What the developer wrote
Authored by ww3512687
disable near
What changed, and why it matters
This commit temporarily disables the NEAR blockchain app from the Keystone 3 firmware build. It does not fix or introduce any security vulnerability; it is a build configuration change that removes NEAR from automated testing and the multi-coin feature list while keeping the source code present. There is no evidence this change is related to a security issue.
No security action required. Treat as a normal maintenance/build change. If the NEAR app is being disabled due to an underlying issue, monitor subsequent commits for the actual fix or re-enablement.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit renames a GitHub Actions workflow for NEAR checks from .yml to .yml.disabled, comments out apps/near from the Cargo workspace members list, and removes near from the multi-coins feature in rust_c/Cargo.toml. The app_near dependency declaration is retained with a comment. These are purely build/CI configuration changes that stop compiling and testing the NEAR app; the app source code itself is untouched.
Changed components
NEAR app build configurationGitHub Actions CI workflow for NEARrust/Cargo.toml workspace membershiprust/rust_c/Cargo.toml multi-coins featureInspect captured patch +30 / −30
diff --git a/.github/workflows/rust-near-checks.yml b/.github/workflows/rust-near-checks.yml
deleted file mode 100644
index f4faeec..0000000
--- a/.github/workflows/rust-near-checks.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-on:
- pull_request:
- paths:
- - rust/apps/near/**
-
-name: NEAR Checks
-
-jobs:
- UnitTest:
- name: Unit Test And Code coverage
- runs-on: ubuntu-latest
- steps:
- - name: Checkout sources
- uses: actions/checkout@v2
-
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: nightly-2025-05-01
- override: true
- components: rustfmt
- target: x86_64-apple-darwin
-
- - name: Install cargo-llvm-cov
- uses: taiki-e/install-action@cargo-llvm-cov
-
- - name: Run rust/apps/near
- run: cd rust/apps/near && cargo +nightly-2025-05-01 llvm-cov --fail-under-regions 49 --fail-under-functions 52 --fail-under-lines 68
diff --git a/.github/workflows/rust-near-checks.yml.disabled b/.github/workflows/rust-near-checks.yml.disabled
new file mode 100644
index 0000000..f4faeec
--- /dev/null
+++ b/.github/workflows/rust-near-checks.yml.disabled
@@ -0,0 +1,27 @@
+on:
+ pull_request:
+ paths:
+ - rust/apps/near/**
+
+name: NEAR Checks
+
+jobs:
+ UnitTest:
+ name: Unit Test And Code coverage
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout sources
+ uses: actions/checkout@v2
+
+ - uses: actions-rs/toolchain@v1
+ with:
+ toolchain: nightly-2025-05-01
+ override: true
+ components: rustfmt
+ target: x86_64-apple-darwin
+
+ - name: Install cargo-llvm-cov
+ uses: taiki-e/install-action@cargo-llvm-cov
+
+ - name: Run rust/apps/near
+ run: cd rust/apps/near && cargo +nightly-2025-05-01 llvm-cov --fail-under-regions 49 --fail-under-functions 52 --fail-under-lines 68
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 1fe7932..a89bf43 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -8,7 +8,7 @@ members = [
"apps/cardano",
"apps/cosmos",
"apps/ethereum",
- "apps/near",
+ # "apps/near", # Temporarily disabled
"apps/solana",
"apps/stellar",
"apps/sui",
@@ -39,7 +39,7 @@ app_cardano = { path = "apps/cardano" }
app_cosmos = { path = "apps/cosmos", default-features = false }
app_ethereum = { path = "apps/ethereum" }
app_avalanche = { path = "apps/avalanche" }
-app_near = { path = "apps/near" }
+app_near = { path = "apps/near" } # Dependency kept, but member disabled
app_solana = { path = "apps/solana" }
app_stellar = { path = "apps/stellar" }
app_sui = { path = "apps/sui" }
diff --git a/rust/rust_c/Cargo.toml b/rust/rust_c/Cargo.toml
index d5b5aa8..cc4d59e 100644
--- a/rust/rust_c/Cargo.toml
+++ b/rust/rust_c/Cargo.toml
@@ -101,7 +101,7 @@ multi-coins = [
"ethereum",
"ltc",
"doge",
- "near",
+ # "near", # Temporarily disabled
"solana",
"stellar",
"sui",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.