← Watch feed

Informational 3 Monero Committed Oct 3, 2026 · 23:11 UTC

Update pins

MAGIC Grants/Skylight Wallet

7125d971 View source ↗

Public commit record

What the developer wrote

Authored by Justin Ehrenhofer

0/100 · Opaque

Update pins

! Very short subject! Too few words to establish purpose! No meaningful explanatory body

The short version

What changed, and why it matters

This commit only updates version numbers and the pinned Git commit references (called 'pins') for several software libraries the project depends on. No actual code in this repository was changed. The commit message simply says 'Update pins' and does not mention any security fix. Without inspecting the contents of the newly pinned commits in other repositories, we cannot tell whether this update fixes a security problem, adds a feature, or is just routine maintenance.

Recommended action

Treat this as a routine dependency update unless the newly pinned commits in magicgrants/monero_c and MAGICGrants/wallet-core are reviewed. If this is part of a release, verify the upstream commit changelogs for any security fixes and consider whether the build number bump warrants a release note. No immediate action is indicated by this repository's diff alone.

Security signals we found

Dependency pin update to new commit hashes in external repositories

No source code changes in the skylight-wallet repository itself

No commit message or in-diff indication of security relevance

Wallet-related dependencies updated (monero_c and wallet-core packages), which are security-sensitive components in general

Technical analysis

Evidence from the diff

The diff modifies pubspec.yaml and pubspec.lock to bump the build number from 412 to 413 and to change Git commit SHA pins for dependencies: monero_c (impls/monero.dart) from 3ca8418… to e31cbe2… and MAGICGrants/wallet-core packages from 3584c83… to 5482551.... These are dependency pin updates only; no source code in the skylight-wallet repository itself is altered. The referenced commits are in external repositories and their contents are not provided, so the security relevance of the underlying changes is unknown from this diff alone.

Changed components

pubspec.yaml dependency declarationspubspec.lock resolved dependency referencesmonero_c Git dependency (impls/monero.dart)

MAGICGrants/wallet-core Git dependency packages: wallet_background, wallet_domain, wallet_fiat, wallet_infra, wallet_monero, wallet_openalias, wallet_ui

Inspect captured patch +25 / −25

### pubspec.lock
@@ -681,8 +681,8 @@ packages:
     dependency: "direct main"
     description:
       path: "impls/monero.dart"
-      ref: "3ca8418f5888883e1bb6e3a6a919260e71a49647"
-      resolved-ref: "3ca8418f5888883e1bb6e3a6a919260e71a49647"
+      ref: e31cbe2cc595fa9d640b35ffb45dc3afa91ec7b0
+      resolved-ref: e31cbe2cc595fa9d640b35ffb45dc3afa91ec7b0
       url: "https://github.com/magicgrants/monero_c"
     source: git
     version: "0.0.0"
@@ -1264,62 +1264,62 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_background"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_domain:
     dependency: "direct main"
     description:
       path: "packages/wallet_domain"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_fiat:
     dependency: "direct main"
     description:
       path: "packages/wallet_fiat"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_infra:
     dependency: "direct main"
     description:
       path: "packages/wallet_infra"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_monero:
     dependency: "direct main"
     description:
       path: "packages/wallet_monero"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_openalias:
     dependency: "direct main"
     description:
       path: "packages/wallet_openalias"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_ui:
     dependency: "direct main"
     description:
       path: "packages/wallet_ui"
-      ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
-      resolved-ref: "3584c83fc791dfb498dd6a31afb16ebb48b25bf6"
+      ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
+      resolved-ref: "548255131912abcfd4b43e273bc4722c160c8ccf"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"

### pubspec.yaml
@@ -16,7 +16,7 @@ publish_to: "none" # Remove this line if you wish to publish to pub.dev
 # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html
 # In Windows, build-name is used as the major, minor, and patch parts
 # of the product and file versions while build-number is used as the build suffix.
-version: 2.1.0+412
+version: 2.1.0+413
 
 environment:
   sdk: 3.11.5
@@ -57,45 +57,45 @@ dependencies:
   monero:
     git:
       url: https://github.com/magicgrants/monero_c
-      ref: 3ca8418f5888883e1bb6e3a6a919260e71a49647
+      ref: e31cbe2cc595fa9d640b35ffb45dc3afa91ec7b0
       path: impls/monero.dart
 
   # wallet-core packages; SHA-pinned for release, redirected to the local sibling
   # clone by the gitignored pubspec_overrides.yaml for dev.
   wallet_infra:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_infra
   wallet_domain:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_domain
   wallet_monero:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_monero
   wallet_openalias:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_openalias
   wallet_background:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_background
   wallet_fiat:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_fiat
   wallet_ui:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 3584c83fc791dfb498dd6a31afb16ebb48b25bf6
+      ref: 548255131912abcfd4b43e273bc4722c160c8ccf
       path: packages/wallet_ui
 
   bip39:

Risk score

Why this scored 3/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 2/10

Evidence quality 1/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 3/100

Community notes

Related watches

Merge pull request #178 from MAGICGrants/2.1.0-release-fixes

Merge branch 'main' into 2.1.0-release-fixes

Skip fetching unused submodules