What the developer wrote
Authored by Tobin C. Harding
fuzz: Fix stale script
As usual the `generate-files.sh` script is stale. Update it using the
contents of `fuzz/Cargo.toml` so that running script produces no changes.
What changed, and why it matters
This commit updates version numbers and commit hashes inside a fuzz-testing shell script that generates GitHub Actions workflow files. It is a routine maintenance change to keep the generated CI configuration in sync with the project's current dependencies. There is no change to the actual Bitcoin library code, no user-facing behavior change, and no security fix.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies fuzz/generate-files.sh, a generator script for fuzzing CI workflows. It bumps pinned GitHub Actions (actions/checkout v5.0.0 -> v6.0.2, actions/cache v5.0.0 -> v5.0.5) and their corresponding commit SHA pins. No Rust source, tests, or cryptographic code is touched. The commit message explicitly describes the change as fixing a stale generation script so that re-running it produces no diff.
Changed components
fuzz/generate-files.shInspect captured patch +3 / −3
diff --git a/fuzz/generate-files.sh b/fuzz/generate-files.sh
index d36e048a..dd0f87a5 100755
--- a/fuzz/generate-files.sh
+++ b/fuzz/generate-files.sh
@@ -103,10 +103,10 @@ $(for name in $(cargo fuzz list); do echo " $name,"; done)
steps:
- name: Install test dependencies
run: sudo apt-get update -y && sudo apt-get install -y binutils-dev libunwind8-dev libcurl4-openssl-dev libelf-dev libdw-dev cmake gcc libiberty-dev
- - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
+ - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
id: cache-fuzz
with:
path: |
@@ -136,7 +136,7 @@ $(for name in $(cargo fuzz list); do echo " $name,"; done)
permissions:
contents: read
steps:
- - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.