What the developer wrote
Authored by dependabot[bot]
Bump tempfile from 3.22.0 to 3.23.0 (#1233)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.22.0 to 3.23.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.22.0...v3.23.0)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' library from version 3.22.0 to 3.23.0. The change only affects development/test dependencies and contains no code changes in the electrs project itself. There is no indication in the commit or supplied references that this update fixes a security issue.
No action required. Treat as routine maintenance. If reviewing dependency hygiene, verify the tempfile 3.23.0 changelog for any relevant fixes, but the commit itself does not indicate security relevance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the ‘tempfile’ crate version in Cargo.toml and Cargo.lock. tempfile is listed under [dev-dependencies], meaning it is used only for tests, not in production builds. The commit message and diff provide no details about the contents of the tempfile 3.23.0 release, and no verified references were supplied. Without external information, this appears to be a standard minor-version dependency bump.
Changed components
Cargo.toml dev-dependenciesCargo.lockInspect captured patch +3 / −3
diff --git a/Cargo.lock b/Cargo.lock
index 78e28a7..0baea8c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1126,9 +1126,9 @@ dependencies = [
[[package]]
name = "tempfile"
-version = "3.22.0"
+version = "3.23.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84fa4d11fadde498443cca10fd3ac23c951f0dc59e080e9f4b93d4df4e4eea53"
+checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16"
dependencies = [
"fastrand",
"getrandom 0.3.3",
diff --git a/Cargo.toml b/Cargo.toml
index bbbf7a0..9662d67 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -59,7 +59,7 @@ configure_me_codegen = { version = "0.4.8", default-features = false }
[dev-dependencies]
bitcoin-test-data = "0.2.0"
hex_lit = "0.1.1"
-tempfile = "3.22"
+tempfile = "3.23"
[profile.release]
lto = true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.