chore: point ur-registry at upstream SDK rev
What the developer wrote
Authored by Adam Tucker
chore: point ur-registry at upstream SDK rev
The Zcash batch registry types have merged into the upstream
keystone-sdk-rust repo, so the valargroup fork pin is no longer needed.
Repoint ur-registry to the upstream rev that carries them.
What changed, and why it matters
This commit simply switches a software dependency from a temporary community fork back to the project's own official upstream repository. The code being used is the same feature (Zcash batch registry support); it has just been merged into the official repo. There is no indication of a security problem, fix, or vulnerability.
No security action needed. Treat as routine dependency maintenance. If desired, verify that upstream rev 0884de4b2e927bc3f95a98dff62045e0d492e574 contains the expected Zcash batch registry types and that the lockfile checksum matches.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change updates the ur-registry dependency in rust/Cargo.toml and rust/Cargo.lock from a Git pin on valargroup/keystone-sdk-rust (rev 630b7cd4) to a Git pin on KeystoneHQ/keystone-sdk-rust (rev 0884de4b). The commit message explains that the Zcash batch registry types previously only available in the fork have now merged upstream, so the fork pin is no longer necessary. No source code logic is modified.
Changed components
rust/Cargo.tomlrust/Cargo.lockInspect captured patch +3 / −3
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 83a2bd1..ef98ac9 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -4811,7 +4811,7 @@ dependencies = [
[[package]]
name = "ur-registry"
version = "1.0.5"
-source = "git+https://github.com/valargroup/keystone-sdk-rust.git?rev=630b7cd4c92a3473b472ecbe8a7030fed16ce2c4#630b7cd4c92a3473b472ecbe8a7030fed16ce2c4"
+source = "git+https://github.com/KeystoneHQ/keystone-sdk-rust.git?rev=0884de4b2e927bc3f95a98dff62045e0d492e574#0884de4b2e927bc3f95a98dff62045e0d492e574"
dependencies = [
"bs58",
"hex",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 71059b6..f0f533a 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -130,5 +130,5 @@ zcash_keys = { git = "https://github.com/valargroup/librustzcash", rev = "dc95dc
zcash_primitives = { git = "https://github.com/valargroup/librustzcash", rev = "dc95dcef33a081b925db551eac8bf6533fff22ed" }
zcash_protocol = { git = "https://github.com/valargroup/librustzcash", rev = "dc95dcef33a081b925db551eac8bf6533fff22ed" }
zcash_transparent = { git = "https://github.com/valargroup/librustzcash", rev = "dc95dcef33a081b925db551eac8bf6533fff22ed" }
-# Use the SDK fork for Zcash batch registry types until they are available from the published crate.
-ur-registry = { git = "https://github.com/valargroup/keystone-sdk-rust.git", rev = "630b7cd4c92a3473b472ecbe8a7030fed16ce2c4" }
+# Use the upstream SDK rev with the Zcash batch registry types until they are published as a crate.
+ur-registry = { git = "https://github.com/KeystoneHQ/keystone-sdk-rust.git", rev = "0884de4b2e927bc3f95a98dff62045e0d492e574" }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.