Public commit record
18/100 · Opaque
What the developer wrote
Authored by Peter D. Gray
update changelogs
✓ Subject identifies a change! Too few words to establish purpose! No meaningful explanatory body
What changed, and why it matters
This commit only reorganizes and updates the project's release notes (changelogs). It moves the description of features and bug fixes from the current release section into the historical release notes, and updates version numbers and dates. No actual firmware code was changed, so this commit cannot by itself introduce or fix any security vulnerability.
Recommended action
No security action needed for this documentation-only commit. Review the actual firmware commits referenced by the changelog entries if assessing the security relevance of the listed bug fixes or enhancements.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies four markdown files under releases/: ChangeLog.md, History-Mk4.md, History-Q.md, and Next-ChangeLog.md. Content describing the 5.4.4/1.3.4Q release is moved from ChangeLog.md into the corresponding History files, while new 5.4.5/1.3.5Q entries are added. Next-ChangeLog.md is reset to placeholder ‘tbd’ entries with bumped future version numbers. There are no source-code changes.
Changed components
releases/ChangeLog.mdreleases/History-Mk4.mdreleases/History-Q.mdreleases/Next-ChangeLog.mdInspect captured patch +76 / −47
diff --git a/releases/ChangeLog.md b/releases/ChangeLog.md
index 206c87c..2e09779 100644
--- a/releases/ChangeLog.md
+++ b/releases/ChangeLog.md
@@ -4,52 +4,26 @@ This lists the changes in the most recent firmware, for each hardware platform.
# Shared Improvements - Both Mk4 and Q
-## Spending Policy Feature
-
-Spending policies for "Single Signers" adds new spending policy options:
-
-- limit your Coldcard so it refuses to sign transactions that are "too big"
-- require 2FA authentication before signing any transaction (NFC+web)
-- velocity limits can restrict how often new transactions can be signed
-- see `docs/spending-policy.md` for more details
-- "Enable HSM" and "User Management" have moved into `Advanced > Spending Policy`.
-- Old "CCC" feature has been renamed and moved into that menu as well: "Co-Sign Multisig"
-
-## Other Improvements
-
-- Added `Bull Bitcoin` export to `Export Wallet` menu.
-- Enhancement: Added warning for zero value outputs if not `OP_RETURN`.
-- Enhancement: Show QR codes of output addresses in transaction output explorer. Explorer is
- now offered for transactions of all sizes, not just complex ones.
-- Enhancement: Added file rename, when listing contents of SD card.
-- Enhancement: Added ability to restore Coldcard backup via USB (needs latest of ckcc version)
-- Enhancement: Address ownership allows to specify particular multisig wallet in which to search,
- if `wallet` query parameter is provided via trivial extension to
- [BIP-21](https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki).
- Example: `tb1q4d67p7stxml3kdudrgkg5mgaxsrgzcqzjrrj4gg62nxtvnsnvqjsxjkej0?wallet=Haystack`
-- Bugfix: If all change outputs have `nValue=0`, they were not shown in UX.
-- Bugfix: Disallow negative input/output amounts in PSBT.
-- Bugfix: Fix filesystem initialization after Wipe LFS or Destroy Seed.
-- Bugfix: Fix MicroSD selftest code.
-- Bugfix: NFC loop exporting secrets would not work after first value exported.
-- Bugfix: Multisig address format handling.
-- Bugfix: Ownership check failing to find addresses near max (~760), needed to be re-run to succeed
+- Enhancement: Address format guessing changed away from using PSBT XPUB's derivation paths.
+ Now based on witness/redeem script of first PSBT input instead.
+- Enhancement: Show master XFP of backup secret and ask user for confirmation before loading backup.
+- Enhancement: Show firmware version added to hobbled Advanced/Tools menu.
+- Bugfix: Exiting text input of Custom Backup Password caused yikes.
+- Bugfix: Temporary seeds in SSSP mode were not able to update block height.
# Mk4 Specific Changes
-## 5.4.4 - 2025-09-30
+## 5.4.5 - 2025-11-03
-- Bugfix: Part of extended keys (xpubs) were not always visible.
-- Change: Mk4 default menu wrap-around lowered from 16 to 10 items.
+- None.
# Q Specific Changes
-## 1.3.4Q - 2025-09-30
+## 1.3.5Q - 2025-11-03
+
+- Enhancement: Show backup filename at the top of the screen during backup password entry.
-- Enhancement: Enters "forever calculator" mode when Q would otherwise be electronic waste
- (ie. after 13 PIN failures). Always enabled, regardless of "login calculator" setting.
-- Bugfix: Correct line positioning when 24 seed words displayed.
# Release History
diff --git a/releases/History-Mk4.md b/releases/History-Mk4.md
index b13592a..3a78f39 100644
--- a/releases/History-Mk4.md
+++ b/releases/History-Mk4.md
@@ -1,6 +1,36 @@
*See ChangeLog.md for more recent changes, these are historic versions*
+## 5.4.4 - 2025-09-30
+
+- Spending policies for "Single Signers" adds new spending policy options:
+ - limit your Coldcard so it refuses to sign transactions that are "too big"
+ - require 2FA authentication before signing any transaction (NFC+web)
+ - velocity limits can restrict how often new transactions can be signed
+ - see `docs/spending-policy.md` for more details
+ - "Enable HSM" and "User Management" have moved into `Advanced > Spending Policy`.
+ - Old "CCC" feature has been renamed and moved into that menu as well: "Co-Sign Multisig"
+- Added `Bull Bitcoin` export to `Export Wallet` menu.
+- Enhancement: Added warning for zero value outputs if not `OP_RETURN`.
+- Enhancement: Show QR codes of output addresses in transaction output explorer. Explorer is
+ now offered for transactions of all sizes, not just complex ones.
+- Enhancement: Added file rename, when listing contents of SD card.
+- Enhancement: Added ability to restore Coldcard backup via USB (needs latest of ckcc version)
+- Enhancement: Address ownership allows to specify particular multisig wallet in which to search,
+ if `wallet` query parameter is provided via trivial extension to
+ [BIP-21](https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki).
+ Example: `tb1q4d67p7stxml3kdudrgkg5mgaxsrgzcqzjrrj4gg62nxtvnsnvqjsxjkej0?wallet=Haystack`
+- Bugfix: If all change outputs have `nValue=0`, they were not shown in UX.
+- Bugfix: Disallow negative input/output amounts in PSBT.
+- Bugfix: Fix filesystem initialization after Wipe LFS or Destroy Seed.
+- Bugfix: Fix MicroSD selftest code.
+- Bugfix: NFC loop exporting secrets would not work after first value exported.
+- Bugfix: Multisig address format handling.
+- Bugfix: Ownership check failing to find addresses near max (~760), needed to be re-run to succeed
+- (Mk4 only) Bugfix: Part of extended keys (xpubs) were not always visible.
+- (Mk4 only) Change: Mk4 default menu wrap-around lowered from 16 to 10 items.
+
+
## 5.4.3 - 2025-05-14
- Enhancement: Text word-wrap done more carefully so never cuts off any text, and yet
diff --git a/releases/History-Q.md b/releases/History-Q.md
index a45270f..620ca3a 100644
--- a/releases/History-Q.md
+++ b/releases/History-Q.md
@@ -1,5 +1,35 @@
*See ChangeLog.md for more recent changes, these are historic versions*
+## 1.3.4Q - 2025-09-30
+
+- Spending policies for "Single Signers" adds new spending policy options:
+ - limit your Coldcard so it refuses to sign transactions that are "too big"
+ - require 2FA authentication before signing any transaction (NFC+web)
+ - velocity limits can restrict how often new transactions can be signed
+ - see `docs/spending-policy.md` for more details
+ - "Enable HSM" and "User Management" have moved into `Advanced > Spending Policy`.
+ - Old "CCC" feature has been renamed and moved into that menu as well: "Co-Sign Multisig"
+- Added `Bull Bitcoin` export to `Export Wallet` menu.
+- Enhancement: Added warning for zero value outputs if not `OP_RETURN`.
+- Enhancement: Show QR codes of output addresses in transaction output explorer. Explorer is
+ now offered for transactions of all sizes, not just complex ones.
+- Enhancement: Added file rename, when listing contents of SD card.
+- Enhancement: Added ability to restore Coldcard backup via USB (needs latest of ckcc version)
+- Enhancement: Address ownership allows to specify particular multisig wallet in which to search,
+ if `wallet` query parameter is provided via trivial extension to
+ [BIP-21](https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki).
+ Example: `tb1q4d67p7stxml3kdudrgkg5mgaxsrgzcqzjrrj4gg62nxtvnsnvqjsxjkej0?wallet=Haystack`
+- Bugfix: If all change outputs have `nValue=0`, they were not shown in UX.
+- Bugfix: Disallow negative input/output amounts in PSBT.
+- Bugfix: Fix filesystem initialization after Wipe LFS or Destroy Seed.
+- Bugfix: Fix MicroSD selftest code.
+- Bugfix: NFC loop exporting secrets would not work after first value exported.
+- Bugfix: Multisig address format handling.
+- Bugfix: Ownership check failing to find addresses near max (~760), needed to be re-run to succeed
+- (Q only) Enhancement: Enters "forever calculator" mode when Q would otherwise be electronic waste
+ (ie. after 13 PIN failures). Always enabled, regardless of "login calculator" setting.
+- (Q only) Bugfix: Correct line positioning when 24 seed words displayed.
+
## 1.3.3Q - 2025-05-14
diff --git a/releases/Next-ChangeLog.md b/releases/Next-ChangeLog.md
index f75e18e..9b0de56 100644
--- a/releases/Next-ChangeLog.md
+++ b/releases/Next-ChangeLog.md
@@ -4,25 +4,20 @@ This lists the new changes that have not yet been published in a normal release.
# Shared Improvements - Both Mk4 and Q
-- Enhancement: Address format guessing changed away from using PSBT XPUB's derivation paths.
- Now based on witness/redeem script of first PSBT input instead.
-- Enhancement: Show master XFP of backup secret and ask user for confirmation before loading backup.
-- Enhancement: Show firmware version added to hobbled Advanced/Tools menu.
-- Bugfix: Exiting text input of Custom Backup Password caused yikes.
-- Bugfix: Temporary seeds in SSSP mode were not able to update block height.
+- tbd
# Mk4 Specific Changes
-## 5.4.5 - 2025-11-xx
+## 5.4.5 - 2025-12-xx
-- None.
+- tbd
# Q Specific Changes
-## 1.3.5Q - 2025-11-xx
+## 1.3.6Q - 2025-12-xx
-- Enhancement: Show backup filename at the top of the screen during backup password entry.
+- tbd
Risk score
Our methodology →Why this scored 15/100
Human-validated context
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
No validated notes yet.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.