hashes: Add explicit version to internals dep
What changed, and why it matters
This commit is a routine packaging change for the rust-bitcoin library. It adds an explicit version number to an internal dependency so the crate can be published to the Rust package registry. There is no security issue in the change itself.
No security action needed. Treat as normal maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies hashes/Cargo.toml to add version = “0.4.1” to the bitcoin-internals dependency, which previously only specified a local path. This is required by crates.io publishing rules when a path dependency also needs a version. The dependency remains the same code; only metadata changed.
Changed components
hashes/Cargo.tomlInspect captured patch +1 / −1
diff --git a/hashes/Cargo.toml b/hashes/Cargo.toml
index 35f55df1..86c944de 100644
--- a/hashes/Cargo.toml
+++ b/hashes/Cargo.toml
@@ -22,7 +22,7 @@ serde = ["dep:serde", "hex"]
small-hash = []
[dependencies]
-internals = { package = "bitcoin-internals", path = "../internals" }
+internals = { package = "bitcoin-internals", path = "../internals", version = "0.4.1" }
hex = { package = "hex-conservative", version = "0.3.0", default-features = false, optional = true }
serde = { version = "1.0.195", default-features = false, optional = true }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.