Upgrade hex-conservative 0.3.* to 0.3.2

Rust Bitcoin/rust-bitcoin

e3868dfc View source ↗

Public commit record

What the developer wrote

Authored by Nick Johnson

45/100 · Thin

Upgrade hex-conservative 0.3.* to 0.3.2

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

The short version

What changed, and why it matters

This commit only bumps the version of a small helper library (hex-conservative) used for converting bytes to and from hexadecimal strings. No code behavior in rust-bitcoin itself is changed, and the commit message gives no indication that this is a security fix.

Recommended action

No immediate action is required. If maintaining a downstream dependency tree, review the hex-conservative 0.3.2 release notes or changelog to confirm whether the upstream patch contains any security fixes worth tracking.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff is a pure dependency version bump from hex-conservative 0.3.0 to 0.3.2 across Cargo.toml and lock files. No source code, APIs, or logic in rust-bitcoin are modified. The commit message does not describe security relevance, and no advisory or changelog for hex-conservative 0.3.2 was supplied. Without external information about what changed in hex-conservative between 0.3.0 and 0.3.2, this cannot be classified as a security patch.

Changed components

Cargo dependency metadata for hex-conservative

Inspect captured patch +25 / −25

diff --git a/Cargo-minimal.lock b/Cargo-minimal.lock
index e2267a74..ef39a09a 100644
--- a/Cargo-minimal.lock
+++ b/Cargo-minimal.lock
@@ -62,7 +62,7 @@ dependencies = [
  "bitcoin-units",
  "bitcoin_hashes",
  "bitcoinconsensus",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "secp256k1",
@@ -84,7 +84,7 @@ name = "bitcoin-consensus-encoding"
 version = "0.1.0"
 dependencies = [
  "bitcoin-internals",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
 ]
 
 [[package]]
@@ -110,7 +110,7 @@ name = "bitcoin-internals"
 version = "0.5.0"
 dependencies = [
  "bincode",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "serde",
  "serde_json",
 ]
@@ -151,7 +151,7 @@ dependencies = [
  "bitcoin-primitives",
  "bitcoin-units",
  "bitcoin_hashes",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "serde",
@@ -167,7 +167,7 @@ dependencies = [
  "bitcoin-internals",
  "bitcoin-units",
  "bitcoin_hashes",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "serde",
@@ -194,7 +194,7 @@ dependencies = [
  "bitcoin-consensus-encoding",
  "bitcoin-internals",
  "cpufeatures",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "serde",
  "serde_test",
@@ -237,7 +237,7 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 name = "chacha20-poly1305"
 version = "0.1.2"
 dependencies = [
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
 ]
 
 [[package]]
@@ -263,9 +263,9 @@ dependencies = [
 
 [[package]]
 name = "hex-conservative"
-version = "0.3.0"
+version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4afe881d0527571892c4034822e59bb10c6c991cce6abe8199b6f5cf10766f55"
+checksum = "830e599c2904b08f0834ee6337d8fe8f0ed4a63b5d9e7a7f49c0ffa06d08d360"
 dependencies = [
  "arrayvec",
 ]
diff --git a/Cargo-recent.lock b/Cargo-recent.lock
index 66dd7f12..68b9b6f5 100644
--- a/Cargo-recent.lock
+++ b/Cargo-recent.lock
@@ -61,7 +61,7 @@ dependencies = [
  "bitcoin-units",
  "bitcoin_hashes",
  "bitcoinconsensus",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "secp256k1",
@@ -83,7 +83,7 @@ name = "bitcoin-consensus-encoding"
 version = "0.1.0"
 dependencies = [
  "bitcoin-internals",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
 ]
 
 [[package]]
@@ -109,7 +109,7 @@ name = "bitcoin-internals"
 version = "0.5.0"
 dependencies = [
  "bincode",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "serde",
  "serde_json",
 ]
@@ -150,7 +150,7 @@ dependencies = [
  "bitcoin-primitives",
  "bitcoin-units",
  "bitcoin_hashes",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "serde",
@@ -166,7 +166,7 @@ dependencies = [
  "bitcoin-internals",
  "bitcoin-units",
  "bitcoin_hashes",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "hex_lit",
  "serde",
@@ -193,7 +193,7 @@ dependencies = [
  "bitcoin-consensus-encoding",
  "bitcoin-internals",
  "cpufeatures",
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
  "hex-conservative 1.0.0",
  "serde",
  "serde_test",
@@ -235,7 +235,7 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 name = "chacha20-poly1305"
 version = "0.1.2"
 dependencies = [
- "hex-conservative 0.3.0",
+ "hex-conservative 0.3.2",
 ]
 
 [[package]]
@@ -261,9 +261,9 @@ dependencies = [
 
 [[package]]
 name = "hex-conservative"
-version = "0.3.0"
+version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4afe881d0527571892c4034822e59bb10c6c991cce6abe8199b6f5cf10766f55"
+checksum = "830e599c2904b08f0834ee6337d8fe8f0ed4a63b5d9e7a7f49c0ffa06d08d360"
 dependencies = [
  "arrayvec",
 ]
diff --git a/bitcoin/Cargo.toml b/bitcoin/Cargo.toml
index 7874ede5..804aca6b 100644
--- a/bitcoin/Cargo.toml
+++ b/bitcoin/Cargo.toml
@@ -30,7 +30,7 @@ bech32 = { version = "0.11.0", default-features = false, features = ["alloc"] }
 hashes = { package = "bitcoin_hashes", path = "../hashes", version = "0.20.0", default-features = false, features = ["alloc", "hex"] }
 encoding = { package = "bitcoin-consensus-encoding", path = "../consensus_encoding", version = "0.1.0", default-features = false, features = ["alloc"] }
 hex-stable = { package = "hex-conservative", version = "1.0.0", default-features = false, features = ["alloc"] }
-hex-unstable = { package = "hex-conservative", version = "0.3.0", default-features = false, features = ["alloc"] }
+hex-unstable = { package = "hex-conservative", version = "0.3.2", default-features = false, features = ["alloc"] }
 internals = { package = "bitcoin-internals", path = "../internals", version = "0.5.0", features = ["alloc", "hex"] }
 io = { package = "bitcoin-io", path = "../io", version = "0.5.0", default-features = false, features = ["alloc", "hashes"] }
 network = { package = "bitcoin-network-kind", path = "../network", version = "0.1.0", default-features = false, features = ["alloc"]}
diff --git a/chacha20_poly1305/Cargo.toml b/chacha20_poly1305/Cargo.toml
index c096ae06..b0a6a0e4 100644
--- a/chacha20_poly1305/Cargo.toml
+++ b/chacha20_poly1305/Cargo.toml
@@ -18,7 +18,7 @@ std = ["alloc"]
 alloc = []
 
 [dev-dependencies]
-hex = { package = "hex-conservative", version = "0.3.0", default-features = false, features = ["alloc"] }
+hex = { package = "hex-conservative", version = "0.3.2", default-features = false, features = ["alloc"] }
 
 [package.metadata.docs.rs]
 all-features = true
diff --git a/consensus_encoding/Cargo.toml b/consensus_encoding/Cargo.toml
index cac236e0..25558363 100644
--- a/consensus_encoding/Cargo.toml
+++ b/consensus_encoding/Cargo.toml
@@ -23,7 +23,7 @@ alloc = ["internals/alloc"]
 internals = { package = "bitcoin-internals", path = "../internals", version = "0.5.0" }
 
 [dev-dependencies]
-hex = { package = "hex-conservative", version = "0.3.0" }
+hex = { package = "hex-conservative", version = "0.3.2" }
 
 [package.metadata.docs.rs]
 all-features = true
diff --git a/hashes/Cargo.toml b/hashes/Cargo.toml
index a58bfe16..65007bcf 100644
--- a/hashes/Cargo.toml
+++ b/hashes/Cargo.toml
@@ -31,7 +31,7 @@ cpufeatures = { version = "0.2", optional = true }
 
 # You likely don't want to enable these directly, use hex instead.
 hex-stable = { package = "hex-conservative", version = "1.0.0", default-features = false, optional = true }
-hex-unstable = { package = "hex-conservative", version = "0.3.0", default-features = false, optional = true }
+hex-unstable = { package = "hex-conservative", version = "0.3.2", default-features = false, optional = true }
 
 [dev-dependencies]
 serde_test = "1.0.19"
diff --git a/internals/Cargo.toml b/internals/Cargo.toml
index f652348f..6b0a247b 100644
--- a/internals/Cargo.toml
+++ b/internals/Cargo.toml
@@ -21,7 +21,7 @@ alloc = ["hex?/alloc"]
 test-serde = ["serde", "serde_json", "bincode"]
 
 [dependencies]
-hex = { package = "hex-conservative", version = "0.3.0", default-features = false, optional = true }
+hex = { package = "hex-conservative", version = "0.3.2", default-features = false, optional = true }
 serde = { version = "1.0.195", default-features = false, optional = true }
 
 # Don't enable these directly, use `test-serde` feature instead.
diff --git a/p2p/Cargo.toml b/p2p/Cargo.toml
index 164414bb..8e5be39d 100644
--- a/p2p/Cargo.toml
+++ b/p2p/Cargo.toml
@@ -25,7 +25,7 @@ hashes = { package = "bitcoin_hashes", version = "0.20.0", path = "../hashes", d
 network = { package = "bitcoin-network-kind", path = "../network", version = "0.1.0", default-features = false }
 primitives = { package = "bitcoin-primitives", path = "../primitives", version = "0.102.0", default-features = false }
 hex-stable = { package = "hex-conservative", version = "1.0.0", default-features = false, features = ["alloc"] }
-hex-unstable = { package = "hex-conservative", version = "0.3.0", default-features = false }
+hex-unstable = { package = "hex-conservative", version = "0.3.2", default-features = false }
 internals = { package = "bitcoin-internals", path = "../internals", default-features = false }
 io = { package = "bitcoin-io", version = "0.5.0", path = "../io", default-features = false }
 units = { package = "bitcoin-units", path = "../units", version = "0.3.0", default-features = false }
diff --git a/primitives/Cargo.toml b/primitives/Cargo.toml
index 041fe70b..d1e35162 100644
--- a/primitives/Cargo.toml
+++ b/primitives/Cargo.toml
@@ -30,7 +30,7 @@ arbitrary = { version = "1.4.1", optional = true }
 serde = { version = "1.0.195", default-features = false, features = ["derive", "alloc"], optional = true }
 # You probably don't want to use these directly, consider using the `hex` feature.
 hex-stable = { package = "hex-conservative", version = "1.0.0", default-features = false, optional = true }
-hex-unstable = { package = "hex-conservative", version = "0.3.0", default-features = false, optional = true }
+hex-unstable = { package = "hex-conservative", version = "0.3.2", default-features = false, optional = true }
 
 [dev-dependencies]
 serde_json = "1.0.68"

Risk score

Why this scored 3/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 2/10

Evidence quality 1/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 3/100

Community notes

Related watches

Merge rust-bitcoin/rust-bitcoin#6671: units: reword docs from height to count in relative locktime

Merge rust-bitcoin/rust-bitcoin#6670: ci: fix labeller permissions

Merge rust-bitcoin/rust-bitcoin#6657: Release tracking PR: `base58ck 0.5.0`