io: Add version number to all dependencies
What changed, and why it matters
This commit is a routine packaging fix for the rust-bitcoin project's `io` subcrate. It adds missing version numbers to internal dependencies in the crate's manifest file (Cargo.toml) so the crate can be published to the Rust package registry. There is no code change, no security fix, and no vulnerability addressed.
No security action needed. This is a build/publishing maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies io/Cargo.toml only, adding explicit version fields to path-based dependencies (bitcoin-internals, bitcoin_hashes) and a dev-dependency (bitcoin_hashes). The commit message states this is required for publishing to crates.io and fixes a failed release of io v0.3.0. No source code, logic, or API surface changed.
Changed components
io/Cargo.tomlInspect captured patch +3 / −3
diff --git a/io/Cargo.toml b/io/Cargo.toml
index b8698dae..7d0d2e5b 100644
--- a/io/Cargo.toml
+++ b/io/Cargo.toml
@@ -19,13 +19,13 @@ std = ["alloc", "encoding/std", "hashes?/std", "internals/std"]
alloc = ["encoding/alloc", "hashes?/alloc", "internals/alloc"]
[dependencies]
-internals = { package = "bitcoin-internals", path = "../internals" }
+internals = { package = "bitcoin-internals", path = "../internals", version = "0.4.1" }
encoding = { package = "bitcoin-consensus-encoding", path = "../consensus_encoding", version = "1.0.0-rc.2", default-features = false }
-hashes = { package = "bitcoin_hashes", path = "../hashes", default-features = false, optional = true }
+hashes = { package = "bitcoin_hashes", path = "../hashes", version = "0.18.0", default-features = false, optional = true }
[dev-dependencies]
-hashes = { package = "bitcoin_hashes", path = "../hashes", default-features = false, features = ["hex"] }
+hashes = { package = "bitcoin_hashes", path = "../hashes", version = "0.18.0", default-features = false, features = ["hex"] }
[package.metadata.docs.rs]
all-features = true
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.