What the developer wrote
Authored by madelinevibes
rc3 change log updates
What changed, and why it matters
This commit only updates the project's CHANGELOG.md file to rename the release candidate version from 25.09rc2 to 25.09rc3 and add two new changelog entries describing other changes. The commit itself does not modify any source code, cryptographic logic, network protocol handling, or configuration defaults. There is no direct security-relevant change in this diff.
No action required for this commit. Review the separately merged changes referenced by PRs #8500 and #8495 if assessing their security relevance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to CHANGELOG.md: a release candidate version/date bump, plus two new bullet points documenting prior changes (Offers over private channels now payable; auto-generated TLS certificates now include AKI and Key Usages extensions). The actual code changes referenced by those entries are not present in this commit, so this commit cannot be independently evaluated for security impact. It is purely documentation/metadata.
Changed components
CHANGELOG.mdInspect captured patch +4 / −2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd282908..58d4811a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,7 @@
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
-## [25.09rc2] - 2025-08-18: "Hot Wallet Guardian"
+## [25.09rc3] - 2025-08-27: "Hot Wallet Guardian"
This release named by @king-11.
@@ -38,6 +38,7 @@ Note: release schedule moved one month: this is v25.09, and all deprecations inc
- Build: we now use `uv` to build instead of poetry: see doc/getting-started/getting-started/installation.md ([#8249])
- Protocol: We now insist that peers support `option_channel_type` (in CLN since 0.12.0 in late 2022, similar for other implementations). ([#8389])
- Protocol: payment secret ('s' field) is now mandatory in BOLT11 payment requests for improved security. ([#8377])
+ - Protocol: Offers on nodes with only private channels are now payable (i.e. no more blinded path errors!). ([#8500])
- wss-proxy.py was replaced by a rust version with support for multiple `wss-bind-addr`. If you install CLN from pre-compiled binaries you must remove the old wss-proxy directory first before installing CLN, usually ([#8080])
- pyln-client: plugin notifications parameters now exposed directly, not wrapped in `params` object. ([#8376])
- Plugins: `bookkeeper` now explicitly assumes every transaction is in the same currency as the node (true unless you added manually) ([#8445])
@@ -70,6 +71,7 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
### Fixed
+ - Certificates auto-generated by grpc-plugin, rest-plugin, and wss-proxy-plugin now include the required Authority Key Identifier and Key Usages extensions. ([#8495])
- JSON-RPC: `fetchinvoice` is now more reliable. ([#8470])
- lightningd: don't get confused with parallel ping commands. ([#8344])
- libbacktrace works with macOS, so we get backtraces on crashes ([#8431])
@@ -114,7 +116,7 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
[#7344]: https://github.com/ElementsProject/lightning/pull/7344
[#8410]: https://github.com/ElementsProject/lightning/pull/8410
[#8249]: https://github.com/ElementsProject/lightning/pull/8249
-[25.09rc2]: https://github.com/ElementsProject/lightning/releases/tag/v25.09rc2
+[25.09rc3]: https://github.com/ElementsProject/lightning/releases/tag/v25.09rc3
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.