Build System Maintenance

[tobtoht]

Guix

Goal	PRs
Reduce attack surface	#9648, #9650, #9654, #9670, #9675, #9647
Upgrade packages	#9467

See also: #9684.

Depends

Package	Version	Latest	CVEs	PR
android-ndk	18b	27c	No	#9456
boost	1.64.0	1.87.0	No	#9162
cctools	?	?	?	#9455
darwin_sdk	12.2	?	?
eudev	3.2.14	-	No	#9675
expat	2.6.0	2.6.4	Yes	#9641, #9681
freebsd_base	11.3	13.4 [0]	?	#9453, #9667
gtest	1.8.1	1.15.2	No	#9271
hidapi	0.13.1	0.14.0	No	#9643
libsodium	1.0.18	1.0.20	No	#9668
libtapi	?	?	?	#9455
libusb	1.0.27	-	No
ncurses	6.1	6.5	Yes	[2]
openssl	3.0.13	3.0.15 [1]	Yes	#9661, #9672
protobuf	21.12	29.2	No	#9478
readline	8.0	8.2p13	No	[2]
unbound	1.19.1	1.22.0	Yes	#9642
zeromq	4.3.5	-	No	#9676

[0] Latest version we can update to (#9446).
[1] Latest stable release
[2] I plan to PR a patch that replaces ncurses and readline with linenoise.

Submodules

Submodule	Version	Latest	PR
miniupnp	2.2.1	2.2.8	#9273, #9367
rapidjson	Jul 3 2018	?
trezor-common	Apr 13 2020	?	#9491
randomx	1.2.1	-
supercop	Aug 26 2020	?

Vendored libraries

Library	PR
GTest	#9272

CMake

TBD

---

Most of these PRs are ready, but will remain drafted until their dependencies are merged. For progress see #9631.

Last updated: Jan 5, 2025