What changed, and why it matters
This commit simply deletes two helper shell scripts from the contrib/ directory that were used by the project's internal CI tooling. There is no change to the actual Rust Bitcoin library code, no change to how the software behaves at runtime, and no security relevance.
No action required. This is a routine repository maintenance commit with no security implications.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit removes contrib/crates.sh (which generated a list of workspace crates from cargo metadata) and contrib/whitelist_deps.sh (which defined a list of duplicate dependencies allowed in the workspace). These were pre-cargo-rbmt configuration files used by the maintainer-tools CI scripts. Their removal is a cleanup of obsolete build/CI scaffolding and does not affect the library’s API, dependencies, or runtime behavior.
Changed components
contrib/crates.shcontrib/whitelist_deps.shInspect captured patch +0 / −26
diff --git a/contrib/crates.sh b/contrib/crates.sh
deleted file mode 100644
index a4fa95e2..00000000
--- a/contrib/crates.sh
+++ /dev/null
@@ -1,16 +0,0 @@
-# Sourced by `rust-bitcoin-maintainer-tools/ci/run_task.sh`.
-#
-# No shebang, this file should not be executed.
-# shellcheck disable=SC2148
-#
-# disable verify unused vars, despite the fact that they are used when sourced
-# shellcheck disable=SC2034
-
-REPO_DIR=$(git rev-parse --show-toplevel)
-
-# Generates the crates list based on cargo workspace metadata.
-function generate_crates_list() {
- cargo metadata --no-deps --format-version 1 | jq -j -r '.packages | map(.manifest_path | rtrimstr("/Cargo.toml") | ltrimstr("'"$REPO_DIR"'/")) | join(" ")'
-}
-
-CRATES=$(generate_crates_list)
diff --git a/contrib/whitelist_deps.sh b/contrib/whitelist_deps.sh
deleted file mode 100644
index cb4a22b1..00000000
--- a/contrib/whitelist_deps.sh
+++ /dev/null
@@ -1,10 +0,0 @@
-# No shebang, this file should not be executed.
-# shellcheck disable=SC2148
-#
-# disable verify unused vars, despite the fact that they are used when sourced
-# shellcheck disable=SC2034
-
-# - hashes because of secp v0.30
-# - io because of hashes
-# - hex because 1.0 only has decoding
-DUPLICATE_DEPS=("bitcoin_hashes" "hex-conservative" "bitcoin-io")
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.