What the developer wrote
Authored by soralit
chore: update dep
What changed, and why it matters
This commit simply bumps two Rust library versions (ur-registry and ur-parse-lib from 1.0.3 to 1.0.4) and updates an unrelated image asset hash file. There is no visible security fix or vulnerability in the diff itself. Without knowing what changed in the updated dependencies, we cannot classify this as a security patch.
Review the upstream release notes or changelog for ur-registry 1.0.4 and ur-parse-lib 1.0.4 to determine whether the version bump addresses any security issues. If the dependencies handle untrusted input (e.g., QR/UR parsing), consider validating the new versions and running relevant tests before release.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates Cargo.toml and Cargo.lock to use ur-registry and ur-parse-lib version 1.0.4 instead of 1.0.3, and regenerates src/ui/gui_assets/images_hash.txt. The commit title and message are ‘chore: update dep’. No code changes, patch notes, or security references are present in the commit or supplied materials.
Changed components
rust/Cargo.toml dependency declarationsrust/Cargo.lock dependency lockfilesrc/ui/gui_assets/images_hash.txtInspect captured patch +7 / −7
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index afebcc1..1ad4b01 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -4747,9 +4747,9 @@ checksum = "6d49784317cd0d1ee7ec5c716dd598ec5b4483ea832a2dced265471cc0f690ae"
[[package]]
name = "ur-parse-lib"
-version = "1.0.3"
+version = "1.0.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f88434c87d748dfb765bc5debbbab61d020392d23b568fe73eb44eaca46daa04"
+checksum = "0cb78039ff8b5bf065b43348aaa231d5909bc8d1f5c09541c25ea259d2048c1f"
dependencies = [
"hex",
"keystone-ur",
@@ -4758,9 +4758,9 @@ dependencies = [
[[package]]
name = "ur-registry"
-version = "1.0.3"
+version = "1.0.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf91aff789fea1c05116a47b11fbe0bea32ef66e0c1f77b46550e1407efc4c6e"
+checksum = "c9b75e98b4ddfd7140efcf02b4e5d420e91f14cb7a30623c7aa83dccac1c7f64"
dependencies = [
"bs58",
"hex",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index c537f54..a3afcda 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -74,8 +74,8 @@ core2 = { version = "0.3.3", default-features = false, features = ["alloc"] }
thiserror = { version = "1.0", package = "thiserror-core", default-features = false }
rsa = { version = "0.8.2", default-features = false }
sha1 = { version = "0.10.5", default-features = false }
-ur-registry = "1.0.3"
-ur-parse-lib = "1.0.3"
+ur-registry = "1.0.4"
+ur-parse-lib = "1.0.4"
sui-transaction-types-core = { git = "https://github.com/KeystoneHQ/sui.git", tag = "mainnet-nostd-v1.69.2.1", default-features = false, features = ["alloc"] }
ed25519-bip32-core = { version = "0.1.1", default-features = false }
cryptoxide = "0.4"
diff --git a/src/ui/gui_assets/images_hash.txt b/src/ui/gui_assets/images_hash.txt
index 5415d65..797d5db 100644
--- a/src/ui/gui_assets/images_hash.txt
+++ b/src/ui/gui_assets/images_hash.txt
@@ -1 +1 @@
-3515e196a2126c3478f07f2289025439
+a59c564221b898f2e534c33680a099c2
\ No newline at end of file
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.