Merge bitcoindevkit/bdk-cli#369: chore: update deps async-hwi and bdk_esplora
d2317d2a6f549d22e312d73a120a643eaf69a2af fix(tests): wait for electrs to reach bitcoind's tip in online tests (Vihiga Tyonum)
c5d3230ad76a0a3e03e45e2c296d0c563812d8a1 chore: update deps async-hwi and bdk_esplora (Vihiga Tyonum)
Pull request description:
### Description
**Dependency updates (`chore: update deps async-hwi and bdk_esplora`)**
- Bump `async-hwi` 0.0.32 to 0.0.35. It moves from reqwest 0.11 to 0.13, which removes h2 0.3 (RUSTSEC-2026-0258), `rustls-pemfile` (unmaintained, RUSTSEC-2025-0134), hyper 0.14, and copies of rustls 0.21 / webpki-roots 0.25.
- Set `default-features = false` on `bdk_esplora`. The default `blocking-https` feature pulled in minreq 2 with rustls 0.21 / webpki-roots 0.25, but bdk-cli only uses the async client.
- Targeted `cargo update -p` for patch releases:
| Crate | Version | Advisories |
|---|---|---|
| quinn-proto | 0.11.19 | RUSTSEC-2026-0338, 0339, 0340, 0341, 0342 |
| rustls | 0.23.46 | RUSTSEC-2026-0346, 0347, 0348, 0349 |
| rustls-webpki | 0.103.16 | RUSTSEC-2026-0382 |
| webpki-roots / webpki-root-certs | 1.0.11 | RUSTSEC-2026-0381, 0383 |
| zstd-sys | 2.1.2 | RUSTSEC-2026-0410 |
| tokio | 1.54.1 | RUSTSEC-2026-0386 (unsound) |
**fix test: wait for electrs to reach bitcoind's tip in online tests
`bdk_testenv` 0.13.1's `wait_until_electrum_sees_block` returns on the first queued header notification, which can be stale from an earlier `mine_blocks` call. `full_scan` could then run before the confirmation blocks were indexed, intermittently failing e.g. `test_create_tx_multiple_recipients` with a confirmed balance of 0. A local `wait_for_electrum_tip` helper waits until electrs reports bitcoind's current height. This is fixed upstream in bdk (
a98cf7c4) but not released yet; the helper can be removed once it is.
### Notes to the reviewers
- **Why a targeted update instead of a full `cargo update`:** a full update also bumps `bdk_wallet` 3.1 to 3.2, which introduces deprecation warnings.
- **`async-hwi` 0.0.35** compiles with no code changes.
### Checklists
#### All Submissions:
* [x] I've signed all my commits
* [x] I followed the [contribution guidelines](https://github.com/bitcoindevkit/bdk-cli/blob/master/CONTRIBUTING.md)
* [x] I ran `cargo fmt` and `cargo clippy` before committing
ACKs for top commit:
bvotteler:
tACK
d2317d2
vadim-anfv:
tACK
d2317d2a6f549d22e312d73a120a643eaf69a2af
Tree-SHA512: 85ec56cbc7c015d0ffcfb98321031add0486ab08370bf0b157b3d3373107eb5ae4ff37ad3b4c7d2f65632f0ec703d872d88e0c1c3e1f3cd1f41dd7f7e2498e08