Fix lightning-invoice bitcoin dependency version
What the developer wrote
Authored by Daniel Roberts
Fix lightning-invoice bitcoin dependency version
`lightning-invoice` since 743f43fcfd5acba55242792ed1e9337f2ab52858 will
not build against `rust-bitcoin` older than v0.32.7.
What changed, and why it matters
This commit is a routine packaging fix. It updates the minimum required version of the rust-bitcoin library for the lightning-invoice crate from 0.32.4 to 0.32.7 because the code no longer compiles against older 0.32.x releases. It does not change any application logic, cryptographic operations, or network behavior, and there is no indication it fixes a security vulnerability.
No security action required. Users packaging or building lightning-invoice should ensure their dependency resolver can select rust-bitcoin >= 0.32.7; Cargo will enforce this automatically.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change in lightning-invoice/Cargo.toml bumps the bitcoin dependency’s lower bound from 0.32.4 to 0.32.7. The commit message states that since an earlier commit (743f43fcfd5acba55242792ed1e9337f2ab52858), lightning-invoice fails to build against rust-bitcoin versions older than 0.32.7. This is a build/dependency metadata correction, not a code-level behavior change. No security signals are present in the diff or commit metadata.
Changed components
lightning-invoice/Cargo.toml dependency declarationInspect captured patch +1 / −1
diff --git a/lightning-invoice/Cargo.toml b/lightning-invoice/Cargo.toml
index 2b5d570..8efe383 100644
--- a/lightning-invoice/Cargo.toml
+++ b/lightning-invoice/Cargo.toml
@@ -22,7 +22,7 @@ std = []
bech32 = { version = "0.11.0", default-features = false }
lightning-types = { version = "0.4.0", path = "../lightning-types", default-features = false }
serde = { version = "1.0", optional = true, default-features = false, features = ["alloc"] }
-bitcoin = { version = "0.32.4", default-features = false, features = ["secp-recovery"] }
+bitcoin = { version = "0.32.7", default-features = false, features = ["secp-recovery"] }
[dev-dependencies]
serde_json = { version = "1"}
Why this scored 20/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.