multi: update btcd to v0.26.2 - #11029
Conversation
In this commit, we update the btcd dependency from v0.26.0 to v0.26.2, along with the tagged v2 submodule releases that ship with it: btcutil/v2 v2.0.1, wire/v2 v2.0.1, and v2transport v1.1.0. The release is mostly hardening of the parsing + decoding paths: btcutil.NewTxFromBytes and btcutil.NewBlockFromBytes now reject trailing bytes, DecodeWIF rejects out-of-range private keys, and wire.ReadV2MessageN rejects trailing payload data. The v2transport bump restores responder handshake progress for the v2 noise transport, and the rpcclient gains a DisableAuth option for cookie-less setups. No API changes, so the bump is a straight go.mod/go.sum update with no code changes needed on our side.
🟡 PR Severity: MEDIUM
🟡 Medium (10 files)
🟢 Low (3 files)
AnalysisThis PR is a routine dependency-bump across the repo's Go submodules (root, To override, add a |
In this PR, we update the btcd dependency from v0.26.0 to v0.26.2. The v2 submodule migration landed already in #10913, so this is a patch-level bump on top of that work: btcutil/v2 v2.0.1, wire/v2 v2.0.1, and v2transport v1.1.0 come along with the root module.
No API changes in the release, so the bump is a straight go.mod/go.sum update across the root module and the submodules that pin btcd (kvdb, healthcheck, tor, tlv, tools). The psbt + address strictness fixes on btcd master don't have tagged submodule releases yet, so they aren't part of this bump.