What changed, and why it matters
This commit is a routine version bump from 2.4.4 to 2.4.5. It only updates the version number in the Makefile and adds a changelog entry describing unrelated feature and bug-fix changes. There is no code change in this commit itself, and nothing in the diff indicates a security vulnerability or security fix.
No action needed for this commit. Review the actual implementation commits that introduced the changelog-listed changes if assessing their security posture.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies two files: Makefile (APPVERSION_P 4 -> 5) and CHANGELOG.md (new 2.4.5 entry). The changelog mentions enabling HAVE_APPLICATION_FLAG_DERIVE_MASTER for the bitcoin_recovery variant and fixing xpub retrieval at purpose level, but the actual implementation changes are not present in this commit. No source code, no security patch, and no security-relevant metadata are included.
Changed components
Inspect captured patch +14 / −1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 105a10b..8bea297 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
Dates are in `dd-mm-yyyy` format.
+## [2.4.5] - 09-01-2026
+
+### Changed
+
+- for `bitcoin_recovery`
+ - `HAVE_APPLICATION_FLAG_DERIVE_MASTER` enabled so fully non-hardened paths can be used
+ - A warning dispalyed on jome screen
+
+### Fixed
+
+- getting xpub at purpose level (for permitted paths)
+
+
## [2.4.4] - 15-12-2025
### Changed
diff --git a/Makefile b/Makefile
index 98f5db5..229d39e 100644
--- a/Makefile
+++ b/Makefile
@@ -28,7 +28,7 @@ PATH_SLIP21_APP_LOAD_PARAMS = "LEDGER-Wallet policy"
# Application version
APPVERSION_M = 2
APPVERSION_N = 4
-APPVERSION_P = 4
+APPVERSION_P = 5
APPVERSION_SUFFIX = # if not empty, appended at the end. Do not add a dash.
ifeq ($(APPVERSION_SUFFIX),)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.