What the developer wrote
Authored by Níckolas Goline
makefile: update: update-ccan
Update update-ccan recipe to use ccan's commit instead of tag since ccan's home moved to github
Changelog-None
What changed, and why it matters
This commit changes a single line in the build Makefile. It updates the 'update-ccan' recipe so that when the project copies code from the CCAN library, it records the exact Git commit hash instead of a Git tag-based version string. This is a maintenance change because CCAN moved its hosting to GitHub. There is no security-relevant change to the software itself.
No security action needed. Treat as routine build/maintenance maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies the update-ccan target in Makefile. It replaces git -C ../ccan describe (which produces a tag-based version string) with git -C ../ccan rev-parse --short HEAD (which produces the short commit hash). The change is purely about how the CCAN version is recorded in ccan/README after syncing CCAN sources. No code behavior, build inputs, cryptographic operations, or network handling is altered.
Changed components
Makefile (update-ccan target)Inspect captured patch +1 / −1
diff --git a/Makefile b/Makefile
index ac1a1c8d..39dd3ead 100644
--- a/Makefile
+++ b/Makefile
@@ -830,7 +830,7 @@ update-ccan:
cp ../ccan/tools/configurator/configurator.c ../ccan/doc/configurator.1 ccan/tools/configurator/
$(MAKE) ccan/config.h
grep -v '^CCAN version:' ccan.old/README > ccan/README
- echo CCAN version: `git -C ../ccan describe` >> ccan/README
+ echo CCAN version: `git -C ../ccan rev-parse --short HEAD` >> ccan/README
$(RM) -r ccan.old
$(RM) -r ccan/ccan/hash/ ccan/ccan/tal/talloc/ # Unnecessary deps
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.