.
Changed components
ci/lint/01_install.shInspect captured patch +4 / −4
diff --git a/ci/lint/01_install.sh b/ci/lint/01_install.sh
index 75f89110..0d8cca98 100755
--- a/ci/lint/01_install.sh
+++ b/ci/lint/01_install.sh
@@ -41,10 +41,10 @@ python3 --version
${CI_RETRY_EXE} pip3 install \
codespell==2.4.1 \
lief==0.16.6 \
- mypy==1.4.1 \
- pyzmq==25.1.0 \
- ruff==0.5.5 \
- vulture==2.6
+ mypy==1.18.2 \
+ pyzmq==27.1.0 \
+ ruff==0.13.2 \
+ vulture==2.14
SHELLCHECK_VERSION=v0.11.0
curl -sL "https://github.com/koalaman/shellcheck/releases/download/${SHELLCHECK_VERSION}/shellcheck-${SHELLCHECK_VERSION}.linux.x86_64.tar.xz" | \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.