What the developer wrote
Authored by Tobin C. Harding
bitcoin: Depend on encoding 1.1.0
The `bitcoin` crate uses the `hex` feature of `encoding` which only
came out in `1.1.0` so we need to explicitly depend on that version.
What changed, and why it matters
This is a routine dependency version bump in a Rust package manifest. The bitcoin crate was already using a feature ('hex') from its internal encoding crate, but the manifest only required version 1.0.0. Since that feature was added in version 1.1.0, the requirement is being corrected to 1.1.0. There is no security-relevant code change here.
No security action needed. Treat as a normal dependency metadata correction.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates bitcoin/Cargo.toml to require bitcoin-consensus-encoding version 1.1.0 instead of 1.0.0. The ‘hex’ feature used by the bitcoin crate was introduced in 1.1.0, so the previous minimum version was technically too low. This is a build/dependency metadata fix, not a runtime code change, and it does not alter any cryptographic, consensus, or network behavior.
Changed components
bitcoin/Cargo.tomlInspect captured patch +1 / −1
diff --git a/bitcoin/Cargo.toml b/bitcoin/Cargo.toml
index 08031fd1..9af7ca8c 100644
--- a/bitcoin/Cargo.toml
+++ b/bitcoin/Cargo.toml
@@ -32,7 +32,7 @@ bech32 = { version = "0.11.0", default-features = false, features = ["alloc"] }
crypto = { package = "bitcoin-crypto", path = "../crypto", version = "0.2.0", default-features = false, features = ["alloc", "hex"] }
hashes = { package = "bitcoin_hashes", path = "../hashes", version = "1.1.0", default-features = false, features = ["alloc", "hex"] }
key-expression = { package = "bitcoin-key-expression", path = "../key_expression", version = "0.1.0", default-features = false, features = ["alloc"] }
-encoding = { package = "bitcoin-consensus-encoding", path = "../consensus_encoding", version = "1.0.0", default-features = false, features = ["alloc", "hex"] }
+encoding = { package = "bitcoin-consensus-encoding", path = "../consensus_encoding", version = "1.1.0", default-features = false, features = ["alloc", "hex"] }
hex = { package = "hex-conservative", version = "1.1.0", default-features = false, features = ["alloc"] }
internals = { package = "bitcoin-internals", path = "../internals", version = "0.6.0", features = ["alloc"] }
io = { package = "bitcoin-io", path = "../io", version = "0.6.0", default-features = false, features = ["alloc", "hashes"] }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.