test(core): add embit 0.8.0 (for PSBT parsing)
What the developer wrote
Authored by Roman Zeyde
test(core): add embit 0.8.0 (for PSBT parsing)
Will be used for testing multisig/Miniscript end-to-end test vectors.
[no changelog]
What changed, and why it matters
This commit only adds a new Python test dependency called 'embit' version 0.8.0 to the project's dependency files. It is explicitly marked as being for testing PSBT (Partially Signed Bitcoin Transaction) parsing and end-to-end test vectors. There is no code change, no vulnerability fix, and no indication of a security issue.
No security action required. Treat as a routine dependency addition for testing. If desired, verify the embit 0.8.0 package hash and source registry as part of normal supply-chain hygiene.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates pyproject.toml and uv.lock to include embit>=0.8.0,<0.9 as a development/test dependency. The lockfile records the package name, version, source registry, and sdist hash. The commit message states the dependency will be used for testing multisig/Miniscript end-to-end test vectors and includes ‘[no changelog]’, indicating it is a routine test infrastructure change.
Changed components
pyproject.tomluv.locktest dependency resolutionInspect captured patch +9 / −0
### pyproject.toml
@@ -58,6 +58,7 @@ dependencies = [
"construct-typing>=0.7.0",
"flake8-annotations>=3.1.1,<4",
"stellar-sdk>=15.0.0",
+ "embit>=0.8.0,<0.9",
]
[dependency-groups]
### uv.lock
@@ -572,6 +572,12 @@ wheels = [
{ url = "https://files.pythonhosted.org/packages/51/79/119091c98e2bf49e24ed9f3ae69f816d715d2904aefa6a2baa039a2ba0b0/ecdsa-0.19.2-py2.py3-none-any.whl", hash = "sha256:840f5dc5e375c68f36c1a7a5b9caad28f95daa65185c9253c0c08dd952bb7399", size = 150818, upload-time = "2026-03-26T09:58:15.808Z" },
]
+[[package]]
+name = "embit"
+version = "0.8.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/83/88/b054b00ade6d2a41749e15976cdcec4b7ec4656ac1cb917ce3de395528d1/embit-0.8.0.tar.gz", hash = "sha256:8bf4b10073c67400370ce523fb16f035fe759f6fdd987c579bdcc268d75ed770", size = 763120, upload-time = "2024-05-30T10:56:48.944Z" }
+
[[package]]
name = "execnet"
version = "2.1.1"
@@ -2021,6 +2027,7 @@ dependencies = [
{ name = "demjson3" },
{ name = "dominate" },
{ name = "ecdsa" },
+ { name = "embit" },
{ name = "fido2" },
{ name = "flake8" },
{ name = "flake8-annotations" },
@@ -2085,6 +2092,7 @@ requires-dist = [
{ name = "demjson3" },
{ name = "dominate" },
{ name = "ecdsa", specifier = ">=0.16,<0.20" },
+ { name = "embit", specifier = ">=0.8.0,<0.9" },
{ name = "fido2", specifier = ">=0.8.0,<0.9" },
{ name = "flake8", specifier = ">=7" },
{ name = "flake8-annotations", specifier = ">=3.1.1,<4" },Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.