What the developer wrote
Authored by Ilya Artemov
Version bump to v2.5.1
What changed, and why it matters
This commit is a routine version bump from 2.5.0 to 2.5.1 for the Ledger Bitcoin app. It only updates the changelog and Makefile version number. No code changes are present in the diff, and no security fixes or vulnerabilities are described.
No action needed based solely on this commit. Review the actual code changes that implement the changelog-listed fixes (support for musig() in multi_a and the unspecified bug fixes) to assess whether any have security implications.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates CHANGELOG.md to rename the unreleased 2.X.X section to 2.5.1 and replaces a planned ‘Added’ fuzzing-framework entry with two ‘Fixed’ items: support for musig() key expressions inside multi_a fragments, and ‘Various bug fixes and code modernizations.’ The Makefile increments APPVERSION_P from 0 to 1. The actual code implementing those fixes is not included in this commit, so the diff itself contains no security-relevant code changes.
Changed components
Inspect captured patch +5 / −4
### CHANGELOG.md
@@ -7,11 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
Dates are in `dd-mm-yyyy` format.
-## [2.X.X] - XX-XX-2026
+## [2.5.1] - 09-09-2026
-### Added
+## Fixed
-- Stateful, SDK-native fuzzing framework (Absolution-based) with semantic continuation host for `SIGN_PSBT` (developer tooling).
+- Support for musig() key expressions inside multi_a fragments.
+- Various bug fixes and code modernizations.
## [2.5.0] - 24-07-2026
### Makefile
@@ -28,7 +28,7 @@ include $(BOLOS_SDK)/Makefile.target
# Application version
APPVERSION_M = 2
APPVERSION_N = 5
-APPVERSION_P = 0
+APPVERSION_P = 1
APPVERSION_SUFFIX = # if not empty, appended at the end. Do not add a dash.
ifeq ($(APPVERSION_SUFFIX),)Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.