chore(deps): update secp256k1 requirement from 0.27 to 0.31 in /tools/cli-wallet

[dependabot]

Updates the requirements on secp256k1 to permit the latest version.

Changelog

Sourced from secp256k1's changelog.

0.31.1 - 2025-06-23

• Update deprecation notes with since instead of TBD.

0.31.0 - 2025-04-21

• Update rand to 0.9 #788
• Create keys from owned array values instead of from references #781
• Add from_u8_masked RecoveryId constructor #778
• Update upstream to 0cdc758a56360bf58a851fe91085a327ec97685a (secp256k1-sys 0.6) #764
• Add Keypair::sign_schnorr_no_aux_rand #762
• Replace Message with Into<Message> in ECDSA signing API #755
• Deprecate ElligatorSwiftParty in favor of Party #752

0.30.0 - 2024-10-08

• Allow signing variable-length messages #706
• Bump MSRV to 1.63 #709
• Deprecate Message::from_digest_slice in favor of Message::from_digest #712
• Truncate debug output of SecretKey; tighten bitcoin_hashes dependency version #722
• Simplify and improve consistency of secret key types' debug output #726
• Simplify and improve consistency of public key types' debug output #745
• Feature-gate KeyPair::from_str on global-context or alloc #728
• Add infallible constructors for schnorr::Signature from byteslices #730
• Deprecate slice-parsing methods in favor of array-parsing ones #737
• Make RecoveryId an enum rather than integer #743

0.29.0 - 2024-04-02

• Deprecate ThirtyTwoByteHash #686

  This trait turned out to be problematic during upgrade because we support a ranged dependency for bitcoin_hashes. Consider implementing From<T> for Message for your type iff your type is a 32 byte hash (ie, output from a hash algorithm that produces a 32 byte digest like sha256). When using the impl, consider using Message::from instead of hash.into() because we will be introducing generics in a future version and the compiler will not be able to work out the target type.

• Bump MSRV to Rust v1.56.1 #693

• Upgrade hashes using range dependency version = ">= 0.12, <= 0.14" #690

• Depend on latest secp256k1-sys (vendors secp256k1 v0.4.1) #688

0.28.2 - 2024-01-30

• Implement Hash for Scalar #674
• Implement Ord and PartialOrd for RecoverableSignature #611
• Add byte accessors to ElligatorSwiftSharedSecret #676

0.28.1 - 2024-01-03

... (truncated)

Commits

• See full diff in compare view

[github-actions]

Welcome to RustChain! Thanks for your first pull request.

Before we review, please make sure:

• Non-doc PRs have a BCOS-L1 or BCOS-L2 label
• Doc-only PRs are exempt from BCOS tier labels when they only touch docs/**, *.md, or common image/PDF files
• New code files include an SPDX license header
• You've tested your changes against the live node

Bounty tiers: Micro (1-10 RTC) | Standard (20-50) | Major (75-100) | Critical (100-150)

A maintainer will review your PR soon. Thanks for contributing!

[github-actions]

⚠️ BCOS v2 Scan Results

Metric	Value
Trust Score	46/100
Certificate ID	BCOS-12b693cb
Tier	L1 (not met)

What does this mean?

The BCOS (Beacon Certified Open Source) engine scans for:

• SPDX license header compliance
• Known CVE vulnerabilities (OSV database)
• Static analysis findings (Semgrep)
• SBOM completeness
• Dependency freshness
• Test infrastructure evidence
• Review attestation tier

Full report | What is BCOS?

---

BCOS v2 Engine - Free & Open Source (MIT) - Elyan Labs

[Scottcjn]

@dependabot rebase