Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
<details> <summary>Dependabot commands and options</summary> <br />
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
ACKs for top commit: apoelstra: ACK b00197e524ddf3bb7152317cf187a213788c7366; successfully ran local tests
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference✓ Names security-relevant behavior explicitly
The short version
What changed, and why it matters
This is a routine Dependabot update that bumps a GitHub Actions helper (taiki-e/install-action) used only in automated testing workflows. The change does not touch the project's actual Bitcoin library code, and there is no indication it fixes or introduces a security issue.
Recommended action
No security action required. Treat as normal maintenance; verify CI passes before merging.
Security signals we found
No strong security signals were identified.
Technical analysis
Evidence from the diff
The commit updates the pinned version of taiki-e/install-action from 2.81.10 to 2.82.0 in two CI workflow files. This action is used solely to install the cargo-mutants mutation-testing tool during scheduled and PR workflows. The diff contains no changes to Rust source, dependencies consumed by the library, or release artifacts. The upstream release notes list only new tool support and routine version bumps for unrelated tools.
This commit only changes documentation comments and deprecation note formatting in the rust-bitcoin library. It replaces some inline Markdown-style links with separate reference-style link definitions, adds missing punctuation, and removes…
This commit is a routine update of the GitHub Actions checkout tool used by the project's automated testing and release pipelines. It does not change the Rust Bitcoin library code that users install. The new version of the checkout action …
Dependency bump of actions/checkout to v7.0.0Upstream v7.0.0 blocks fork PR checkout for pull_request_target/workflow_run by defaultAll workflows in diff use persist-credentials: false
This commit fixes a bug where certain unusual text inputs containing non-ASCII characters (like 'é') could crash the program when parsing Bitcoin 'Target' or 'Work' values from hexadecimal strings. The code was measuring string length in b…
Panic on untrusted input reachable through public parsing APIsString slicing by byte offset without ASCII validationDenial-of-service vector via malformed hex string