What the developer wrote
Authored by dependabot[bot]
Bump tempfile from 3.20.0 to 3.21.0 (#1222)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is an automated dependency update by Dependabot that bumps the 'tempfile' Rust crate from version 3.20.0 to 3.21.0. The change only updates version numbers in the project's package manifest (Cargo.toml) and lock file (Cargo.lock). There is no indication in the commit itself that this update fixes a security issue, and no security advisory or incident details were provided.
No immediate security action is required based on this commit alone. If the project tracks tempfile's changelog, review the upstream 3.21.0 release notes for any security fixes and consider applying the update during normal maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit is a routine semver-minor dependency bump of the ‘tempfile’ dev-dependency. The diff consists solely of updating the version string and corresponding checksum in Cargo.toml and Cargo.lock. No source code, logic, or API usage changes are present. No security-relevant changelog entry or CVE is referenced in the commit message or diff.
Changed components
Cargo.tomlCargo.lockdev-dependency: tempfileInspect captured patch +3 / −3
diff --git a/Cargo.lock b/Cargo.lock
index 2b4c145..c7f26ea 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1087,9 +1087,9 @@ dependencies = [
[[package]]
name = "tempfile"
-version = "3.20.0"
+version = "3.21.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e8a64e3985349f2441a1a9ef0b853f869006c3855f2cda6862a94d26ebb9d6a1"
+checksum = "15b61f8f20e3a6f7e0649d825294eaf317edce30f82cf6026e7e4cb9222a7d1e"
dependencies = [
"fastrand",
"getrandom 0.3.3",
diff --git a/Cargo.toml b/Cargo.toml
index 757bbc7..004a4e8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -59,7 +59,7 @@ configure_me_codegen = { version = "0.4.8", default-features = false }
[dev-dependencies]
bitcoin-test-data = "0.2.0"
hex_lit = "0.1.1"
-tempfile = "3.20"
+tempfile = "3.21"
[profile.release]
lto = true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.