What the developer wrote
Authored by yancy
fuzz: update to target 0.32.102
What changed, and why it matters
This commit is a routine dependency update for the project's fuzz testing setup. It bumps the version of the 'bitcoin' crate used in fuzz tests from 0.32.101 to 0.32.102 and updates the corresponding lock files. There are no code changes to the library itself, and nothing in the commit suggests a security fix or vulnerability.
No security action needed. Treat as routine maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates fuzz/Cargo.toml and both Cargo-minimal.lock and Cargo-recent.lock to depend on bitcoin crate version 0.32.102 instead of 0.32.101. The lock file also drops some now-unused older transitive dependencies (bitcoin-private, bitcoin_hashes 0.12.0) as a result of the newer version. This is a maintenance-only change confined to the fuzz testing harness; no source code in the main library is modified.
Changed components
fuzz/Cargo.tomlCargo-minimal.lockCargo-recent.lockInspect captured patch +8 / −23
diff --git a/Cargo-minimal.lock b/Cargo-minimal.lock
index 36e59fae..03b1c399 100644
--- a/Cargo-minimal.lock
+++ b/Cargo-minimal.lock
@@ -56,9 +56,9 @@ dependencies = [
[[package]]
name = "bitcoin"
-version = "0.32.101"
+version = "0.32.102"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ed8ccb78a9ff7a6fbb90e2fb9b8588b4a9928d49d8af3cb789108a84ea6b0ce"
+checksum = "bb0ce8bd5baaa0d303a19915a6d93afed161f528654e42da2a7a97d05c59499a"
dependencies = [
"base58ck 0.1.101",
"bech32",
@@ -154,7 +154,7 @@ name = "bitcoin-fuzz"
version = "0.0.1"
dependencies = [
"arbitrary",
- "bitcoin 0.32.101",
+ "bitcoin 0.32.102",
"bitcoin 0.33.0-beta",
"bitcoin-consensus-encoding 1.1.0",
"bitcoin-p2p-messages",
@@ -259,12 +259,6 @@ dependencies = [
"serde_json",
]
-[[package]]
-name = "bitcoin-private"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73290177011694f38ec25e165d0387ab7ea749a4b81cd4c80dae5988229f7a57"
-
[[package]]
name = "bitcoin-taproot-primitives"
version = "0.1.0"
@@ -300,15 +294,6 @@ dependencies = [
"serde_test",
]
-[[package]]
-name = "bitcoin_hashes"
-version = "0.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d7066118b13d4b20b23645932dfb3a81ce7e29f95726c2036fa33cd7b092501"
-dependencies = [
- "bitcoin-private",
-]
-
[[package]]
name = "bitcoin_hashes"
version = "0.14.101"
@@ -522,7 +507,7 @@ version = "0.29.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0e0cc0f1cf93f4969faf3ea1c7d8a9faed25918d96affa959720823dfe86d4f3"
dependencies = [
- "bitcoin_hashes 0.12.0",
+ "bitcoin_hashes 0.14.101",
"secp256k1-sys 0.10.0",
"serde",
]
diff --git a/Cargo-recent.lock b/Cargo-recent.lock
index 54c70d02..80542d51 100644
--- a/Cargo-recent.lock
+++ b/Cargo-recent.lock
@@ -55,9 +55,9 @@ dependencies = [
[[package]]
name = "bitcoin"
-version = "0.32.101"
+version = "0.32.102"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ed8ccb78a9ff7a6fbb90e2fb9b8588b4a9928d49d8af3cb789108a84ea6b0ce"
+checksum = "bb0ce8bd5baaa0d303a19915a6d93afed161f528654e42da2a7a97d05c59499a"
dependencies = [
"base58ck 0.1.101",
"bech32",
@@ -153,7 +153,7 @@ name = "bitcoin-fuzz"
version = "0.0.1"
dependencies = [
"arbitrary",
- "bitcoin 0.32.101",
+ "bitcoin 0.32.102",
"bitcoin 0.33.0-beta",
"bitcoin-consensus-encoding 1.1.0",
"bitcoin-p2p-messages",
diff --git a/fuzz/Cargo.toml b/fuzz/Cargo.toml
index 916556fa..9d83382c 100644
--- a/fuzz/Cargo.toml
+++ b/fuzz/Cargo.toml
@@ -13,7 +13,7 @@ cargo-fuzz = true
# We shouldn't need an explicit version on the next line, but Andrew's tools
# choke on it otherwise. See https://github.com/nix-community/crate2nix/issues/373
bitcoin = { path = "../bitcoin", version = "0.33.0-beta", features = [ "serde", "arbitrary" ] }
-bitcoin_0_32 = { version = "0.32.101", package = "bitcoin", features = [ "encoding", "serde" ] }
+bitcoin_0_32 = { version = "0.32.102", package = "bitcoin", features = [ "encoding", "serde" ] }
bitcoin_consensus_encoding = { path = "../consensus_encoding", package = "bitcoin-consensus-encoding" }
p2p = { path = "../p2p", package = "bitcoin-p2p-messages", features = ["arbitrary"] }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.