From: merge-script <withtvpeter@gmail.com>
Date: Thu, 29 Oct 2026 21:40:33 +0000 (+0100)
Subject: Merge bitcoindevkit/bdk-cli#369: chore: update deps async-hwi and bdk_esplora
X-Git-Url: http://internal-gitweb-vhost/-script/src/example_cli/database/hex/engine/trait.Config.html?a=commitdiff_plain;p=bdk-cli

Merge bitcoindevkit/bdk-cli#369: chore: update deps async-hwi and bdk_esplora

d2317d2a6f549d22e312d73a120a643eaf69a2af fix(tests): wait for electrs to reach bitcoind's tip in online tests (Vihiga Tyonum)
c5d3230ad76a0a3e03e45e2c296d0c563812d8a1 chore: update deps async-hwi and bdk_esplora (Vihiga Tyonum)

Pull request description:

  ### Description

  **Dependency updates (`chore: update deps async-hwi and bdk_esplora`)**

  - Bump `async-hwi` 0.0.32 to 0.0.35. It moves from reqwest 0.11 to 0.13, which removes h2 0.3 (RUSTSEC-2026-0258), `rustls-pemfile` (unmaintained, RUSTSEC-2025-0134), hyper 0.14, and copies of rustls 0.21 / webpki-roots 0.25.
  - Set `default-features = false` on `bdk_esplora`. The default `blocking-https` feature pulled in minreq 2 with rustls 0.21 / webpki-roots 0.25, but bdk-cli only uses the async client.
  - Targeted `cargo update -p` for patch releases:

  | Crate | Version | Advisories |
  |---|---|---|
  | quinn-proto | 0.11.19 | RUSTSEC-2026-0338, 0339, 0340, 0341, 0342 |
  | rustls | 0.23.46 | RUSTSEC-2026-0346, 0347, 0348, 0349 |
  | rustls-webpki | 0.103.16 | RUSTSEC-2026-0382 |
  | webpki-roots / webpki-root-certs | 1.0.11 | RUSTSEC-2026-0381, 0383 |
  | zstd-sys | 2.1.2 | RUSTSEC-2026-0410 |
  | tokio | 1.54.1 | RUSTSEC-2026-0386 (unsound) |

  **fix test: wait for electrs to reach bitcoind's tip in online tests

  `bdk_testenv` 0.13.1's `wait_until_electrum_sees_block` returns on the first queued header notification, which can be stale from an earlier `mine_blocks` call. `full_scan` could then run before the confirmation blocks were indexed, intermittently failing e.g. `test_create_tx_multiple_recipients` with a confirmed balance of 0. A local `wait_for_electrum_tip` helper waits until electrs reports bitcoind's current height. This is fixed upstream in bdk (a98cf7c4) but not released yet; the helper can be removed once it is.

  ### Notes to the reviewers

  - **Why a targeted update instead of a full `cargo update`:** a full update also bumps `bdk_wallet` 3.1 to 3.2, which introduces deprecation warnings.
  - **`async-hwi` 0.0.35** compiles with no code changes.

  ### Checklists

  #### All Submissions:

  * [x] I've signed all my commits
  * [x] I followed the [contribution guidelines](https://github.com/bitcoindevkit/bdk-cli/blob/master/CONTRIBUTING.md)
  * [x] I ran `cargo fmt` and `cargo clippy` before committing

ACKs for top commit:
  bvotteler:
    tACK d2317d2
  vadim-anfv:
    tACK d2317d2a6f549d22e312d73a120a643eaf69a2af

Tree-SHA512: 85ec56cbc7c015d0ffcfb98321031add0486ab08370bf0b157b3d3373107eb5ae4ff37ad3b4c7d2f65632f0ec703d872d88e0c1c3e1f3cd1f41dd7f7e2498e08
---

4dbc3e8891aa8a2e1357872c75f10aeca1d7daec