primitives: Group and document option hex deps
What the developer wrote
Authored by Tobin C. Harding
primitives: Group and document option hex deps
Because I got confused just now group the optional hex deps and
comment that they are not typically used directly.
What changed, and why it matters
This commit is purely a housekeeping change in a Rust package configuration file. It reorders three optional dependency lines and adds a comment explaining that two of them are not meant to be used directly. There is no code change, no behavior change, and no security relevance.
No action needed. This is a non-functional documentation/organization change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies primitives/Cargo.toml only. It moves the optional serde dependency above the hex-stable and hex-unstable optional dependencies and inserts a comment: “You probably don’t want to use these directly, consider using the hex feature.” No versions, features, or dependency semantics are changed.
Changed components
primitives/Cargo.tomlInspect captured patch +2 / −1
diff --git a/primitives/Cargo.toml b/primitives/Cargo.toml
index 1b0bbba3..041fe70b 100644
--- a/primitives/Cargo.toml
+++ b/primitives/Cargo.toml
@@ -27,9 +27,10 @@ internals = { package = "bitcoin-internals", path = "../internals", version = "0
units = { package = "bitcoin-units", path = "../units", version = "0.3.0", default-features = false, features = [ "encoding" ] }
arbitrary = { version = "1.4.1", optional = true }
+serde = { version = "1.0.195", default-features = false, features = ["derive", "alloc"], optional = true }
+# You probably don't want to use these directly, consider using the `hex` feature.
hex-stable = { package = "hex-conservative", version = "1.0.0", default-features = false, optional = true }
hex-unstable = { package = "hex-conservative", version = "0.3.0", default-features = false, optional = true }
-serde = { version = "1.0.195", default-features = false, features = ["derive", "alloc"], optional = true }
[dev-dependencies]
serde_json = "1.0.68"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.