What the developer wrote
Authored by Tobin C. Harding
Pin cargo public-api version
When cargo-public-api releases a new version with a super new nightly
requirement it breaks our CI for not a lot of added value. Lets pin
the version and go right ahead and remember to update
`cargo-public-api` at some stage.
What changed, and why it matters
This commit pins the version of a CI tool (cargo-public-api) used to check whether the project's public programming interface has changed. It is a build-maintenance change to prevent unexpected CI failures when the tool releases new versions requiring newer Rust compilers. There is no security issue in the code change itself.
No security action needed. This is a routine CI reliability improvement. Continue normal dependency update practices for cargo-public-api.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies .github/workflows/rust.yml to install cargo-public-api version 0.49.0 explicitly instead of installing the latest version. This avoids CI breakage caused by upstream releases that depend on newer Rust nightly toolchains than the pinned nightly used in this workflow. The change affects only the GitHub Actions CI pipeline and has no runtime or cryptographic implications for the rust-bitcoin library.
Changed components
.github/workflows/rust.ymlInspect captured patch +1 / −1
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index a795c603..460ecaeb 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -319,6 +319,6 @@ jobs:
with:
toolchain: ${{ needs.Prepare.outputs.nightly_version }}
- name: "Install cargo-public-api"
- run: cargo install --locked cargo-public-api
+ run: cargo install --locked cargo-public-api --version 0.49.0
- name: "Run API checker script"
run: ./contrib/check-for-api-changes.sh
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.