What the developer wrote
Authored by Nicolas Dorier
Bump version and dependencies
What changed, and why it matters
This commit is a routine version bump for the BTCPay Server application and updates several third-party software libraries and build tools to newer patch versions. There is no indication in the commit itself that this is a security fix, and no security-relevant code changes are present.
No immediate security action is required. Operators may apply the update as part of normal maintenance. If concerned about transitive vulnerabilities addressed by the bumped dependencies, consult the release notes or security advisories for NBitcoin, NBitcoin.Altcoins, NBXplorer.Client, and .NET 10.0.12.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the project version from 2.4.4 to 2.4.5 and bumps NuGet package references: NBitcoin 10.0.11→10.0.14, NBitcoin.Altcoins 6.0.5→6.0.9, NBXplorer.Client 5.0.8→5.0.11, Microsoft.AspNetCore.Mvc.NewtonsoftJson 10.0.11→10.0.12, and .NET SDK/runtime container images to 10.0.401/10.0.12. These are dependency maintenance changes with no direct diff evidence of vulnerability remediation.
Changed components
BTCPayServer.ClientBTCPayServer.CommonBTCPayServer.DataBTCPayServer.RatingBTCPayServer.Tests/DockerfileBTCPayServer/BTCPayServer.csprojBuild/Version.csprojDockerfile.github/workflows/release.ymlInspect captured patch +11 / −11
### .github/workflows/release.yml
@@ -53,7 +53,7 @@ jobs:
name: Plugin Compatibility
runs-on: ubuntu-24.04
container:
- image: mcr.microsoft.com/dotnet/sdk:10.0.301-noble
+ image: mcr.microsoft.com/dotnet/sdk:10.0.401-noble
timeout-minutes: 120
steps:
- name: Install checkout dependencies
### BTCPayServer.Client/BTCPayServer.Client.csproj
@@ -31,7 +31,7 @@
</ItemGroup>
<ItemGroup>
<PackageReference Include="BTCPayServer.Lightning.Common" Version="1.7.2" />
- <PackageReference Include="NBitcoin" Version="10.0.11" />
+ <PackageReference Include="NBitcoin" Version="10.0.14" />
<PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
</ItemGroup>
<ItemGroup>
### BTCPayServer.Common/BTCPayServer.Common.csproj
@@ -2,7 +2,7 @@
<Import Project="../Build/Version.csproj" Condition="Exists('../Build/Version.csproj')" />
<Import Project="../Build/Common.csproj" />
<ItemGroup>
- <PackageReference Include="NBXplorer.Client" Version="5.0.8" />
+ <PackageReference Include="NBXplorer.Client" Version="5.0.11" />
<PackageReference Include="NicolasDorier.StandardConfiguration" Version="2.0.1" />
</ItemGroup>
</Project>
### BTCPayServer.Data/BTCPayServer.Data.csproj
@@ -9,7 +9,7 @@
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.11" />
- <PackageReference Include="NBitcoin.Altcoins" Version="6.0.5" />
+ <PackageReference Include="NBitcoin.Altcoins" Version="6.0.9" />
<PackageReference Include="Dapper" Version="2.1.79" />
</ItemGroup>
<ItemGroup>
### BTCPayServer.Rating/BTCPayServer.Rating.csproj
@@ -6,7 +6,7 @@
<FrameworkReference Include="Microsoft.AspNetCore.App" />
<PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="5.6.0" />
<PackageReference Include="Microsoft.AspNet.WebApi.Client" Version="6.0.0" />
- <PackageReference Include="NBitcoin" Version="10.0.11" />
+ <PackageReference Include="NBitcoin" Version="10.0.14" />
<PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
<PackageReference Include="DigitalRuby.ExchangeSharp" Version="1.2.1" />
</ItemGroup>
### BTCPayServer.Tests/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0.400-noble AS builder
+FROM mcr.microsoft.com/dotnet/sdk:10.0.401-noble AS builder
WORKDIR /source
COPY nuget.config nuget.config
### BTCPayServer/BTCPayServer.csproj
@@ -34,7 +34,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
- <PackageReference Include="NBitcoin" Version="10.0.11" />
+ <PackageReference Include="NBitcoin" Version="10.0.14" />
<PackageReference Include="YamlDotNet" Version="16.3.0" />
<PackageReference Include="BIP78.Sender" Version="0.2.5" />
<PackageReference Include="BTCPayServer.Hwi" Version="2.0.6" />
@@ -58,7 +58,7 @@
<PackageReference Include="TwentyTwenty.Storage.Azure" Version="2.26.1" />
<PackageReference Include="TwentyTwenty.Storage.Google" Version="2.26.1" />
<PackageReference Include="TwentyTwenty.Storage.Local" Version="2.26.1" />
- <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.11" />
+ <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.12" />
<PackageReference Include="Microsoft.AspNetCore.SignalR.Protocols.NewtonsoftJson" Version="10.0.11" />
</ItemGroup>
### Build/Version.csproj
@@ -1,5 +1,5 @@
<Project>
<PropertyGroup>
- <Version>2.4.4</Version>
+ <Version>2.4.5</Version>
</PropertyGroup>
</Project>
### Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:10.0.400-noble AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:10.0.401-noble AS builder
ENV DOTNET_CLI_TELEMETRY_OPTOUT=1
WORKDIR /source
COPY nuget.config nuget.config
@@ -21,7 +21,7 @@ ARG CONFIGURATION_NAME=Release
ARG GIT_COMMIT
RUN cd BTCPayServer && dotnet publish -p:GitCommit=${GIT_COMMIT} --output /app/ --configuration ${CONFIGURATION_NAME}
-FROM mcr.microsoft.com/dotnet/aspnet:10.0.11-noble
+FROM mcr.microsoft.com/dotnet/aspnet:10.0.12-noble
RUN apt-get update && apt-get install -y --no-install-recommends iproute2 openssh-client ca-certificates jq \
&& rm -rf /var/lib/apt/lists/*Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.