bitcoin: Add explicit version numbers to deps
What the developer wrote
Authored by Tobin C. Harding
bitcoin: Add explicit version numbers to deps
In order to release we have to have explicit version numbers for all
dependencies.
What changed, and why it matters
This commit only adds explicit version numbers to internal Rust package dependencies in a configuration file (Cargo.toml). It makes no code changes and does not fix or introduce any security issue. It is a routine release-preparation change.
No security action needed. Treat as normal maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch adds version = "..." fields to four workspace path dependencies in bitcoin/Cargo.toml (base58ck, bitcoin-internals, bitcoin-io, bitcoin-primitives). Cargo requires explicit version requirements for path dependencies when publishing a crate to crates.io. No source code, feature flags, or dependency packages were changed beyond these version annotations.
Changed components
bitcoin/Cargo.tomlInspect captured patch +4 / −4
diff --git a/bitcoin/Cargo.toml b/bitcoin/Cargo.toml
index 91fb9779..06f0eed2 100644
--- a/bitcoin/Cargo.toml
+++ b/bitcoin/Cargo.toml
@@ -26,13 +26,13 @@ secp-recovery = ["secp256k1/recovery"]
arbitrary = ["dep:arbitrary", "units/arbitrary", "primitives/arbitrary"]
[dependencies]
-base58 = { package = "base58ck", path = "../base58", default-features = false, features = ["alloc"] }
+base58 = { package = "base58ck", path = "../base58", version = "0.2.0", default-features = false, features = ["alloc"] }
bech32 = { version = "0.11.0", default-features = false, features = ["alloc"] }
hashes = { package = "bitcoin_hashes", path = "../hashes", version = "0.17.0", default-features = false, features = ["alloc", "hex"] }
hex = { package = "hex-conservative", version = "0.3.0", default-features = false, features = ["alloc"] }
-internals = { package = "bitcoin-internals", path = "../internals", features = ["alloc", "hex"] }
-io = { package = "bitcoin-io", path = "../io", default-features = false, features = ["alloc", "hashes"] }
-primitives = { package = "bitcoin-primitives", path = "../primitives", default-features = false, features = ["alloc", "hex"] }
+internals = { package = "bitcoin-internals", path = "../internals", version = "0.4.1", features = ["alloc", "hex"] }
+io = { package = "bitcoin-io", path = "../io", version = "0.2.0", default-features = false, features = ["alloc", "hashes"] }
+primitives = { package = "bitcoin-primitives", path = "../primitives", version = "1.0.0-rc.0", default-features = false, features = ["alloc", "hex"] }
secp256k1 = { version = "0.31.1", default-features = false, features = ["hashes", "alloc"] }
units = { package = "bitcoin-units", path = "../units", version = "1.0.0-rc.2", default-features = false, features = ["alloc"] }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.