script: Update rust version to 1.85
What the developer wrote
Authored by ShahanaFarooqui
script: Update rust version to 1.85
Fixes error in current reproducible builds:
```
error: failed to parse lock file at: /build/Cargo.lock
Caused by:
lock file version `4` was found, but this version of Cargo does not understand this lock file, perhaps Cargo needs to be updated?
```
What changed, and why it matters
This commit simply updates the Rust compiler version used in Core Lightning's reproducible build Docker images from 1.75 to 1.85. The change is needed because newer project dependencies use a Cargo.lock file format that Rust 1.75 cannot read. There is no security vulnerability being fixed here—only a build tooling compatibility issue.
No security action required. Treat as routine build infrastructure maintenance. If deploying reproducible builds, verify that Rust 1.85 produces deterministic outputs consistent with prior expectations.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies three reproducible build Dockerfiles (focal, jammy, noble) to install Rust 1.85 instead of 1.75. The commit message explains this resolves a Cargo.lock version 4 parsing error that occurs with the older toolchain during reproducible builds. No source code, cryptographic logic, network handling, or runtime behavior is changed.
Changed components
contrib/reprobuild/Dockerfile.focalcontrib/reprobuild/Dockerfile.jammycontrib/reprobuild/Dockerfile.nobleInspect captured patch +3 / −3
diff --git a/contrib/reprobuild/Dockerfile.focal b/contrib/reprobuild/Dockerfile.focal
index 16c0e211..cf5f7021 100644
--- a/contrib/reprobuild/Dockerfile.focal
+++ b/contrib/reprobuild/Dockerfile.focal
@@ -55,7 +55,7 @@ RUN wget https://bootstrap.pypa.io/get-pip.py -O /tmp/get-pip.py && python3 /tmp
RUN wget https://sh.rustup.rs -O rustup-install.sh && \
bash rustup-install.sh --default-toolchain none --quiet -y && \
rm rustup-install.sh && \
- /root/.cargo/bin/rustup install 1.75
+ /root/.cargo/bin/rustup install 1.85
# Download protoc manually, it is in the update repos which we
# disabled above, so `apt-get` can't find it anymore.
diff --git a/contrib/reprobuild/Dockerfile.jammy b/contrib/reprobuild/Dockerfile.jammy
index 216dd53a..bedd4fbe 100644
--- a/contrib/reprobuild/Dockerfile.jammy
+++ b/contrib/reprobuild/Dockerfile.jammy
@@ -53,7 +53,7 @@ RUN wget https://bootstrap.pypa.io/get-pip.py -O /tmp/get-pip.py && python3 /tmp
RUN wget https://sh.rustup.rs -O rustup-install.sh && \
bash rustup-install.sh --default-toolchain none --quiet -y && \
rm rustup-install.sh && \
- /root/.cargo/bin/rustup install 1.75
+ /root/.cargo/bin/rustup install 1.85
# Download protoc manually, it is in the update repos which we
# disabled above, so `apt-get` can't find it anymore.
diff --git a/contrib/reprobuild/Dockerfile.noble b/contrib/reprobuild/Dockerfile.noble
index 7d7c2509..4692eabd 100644
--- a/contrib/reprobuild/Dockerfile.noble
+++ b/contrib/reprobuild/Dockerfile.noble
@@ -51,7 +51,7 @@ RUN wget https://bootstrap.pypa.io/get-pip.py -O /tmp/get-pip.py && python3 /tmp
RUN wget https://sh.rustup.rs -O rustup-install.sh && \
bash rustup-install.sh --default-toolchain none --quiet -y && \
rm rustup-install.sh && \
- /root/.cargo/bin/rustup install 1.75
+ /root/.cargo/bin/rustup install 1.85
# Download protoc manually, it is in the update repos which we
# disabled above, so `apt-get` can't find it anymore.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.