What the developer wrote
Authored by dependabot[bot]
Bump tempfile from 3.21.0 to 3.22.0 (#1231)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is an automated dependency update by Dependabot that bumps the Rust crate `tempfile` from version 3.21.0 to 3.22.0. The change only affects the development/test dependency section of the project and updates the lockfile accordingly. There is no indication in the commit itself that this fixes a security vulnerability, and no security advisory references were provided.
No immediate action is required for security reasons. If reviewing this update, verify the upstream `tempfile` changelog for any relevant fixes and confirm CI passes. Since it is a dev-dependency, it does not affect production release binaries.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates tempfile from 3.21.0 to 3.22.0 in Cargo.toml (dev-dependencies) and Cargo.lock. The lockfile diff shows the crate version, checksum, and a transitive windows-sys bump from 0.59.0 to 0.61.0. tempfile is used only as a [dev-dependencies] entry, meaning it is not compiled into release builds of electrs. No code changes, security notes, or vulnerability descriptions are present in the commit message or diff.
Changed components
Cargo.toml dev-dependenciesCargo.locktempfile crate (test-only dependency)Inspect captured patch +4 / −4
diff --git a/Cargo.lock b/Cargo.lock
index bdd5b4a..78e28a7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1126,15 +1126,15 @@ dependencies = [
[[package]]
name = "tempfile"
-version = "3.21.0"
+version = "3.22.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "15b61f8f20e3a6f7e0649d825294eaf317edce30f82cf6026e7e4cb9222a7d1e"
+checksum = "84fa4d11fadde498443cca10fd3ac23c951f0dc59e080e9f4b93d4df4e4eea53"
dependencies = [
"fastrand",
"getrandom 0.3.3",
"once_cell",
"rustix 1.0.7",
- "windows-sys 0.59.0",
+ "windows-sys 0.61.0",
]
[[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 9b54292..bbbf7a0 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -59,7 +59,7 @@ configure_me_codegen = { version = "0.4.8", default-features = false }
[dev-dependencies]
bitcoin-test-data = "0.2.0"
hex_lit = "0.1.1"
-tempfile = "3.21"
+tempfile = "3.22"
[profile.release]
lto = true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.