Bump `electrum-client` to v0.24.0
What changed, and why it matters
This commit simply updates three dependency version numbers in a package configuration file (Cargo.toml). It bumps electrum-client from 0.23.1 to 0.24.0, electrsd from 0.34.0 to 0.35.0, and corepc-node from 0.7.0 to 0.8.0. There is no code change and no claim in the commit that this fixes a security issue.
No immediate security action is indicated. If the project tracks dependency updates for vulnerability management, verify separately whether electrum-client 0.23.1 or electrsd/corepc-node prior versions have known advisories, but that determination is outside the evidence provided by this commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff only modifies version pins in lightning-transaction-sync/Cargo.toml. No Rust source code is changed, no API usage is adjusted, and no security-related rationale is provided in the commit message. Without external references linking these specific dependency versions to disclosed vulnerabilities, the change is indistinguishable from a routine maintenance/version-sync update.
Changed components
lightning-transaction-sync/Cargo.tomlInspect captured patch +3 / −3
diff --git a/lightning-transaction-sync/Cargo.toml b/lightning-transaction-sync/Cargo.toml
index 3b92bbe..4810014 100644
--- a/lightning-transaction-sync/Cargo.toml
+++ b/lightning-transaction-sync/Cargo.toml
@@ -36,15 +36,15 @@ lightning-macros = { version = "0.2", path = "../lightning-macros", default-feat
bitcoin = { version = "0.32.2", default-features = false }
futures = { version = "0.3", optional = true }
esplora-client = { version = "0.12", default-features = false, optional = true }
-electrum-client = { version = "0.23.1", optional = true, default-features = false, features = ["proxy"] }
+electrum-client = { version = "0.24.0", optional = true, default-features = false, features = ["proxy"] }
[dev-dependencies]
lightning = { version = "0.2.0", path = "../lightning", default-features = false, features = ["std", "_test_utils"] }
tokio = { version = "1.35.0", features = ["macros"] }
[target.'cfg(not(target_os = "windows"))'.dev-dependencies]
-electrsd = { version = "0.34.0", default-features = false, features = ["legacy"] }
-corepc-node = { version = "0.7.0", default-features = false, features = ["28_0"] }
+electrsd = { version = "0.35.0", default-features = false, features = ["legacy"] }
+corepc-node = { version = "0.8.0", default-features = false, features = ["28_0"] }
[lints.rust.unexpected_cfgs]
level = "forbid"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.