build(deps): bump rust-payjoin from a5ff964 to b02a6cc

[dependabot]

Bumps rust-payjoin from a5ff964 to b02a6cc.

Commits

• b02a6cc chore: update flake.lock (#1808)
• ff34866 chore: update flake.lock
• f00cc66 Allow double must_use lint
• 9c089f8 chore: update cargo.lock (#1807)
• 4491960 chore: update cargo.lock
• f4f3114 Use a single release environment for publishing (#1806)
• c3b27a4 Remove flakehub api call in nix cache action in CI (#1798)
• e3300db GitHub app bot (#1805)
• 49876cd Rename formatting CI action
• 4dee3d3 Disable flakehub api in nix cache action
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Pull request overview

Bumps rust-payjoin and adapts the plugin to its outpoint-based input ownership API.

Changes:

• Resolves input ownership using NBXplorer transaction history.
• Separates input and output ownership resolvers.
• Adds unit and integration coverage for spent and cold-wallet outpoints.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
rust-payjoin	Updates the dependency revision.
PayjoinWalletOwnershipIntegrationTests.cs	Tests outpoint ownership through NBXplorer.
PayjoinReceiverStateProcessorTests.cs	Tests callbacks and transaction extraction.
IPayjoinReceiverStateProcessor.cs	Adds original transaction facts and resolver state.
PayjoinReceiverSessionGuard.cs	Restores input and output facts during replay.
PayjoinReceiverStateProcessor.cs	Uses outpoint-based input ownership callbacks.
PayjoinWalletOwnershipService.cs	Resolves ownership from wallet transaction history.

Suppressed comments (1)

BTCPayServer.Plugins.Payjoin/Services/PayjoinWalletOwnershipService.cs:149

• A null derivation match is treated as foreign here. While NBXplorer is still syncing or a newly tracked hot/cold derivation lacks authoritative history, a receiver-signable outpoint can produce exactly this result, so CheckInputsNotOwned accepts the receiver's own input. Verify wallet-history readiness before resolving, or preserve an Unknown state and reject/defer the proposal instead of failing open.

        // TODO(security): Do not collapse an NBXplorer no-match into Foreign while wallet
        // ownership readiness is unverified. Represent it as Unknown and fail closed until
        // the relevant hot/cold derivation histories are known to be authoritative.
        if (matchedOutputs is null)
        {

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[dependabot]

A newer version of rust-payjoin exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.