What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' crate from version 3.23.0 to 3.24.0. The change only affects development/test dependencies and updates the lockfile accordingly. There is no indication in the commit or supplied references that this fixes a security issue.
No security action required. Treat as routine maintenance. If desired, review the upstream tempfile changelog for any functional changes, but no security relevance is indicated.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates Cargo.toml and Cargo.lock to use tempfile 3.24.0 instead of 3.23.0. The lockfile also transitively updates libc, linux-raw-sys, rustix, and windows-sys as required by the new tempfile version. tempfile is listed under [dev-dependencies], meaning it is used only for tests, not in production builds. The commit message and changelog link do not mention any security fix.
Changed components
Cargo.tomlCargo.locktempfile dev-dependencyInspect captured patch +12 / −12
diff --git a/Cargo.lock b/Cargo.lock
index f670086..084432c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -614,9 +614,9 @@ checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
[[package]]
name = "libc"
-version = "0.2.172"
+version = "0.2.178"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa"
+checksum = "37c93d8daa9d8a012fd8ab92f088405fb202ea0b6ab73ee2482ae66af4f42091"
[[package]]
name = "libredox"
@@ -647,9 +647,9 @@ checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
[[package]]
name = "linux-raw-sys"
-version = "0.9.4"
+version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12"
+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
[[package]]
name = "lock_api"
@@ -1014,15 +1014,15 @@ dependencies = [
[[package]]
name = "rustix"
-version = "1.0.7"
+version = "1.1.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c71e83d6afe7ff64890ec6b71d6a69bb8a610ab78ce364b3352876bb4c801266"
+checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34"
dependencies = [
"bitflags",
"errno",
"libc",
- "linux-raw-sys 0.9.4",
- "windows-sys 0.59.0",
+ "linux-raw-sys 0.11.0",
+ "windows-sys 0.61.0",
]
[[package]]
@@ -1150,14 +1150,14 @@ dependencies = [
[[package]]
name = "tempfile"
-version = "3.23.0"
+version = "3.24.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16"
+checksum = "655da9c7eb6305c55742045d5a8d2037996d61d8de95806335c7c86ce0f82e9c"
dependencies = [
"fastrand",
"getrandom 0.3.3",
"once_cell",
- "rustix 1.0.7",
+ "rustix 1.1.3",
"windows-sys 0.61.0",
]
diff --git a/Cargo.toml b/Cargo.toml
index 98f2bcf..e1758ae 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -59,7 +59,7 @@ configure_me_codegen = { version = "0.4.8", default-features = false }
[dev-dependencies]
bitcoin-test-data = "0.2.0"
hex_lit = "0.1.1"
-tempfile = "3.23"
+tempfile = "3.24"
[profile.release]
lto = true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.