Bump build number and update wallet core pin

MAGIC Grants/Skylight Wallet

451a08eb View source ↗

Public commit record

What the developer wrote

Authored by Keeqler

45/100 · Thin

Bump build number and update wallet core pin

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

The short version

What changed, and why it matters

This commit only updates the app's version number and switches its internal wallet-core library to a newer pinned commit. No actual code changes are shown, and the commit message does not say anything about fixing a security problem. On its own, this diff does not demonstrate any vulnerability or security fix.

Recommended action

Review the changes introduced in wallet-core commit e3705b00945e83eec3ab144b8cd659c906e305e0 to determine whether this pin update addresses any security issues. Without that context, treat this commit as a routine dependency/version bump.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff modifies pubspec.yaml and pubspec.lock to bump the Flutter build number from 405 to 406 and to pin seven wallet-core sub-packages from git ref 90e22b953f2f7aafb3d022f9bc2113efd4f00d79 to e3705b00945e83eec3ab144b8cd659c906e305e0. The contents of the new wallet-core commit are not included in the supplied materials, so no security-relevant code change can be evaluated from this commit alone.

Changed components

pubspec.yamlpubspec.lockwallet-core git dependency pin

Inspect captured patch +22 / −22

diff --git a/pubspec.lock b/pubspec.lock
index ee1f706..eb00ea7 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -1233,8 +1233,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_background"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1242,8 +1242,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_domain"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1251,8 +1251,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_fiat"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1260,8 +1260,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_infra"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1269,8 +1269,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_monero"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1278,8 +1278,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_openalias"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
@@ -1287,8 +1287,8 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_ui"
-      ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
-      resolved-ref: "90e22b953f2f7aafb3d022f9bc2113efd4f00d79"
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
+      resolved-ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
diff --git a/pubspec.yaml b/pubspec.yaml
index 1adec1c..d877764 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -16,7 +16,7 @@ publish_to: "none" # Remove this line if you wish to publish to pub.dev
 # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html
 # In Windows, build-name is used as the major, minor, and patch parts
 # of the product and file versions while build-number is used as the build suffix.
-version: 2.0.0+405
+version: 2.0.0+406
 
 environment:
   sdk: 3.11.5
@@ -65,37 +65,37 @@ dependencies:
   wallet_infra:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_infra
   wallet_domain:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_domain
   wallet_monero:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_monero
   wallet_openalias:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_openalias
   wallet_background:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_background
   wallet_fiat:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_fiat
   wallet_ui:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 90e22b953f2f7aafb3d022f9bc2113efd4f00d79
+      ref: e3705b00945e83eec3ab144b8cd659c906e305e0
       path: packages/wallet_ui
 
   bip39:

Risk score

Why this scored 3/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 2/10

Evidence quality 1/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 3/100

Community notes

Related watches

Merge pull request #178 from MAGICGrants/2.1.0-release-fixes

Update pins

Merge branch 'main' into 2.1.0-release-fixes