What changed, and why it matters
This commit updates a test-only dependency version and removes a workaround pin for another dependency. It does not change production code, user-facing behavior, or any security-sensitive logic. There is no indication this is a security fix.
No security action needed. Treat as routine dependency maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit bumps electrsd from 0.35.0 to 0.36.0 and corepc-node from 0.8.0 to 0.10.0 in lightning-transaction-sync/Cargo.toml under [target.'cfg(not(target_os = "windows"))'.dev-dependencies], and removes a CI pin for the home crate that was needed for older Rust versions. These are development/CI dependencies only; no runtime or consensus code is modified.
Changed components
lightning-transaction-sync/Cargo.toml dev-dependenciesci/ci-tx-sync-tests.shInspect captured patch +2 / −5
diff --git a/ci/ci-tx-sync-tests.sh b/ci/ci-tx-sync-tests.sh
index 5f926a8..0839e2c 100755
--- a/ci/ci-tx-sync-tests.sh
+++ b/ci/ci-tx-sync-tests.sh
@@ -14,9 +14,6 @@ function PIN_RELEASE_DEPS {
PIN_RELEASE_DEPS # pin the release dependencies
-# Starting with version 0.5.11, the `home` crate has an MSRV of rustc 1.81.0.
-[ "$RUSTC_MINOR_VERSION" -lt 81 ] && cargo update -p home --precise "0.5.9" --verbose
-
# Starting with version 1.2.0, the `idna_adapter` crate has an MSRV of rustc 1.81.0.
[ "$RUSTC_MINOR_VERSION" -lt 81 ] && cargo update -p idna_adapter --precise "1.1.0" --verbose
diff --git a/lightning-transaction-sync/Cargo.toml b/lightning-transaction-sync/Cargo.toml
index 50e48af..6cf75ff 100644
--- a/lightning-transaction-sync/Cargo.toml
+++ b/lightning-transaction-sync/Cargo.toml
@@ -44,8 +44,8 @@ lightning = { version = "0.2.0", path = "../lightning", default-features = false
tokio = { version = "1.35.0", features = ["macros"] }
[target.'cfg(not(target_os = "windows"))'.dev-dependencies]
-electrsd = { version = "0.35.0", default-features = false, features = ["legacy"] }
-corepc-node = { version = "0.8.0", default-features = false, features = ["28_0"] }
+electrsd = { version = "0.36.0", default-features = false, features = ["legacy"] }
+corepc-node = { version = "0.10.0", default-features = false, features = ["28_0"] }
[lints.rust.unexpected_cfgs]
level = "forbid"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.