What changed, and why it matters
This commit simply updates a required library version from 0.0.11 to 0.1.0 in Electrum's dependency files. There is no code change shown, and no information is provided about why the library was updated or whether the new version fixes any security issue. On its own, this commit is just a routine build/dependency bump.
Review the electrum-aionostr 0.1.0 release notes or changelog to determine whether this bump addresses any security-relevant fixes. If it does, re-evaluate this commit in that context. Otherwise, treat as a routine dependency update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates the pinned and minimum versions of the electrum-aionostr dependency (0.0.11 → 0.1.0) in contrib/deterministic-build/requirements.txt and contrib/requirements/requirements.txt. No source code is modified, no changelog is included, and no security rationale is stated in the commit message or supplied references.
Changed components
contrib/deterministic-build/requirements.txtcontrib/requirements/requirements.txtInspect captured patch +3 / −3
diff --git a/contrib/deterministic-build/requirements.txt b/contrib/deterministic-build/requirements.txt
index 58857f6..7481c4d 100644
--- a/contrib/deterministic-build/requirements.txt
+++ b/contrib/deterministic-build/requirements.txt
@@ -16,8 +16,8 @@ certifi==2025.4.26 \
--hash=sha256:0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6
dnspython==2.4.2 \
--hash=sha256:8dcfae8c7460a2f84b4072e26f1c9f4101ca20c071649cb7c34e8b6a93d58984
-electrum-aionostr==0.0.11 \
- --hash=sha256:0eeb1d01e55d4bab2c116268965a0b2c11490659e969fd864c453104558bcf81
+electrum-aionostr==0.1.0 \
+ --hash=sha256:3774f8e8312388272e10851a869c9f4d3d4a54d8d564851c36e2dc40297bec84
electrum-ecc==0.0.6 \
--hash=sha256:6360c71fb08b51d80a455e938f126ba4c790be74ba226461d54d7a3aa6890b89
frozenlist==1.6.0 \
diff --git a/contrib/requirements/requirements.txt b/contrib/requirements/requirements.txt
index 4aa09e8..e9963c1 100644
--- a/contrib/requirements/requirements.txt
+++ b/contrib/requirements/requirements.txt
@@ -7,7 +7,7 @@ aiohttp_socks>=0.9.2
certifi
jsonpatch
electrum_ecc>=0.0.4,<0.1
-electrum_aionostr>=0.0.11,<0.1
+electrum_aionostr>=0.1.0,<0.2
# - upper limit to avoid needing hatchling at build-time :/
# (however newer versions should work at runtime)
Why this scored 7/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.