offers: remove `blinding` from decode JSON-RPC.
What changed, and why it matters
This commit removes an old JSON-RPC field named `blinding` from the `decode` command output. It was already renamed to `first_path_key` in a previous version and has now been fully removed after a deprecation period. This is a routine cleanup, not a security fix.
No security action needed. Users relying on the deprecated `blinding` field should migrate to `first_path_key`.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch deletes the deprecated blinding field from the decode RPC response in plugins/offers.c and updates the deprecation table. The replacement field first_path_key remains present and contains the same data. No logic, parsing, or cryptographic handling changed.
Changed components
plugins/offers.cJSON-RPC `decode` command outputInspect captured patch +0 / −3
diff --git a/doc/developers-guide/deprecated-features.md b/doc/developers-guide/deprecated-features.md
index 6769e840..5b0fdbb4 100644
--- a/doc/developers-guide/deprecated-features.md
+++ b/doc/developers-guide/deprecated-features.md
@@ -8,7 +8,6 @@ hidden: false
| Name | Type | First Deprecated | Last Supported | Description |
|--------------------------------------|--------------------|------------------|----------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| listpeers.features.option_anchors_zero_fee_htlc_tx | Field | v24.08 | v25.09 | Renamed to `option_anchors` in the spec: check for that in `features` instead |
-| decode.blinding | Field | v24.11 | v25.05 | Renamed to `first_path_key` in BOLT 4 (available in `decode` from v24.11) |
| onion_message_recv.blinding | Hook Field | v24.11 | v25.05 | Renamed to `first_path_key` in BOLT 4 (available in hook from v24.11) |
| decodepay | Command | v24.11 | v25.12 | Use `decode` which is more powerful (since v23.05) |
| close.tx | Field | v24.11 | v25.12 | Use txs array instead |
diff --git a/plugins/offers.c b/plugins/offers.c
index ea817c1e..575d7a8b 100644
--- a/plugins/offers.c
+++ b/plugins/offers.c
@@ -608,8 +608,6 @@ static bool json_add_blinded_paths(struct command *cmd,
paths[i]->first_node_id.scidd.dir);
}
- if (command_deprecated_out_ok(cmd, "blinding", "v24.11", "v25.05"))
- json_add_pubkey(js, "blinding", &paths[i]->first_path_key);
json_add_pubkey(js, "first_path_key", &paths[i]->first_path_key);
/* Don't crash if we're short a payinfo! */
Why this scored 17/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.