Build System Maintenance

[tobtoht]

Guix

Goal	PRs
Reduce attack surface	#9648, #9650, #9654, #9670, #9675, #9647
Upgrade packages	#9467

See also: #9684.

Depends

Package	Version	Latest	CVEs	Split [0]	Velocity [1]	PR
android-ndk	18b	27c	No	-		#9456
boost	1.84.0	1.87.0	No	Yes
cctools	?	?	?	-		#9455
darwin_sdk	12.2	?	?	-
eudev	3.2.14	-	No	No	102	#9675
expat	2.6.0	2.6.4	Yes	No	3996	#9641, #9681
freebsd_base	11.3	13.4 [2]	?	-		#9453, #9667
gtest	1.8.1	1.15.2	No	-	3924	#9271
hidapi	0.13.1	0.14.0	No	No	874	#9643
libsodium	1.0.18	1.0.20	No	Maybe?	5243	#9668
libtapi	?	?	?	-		#9455
libusb	1.0.27	-	No	No	2067
ncurses	6.1	6.5	Yes	No		[4]
openssl	3.0.13	3.0.15 [3]	Yes	Maybe?	110k	#9661, #9672
protobuf	21.12	29.2	No	No	611k	#9478
readline	8.0	8.2p13	No	No	114	[4]
unbound	1.19.1	1.22.0	Yes	Maybe?	59.7k	#9642
zeromq	4.3.5	-	No	No	300	#9676

[0] Package introduces chain split risk
[1] Lines changed in the last year
[2] Latest version we can update to (#9446).
[3] Latest stable release
[4] I plan to PR a patch that replaces ncurses and readline with linenoise.

Submodules

Submodule	Version	Latest	PR
miniupnp	2.2.1	2.2.8	#9273, #9367
rapidjson	Jul 3 2018	?
trezor-common	Apr 13 2020	?	#9491
randomx	1.2.1	-
supercop	Aug 26 2020	?

Vendored libraries

Library	PR
GTest	#9272

CMake

TBD

---

Most of these PRs are ready, but will remain drafted until their dependencies are merged. For progress see #9631.

Last updated: Jan 14, 2025