← Watch feed
Merge rust-bitcoin/rust-bitcoin#6713: build(deps): bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0
Public commit record
96/100 · Strong
What the developer wrote
Authored by Andrew Poelstra
Merge rust-bitcoin/rust-bitcoin#6713: build(deps): bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0
3fdbd379ed7c29d2a576cc9263582a9933212f90 build(deps): bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0 (dependabot[bot])
Pull request description:
Bumps [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall) from 1.19.1 to 1.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/cargo-bins/cargo-binstall/releases">cargo-bins/cargo-binstall's releases</a>.</em></p>
<blockquote>
<h2>v1.20.0</h2>
<p><em>Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for <code>cargo install</code> in most cases. Install it today with <code>cargo install cargo-binstall</code>, from the binaries below, or if you already have it, upgrade with <code>cargo binstall cargo-binstall</code>.</em></p>
<h4>In this release:</h4>
<ul>
<li>Fix IPv6 DNS issue for macOS (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2574">#2574</a> <a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2567">#2567</a> <a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2579">#2579</a>)</li>
<li>Add <code>os-name</code> template variable for <code>pkg-url</code> and <code>bin-dir</code> (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2328">#2328</a> <a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2570">#2570</a>)</li>
<li>Remove quad9 dns fallback (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2572">#2572</a>)</li>
</ul>
<h4>Other changes:</h4>
<ul>
<li>Upgrade dependencies</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/30b5ca8b54e1dcffd9548bc87ede1531310fdc67"><code>30b5ca8</code></a> release: cargo-binstall v1.20.0 (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2583">#2583</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/bdd791de5adfec6407aee16a3b287f12ba0ef2d8"><code>bdd791d</code></a> chore: release (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2565">#2565</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/657ff6595f9080d94bd696e3656fa7f84152adcf"><code>657ff65</code></a> build(deps): bump netdev from 0.43.0 to 0.44.0 in the deps group (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2581">#2581</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/280a9357bf131d957a090c390bf426ed086fa405"><code>280a935</code></a> dep: Upgrade transitive dependencies (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2580">#2580</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/ad6ae0185bd1663c6fbd1c4efa0c82d8105a5716"><code>ad6ae01</code></a> bugfix: IPv6 DNS issue (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2579">#2579</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/f8810ffa11196f23afb38e6fb64716fbf814ad8f"><code>f8810ff</code></a> dep: Upgrade transitive dependencies (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2578">#2578</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/f9b4c532b4655a9c9c00a50db9b48b265c32a055"><code>f9b4c53</code></a> Remove quad9 dns fallback (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2572">#2572</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/7884deddd95d515c3701294cf61a8b96cccc123b"><code>7884ded</code></a> dep: Upgrade transitive dependencies (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2571">#2571</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/1c2b96c2b86875d56caeec7b7ee9980812daf0d9"><code>1c2b96c</code></a> feat: add os-name template variable for pkg-url and bin-dir (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2570">#2570</a>)</li>
<li><a href="https://github.com/cargo-bins/cargo-binstall/commit/7c6d6446dab5843b9ab70840f15fbad89e729fbd"><code>7c6d644</code></a> dep: Upgrade transitive dependencies (<a href="https://redirect.github.com/cargo-bins/cargo-binstall/issues/2569">#2569</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/cargo-bins/cargo-binstall/compare/aaa84a43aec4955a42c5ffc65d258961e39f276e...30b5ca8b54e1dcffd9548bc87ede1531310fdc67">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
ACKs for top commit:
apoelstra:
ACK 3fdbd379ed7c29d2a576cc9263582a9933212f90; successfully ran local tests
Tree-SHA512: 8a4ee41d3c68ea93c655aae94ff628076b3041b3f329a88cf9baedc4fae1da648839cee69fbc0d151d61eac39c64585f66cf4e068d30c3f308480e78120705b2
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference✓ Names security-relevant behavior explicitly
What changed, and why it matters
This is a routine update to a GitHub Actions workflow that bumps the version of a helper tool called cargo-binstall from 1.19.1 to 1.20.0. The tool is only used during automated version-compatibility checks in CI and is not part of the actual rust-bitcoin library that users install. There is no indication this update fixes or introduces a security problem in the project itself.
Recommended action
No security action required. Treat as a normal dependency-maintenance update for CI tooling.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit changes a single pinned GitHub Action reference in .github/workflows/semver-checks.yml from cargo-bins/cargo-binstall@aaa84a43 (v1.19.1) to cargo-bins/cargo-binstall@30b5ca8b (v1.20.0). cargo-binstall is used only in CI to install cargo-semver-checks for running semantic-versioning checks. The upstream release notes mention an IPv6 DNS bugfix, an os-name template variable feature, removal of a Quad9 DNS fallback, and dependency upgrades. None of these are described as security fixes, and the change does not affect the published rust-bitcoin crate or its dependencies.
Changed components
.github/workflows/semver-checks.ymlInspect captured patch +1 / −1
### .github/workflows/semver-checks.yml
@@ -28,7 +28,7 @@ jobs:
run: |
rustup default $(cargo metadata --format-version 1 | jq -r '.metadata.rbmt.toolchains.stable')
- name: "Install cargo-binstall"
- uses: cargo-bins/cargo-binstall@aaa84a43aec4955a42c5ffc65d258961e39f276e # v1.19.1
+ uses: cargo-bins/cargo-binstall@30b5ca8b54e1dcffd9548bc87ede1531310fdc67 # v1.20.0
- name: "Binstall pinned cargo-semver-checks"
run: cargo binstall cargo-semver-checks@$(cat ./.github/workflows/cargo-semver-checks-version) --no-confirm
- name: "Run semver checks"Risk score
Our methodology →Why this scored 15/100
Human-validated context
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
No validated notes yet.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.