What the developer wrote
Authored by Roman Zeyde
Test bitcoind 31.0rc2
What changed, and why it matters
This commit simply updates the CI Docker file to test against a newer release candidate of Bitcoin Core (31.0rc2) instead of the older 29.0 stable release. There is no security-relevant code change in the electrs project itself.
No security action required. Treat as a normal CI maintenance update. If adopting 31.0rc2 in production, follow Bitcoin Core release-candidate guidance and wait for final release for production deployments.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The Dockerfile.ci change replaces parameterized download of Bitcoin Core 29.0 with a hardcoded download of Bitcoin Core 31.0rc2 from the Bitcoin Core test release directory. It removes the ARCH and BITCOIND_VERSION build arguments and adjusts paths accordingly. This is a routine CI/testing dependency bump with no functional code modifications to electrs.
Changed components
Dockerfile.ci (CI build configuration only)Inspect captured patch +4 / −6
diff --git a/Dockerfile.ci b/Dockerfile.ci
index 0231276..9106ac1 100644
--- a/Dockerfile.ci
+++ b/Dockerfile.ci
@@ -21,12 +21,10 @@ RUN cargo install --locked --path .
FROM base AS bitcoin-build
# Download
WORKDIR /build/bitcoin
-ARG ARCH=x86_64
-ARG BITCOIND_VERSION=29.0
-RUN wget -q https://bitcoincore.org/bin/bitcoin-core-$BITCOIND_VERSION/bitcoin-$BITCOIND_VERSION-$ARCH-linux-gnu.tar.gz
-RUN tar xvf bitcoin-$BITCOIND_VERSION-$ARCH-linux-gnu.tar.gz
-RUN mv -v bitcoin-$BITCOIND_VERSION/bin/bitcoind .
-RUN mv -v bitcoin-$BITCOIND_VERSION/bin/bitcoin-cli .
+RUN wget -q https://bitcoincore.org/bin/bitcoin-core-31.0/test.rc2/bitcoin-31.0rc2-x86_64-linux-gnu.tar.gz
+RUN tar xvf bitcoin-31.0rc2-x86_64-linux-gnu.tar.gz
+RUN mv -v bitcoin-31.0rc2/bin/bitcoind .
+RUN mv -v bitcoin-31.0rc2/bin/bitcoin-cli .
FROM base AS result
# Copy the binaries
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.