Update wallet-core pin

MAGIC Grants/Skylight Wallet

dc97aed9 View source ↗

Public commit record

What the developer wrote

Authored by Keeqler

28/100 · Opaque

Update wallet-core pin

✓ Subject identifies a change! No meaningful explanatory body! Opaque security-relevant change

The short version

What changed, and why it matters

This commit only changes which version of an internal software library (wallet-core) the Skylight Wallet app depends on. It updates a reference code (a Git commit hash) in two package-management files. The commit message does not say why the update was made, and no security-related explanation is provided. Without seeing what actually changed inside the wallet-core library between the two referenced versions, we cannot tell whether this fixes a security problem, adds a feature, or is just routine maintenance.

Recommended action

Review the actual changes in the wallet-core commit 4285c22d6545d15a59d4762390e3e1f5593230a8 to determine whether this pin update addresses any security issue. Until that review is done, treat this as an unclassified dependency update rather than a confirmed security fix.

Security signals we found

Dependency pin bump for a wallet-related core library

No commit message detail explaining the reason for the update

No diff content from the updated wallet-core commit is available

No vendor statement of security relevance, CVE, or advisory is present

Technical analysis

Evidence from the diff

The diff updates the pinned Git reference for the wallet-core monorepo from commit 68eae37137948d9e6e06004190b0a09f51a62451 to 4285c22d6545d15a59d4762390e3e1f5593230a8 in pubspec.yaml and pubspec.lock. All seven wallet_* sub-packages (background, domain, fiat, infra, monero, openalias, ui) are repointed. No source code of the application itself is modified, and no details about the contents of the new wallet-core commit are included in the supplied materials.

Changed components

pubspec.yaml dependency declarationspubspec.lock resolved dependency referenceswallet-core Git submodule/package dependency

Inspect captured patch +21 / −21

### pubspec.lock
@@ -1233,62 +1233,62 @@ packages:
     dependency: "direct main"
     description:
       path: "packages/wallet_background"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_domain:
     dependency: "direct main"
     description:
       path: "packages/wallet_domain"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_fiat:
     dependency: "direct main"
     description:
       path: "packages/wallet_fiat"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_infra:
     dependency: "direct main"
     description:
       path: "packages/wallet_infra"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_monero:
     dependency: "direct main"
     description:
       path: "packages/wallet_monero"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_openalias:
     dependency: "direct main"
     description:
       path: "packages/wallet_openalias"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"
   wallet_ui:
     dependency: "direct main"
     description:
       path: "packages/wallet_ui"
-      ref: "68eae37137948d9e6e06004190b0a09f51a62451"
-      resolved-ref: "68eae37137948d9e6e06004190b0a09f51a62451"
+      ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
+      resolved-ref: "4285c22d6545d15a59d4762390e3e1f5593230a8"
       url: "https://github.com/MAGICGrants/wallet-core"
     source: git
     version: "0.1.0"

### pubspec.yaml
@@ -65,37 +65,37 @@ dependencies:
   wallet_infra:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_infra
   wallet_domain:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_domain
   wallet_monero:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_monero
   wallet_openalias:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_openalias
   wallet_background:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_background
   wallet_fiat:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_fiat
   wallet_ui:
     git:
       url: https://github.com/MAGICGrants/wallet-core
-      ref: 68eae37137948d9e6e06004190b0a09f51a62451
+      ref: 4285c22d6545d15a59d4762390e3e1f5593230a8
       path: packages/wallet_ui
 
   bip39:

Risk score

Why this scored 3/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 2/10

Evidence quality 1/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 3/100

Community notes

Related watches

Merge pull request #178 from MAGICGrants/2.1.0-release-fixes

Update pins

Merge branch 'main' into 2.1.0-release-fixes