docs(zcash): tighten orchard patch comment
What the developer wrote
Authored by Adam Tucker
docs(zcash): tighten orchard patch comment
What changed, and why it matters
This commit only rewrites a comment in a dependency configuration file. No code, dependency versions, or build settings were changed. It has no security relevance on its own.
No action needed. This is a documentation-only change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies a single comment in rust/Cargo.toml. The previous three-line comment explaining why the orchard crate is patched from a Git revision was replaced with a shorter one-line comment. The orchard patch line itself (git URL and pinned revision) is unchanged, as are all other dependencies. There is no functional change.
Changed components
Inspect captured patch +1 / −3
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 49763da..c9e75e2 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -129,9 +129,7 @@ zcash_keys = { git = "https://github.com/valargroup/librustzcash", rev = "94d6e7
zcash_primitives = { git = "https://github.com/valargroup/librustzcash", rev = "94d6e7fd8c76abb1d909390e10254a22f587981f" }
zcash_protocol = { git = "https://github.com/valargroup/librustzcash", rev = "94d6e7fd8c76abb1d909390e10254a22f587981f" }
zcash_transparent = { git = "https://github.com/valargroup/librustzcash", rev = "94d6e7fd8c76abb1d909390e10254a22f587981f" }
-# Redirect every crates.io `orchard` requirement onto the merged
-# unpadded-bundles head so the graph resolves to a single orchard node,
-# matching the pczt pin.
+# Keep `orchard` aligned with the pinned PCZT/librustzcash revision.
orchard = { git = "https://github.com/zcash/orchard", rev = "475ef0ff77d45aebff93cb039d639250d82518a3" }
# Use the upstream SDK rev with the Zcash batch registry types until they are published as a crate.
ur-registry = { git = "https://github.com/KeystoneHQ/keystone-sdk-rust.git", rev = "0884de4b2e927bc3f95a98dff62045e0d492e574" }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.