What the developer wrote
Authored by ww3512687
update cargo toml
What changed, and why it matters
This commit simply switches two internal Rust library dependencies from a development branch to a numbered release tag (0.0.52). It is a routine dependency pinning change with no visible security fix or vulnerability in the diff itself.
No immediate action is required based on this commit alone. If the tag change was made to incorporate a security fix, review the release notes and commits between 414ecb6c and 12c4d08d in keystone-sdk-rust to confirm.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates rust/Cargo.toml and rust/Cargo.lock to point ur-registry and ur-parse-lib from the support_crypto_extend branch (commit 414ecb6c) to tag 0.0.52 (commit 12c4d08d). No source code changes are included, and the commit message gives no indication of a security issue. The new tag may or may not contain security-relevant changes, but that cannot be determined from this commit alone.
Changed components
rust/Cargo.tomlrust/Cargo.lockur-registry dependencyur-parse-lib dependencyInspect captured patch +4 / −4
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 4368d3f..4a0c852 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -4789,7 +4789,7 @@ dependencies = [
[[package]]
name = "ur-parse-lib"
version = "0.2.0"
-source = "git+https://git@github.com/KeystoneHQ/keystone-sdk-rust.git?branch=support_crypto_extend#414ecb6cc3730d780067dc52754b5c2f61a6cc7b"
+source = "git+https://git@github.com/KeystoneHQ/keystone-sdk-rust.git?tag=0.0.52#12c4d08dad2e0fb7b7dd05c4c11540dccc2f63bc"
dependencies = [
"hex",
"ur",
@@ -4799,7 +4799,7 @@ dependencies = [
[[package]]
name = "ur-registry"
version = "0.1.1"
-source = "git+https://git@github.com/KeystoneHQ/keystone-sdk-rust.git?branch=support_crypto_extend#414ecb6cc3730d780067dc52754b5c2f61a6cc7b"
+source = "git+https://git@github.com/KeystoneHQ/keystone-sdk-rust.git?tag=0.0.52#12c4d08dad2e0fb7b7dd05c4c11540dccc2f63bc"
dependencies = [
"bs58 0.5.1",
"core2",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index da569b5..ad88a7f 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -74,8 +74,8 @@ core2 = { version = "0.3.3", default-features = false, features = ["alloc"] }
thiserror = { version = "1.0", package = "thiserror-core", default-features = false }
rsa = { version = "0.8.2", default-features = false }
sha1 = { version = "0.10.5", default-features = false }
-ur-registry = { git = "https://git@github.com/KeystoneHQ/keystone-sdk-rust.git", branch = "support_crypto_extend" }
-ur-parse-lib = { git = "https://git@github.com/KeystoneHQ/keystone-sdk-rust.git", branch = "support_crypto_extend" }
+ur-registry = { git = "https://git@github.com/KeystoneHQ/keystone-sdk-rust.git", tag = "0.0.52" }
+ur-parse-lib = { git = "https://git@github.com/KeystoneHQ/keystone-sdk-rust.git", tag = "0.0.52" }
ed25519-bip32-core = { version = "0.1.1", default-features = false }
cryptoxide = "0.4"
arrayref = "0.3.6"
Why this scored 10/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.