build, msvc: Update vcpkg manifest baseline
What changed, and why it matters
This is a routine build-system maintenance update for the Microsoft Visual Studio (MSVC) dependency manifest. It bumps the vcpkg baseline and several bundled library versions (Boost, Qt, SQLite) to newer releases. There is no code change to Bitcoin Core itself, and the commit message does not describe any security fix.
No security action required. Treat as normal dependency maintenance; verify downstream CI builds pass with the new baseline.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit only modifies vcpkg.json, changing the builtin-baseline from the 2025.03.19 vcpkg release to the 2025.08.27 release and pulling in newer dependency versions (boost 1.88.0, qtbase/qttools 6.9.1, sqlite3 3.50.4). No Bitcoin Core source code is changed. The diff shows only the comment and baseline hash being updated; dependency names are unchanged.
Changed components
build system / MSVC vcpkg manifest (vcpkg.json)Inspect captured patch +2 / −2
diff --git a/vcpkg.json b/vcpkg.json
index 45a8a1a2..e034c791 100644
--- a/vcpkg.json
+++ b/vcpkg.json
@@ -1,7 +1,7 @@
{
- "$comment": "The builtin-baseline corresponds to 2025.03.19 Release",
+ "$comment": "The builtin-baseline corresponds to 2025.08.27 Release",
"$schema": "https://raw.githubusercontent.com/microsoft/vcpkg-tool/main/docs/vcpkg.schema.json",
- "builtin-baseline": "b02e341c927f16d991edbd915d8ea43eac52096c",
+ "builtin-baseline": "120deac3062162151622ca4860575a33844ba10b",
"dependencies": [
"boost-multi-index",
"boost-signals2",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.