changelog: update in preparation for the v0.7.1 release
What changed, and why it matters
This commit only updates the project's CHANGELOG.md file in preparation for a release. It documents two prior fixes: one that tries harder to scrub cryptographic secrets from memory, and one that fixes a build configuration issue where strict compiler flags could accidentally disable optimized assembly code. The commit itself does not change any source code, so it cannot introduce or fix a vulnerability directly.
No action is required for this documentation commit. Review the actual commits that implemented the stack-clearing and assembly-detection fixes if you want to assess their security impact.
Security signals we found
Changelog mentions increased clearing of secrets from the stack
Changelog mentions build fix for x86_64 assembly detection with -Werror
Evidence from the diff
The diff adds three changelog entries under the ‘Unreleased’ section: (1) a new unit-test framework, (2) increased stack-clearing of secrets, and (3) a build fix for x86_64 assembly feature detection when user CFLAGS contain -Werror. Because the change is purely documentation, any security relevance is inherited from earlier commits that actually implemented the fixes. No code, build scripts, or tests are modified here.
Changed components
CHANGELOG.mdInspect captured patch +7 / −0
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 53c787b..92ad923 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
+#### Changed
+ - Tests: Introduced a unit test framework with support for parallel test execution, selective test running, and named command-line arguments. Run `./tests -help` for usage information.
+
+#### Fixed
+ - Increased the number of cases where the library attempts to clear secrets from the stack.
+ - build: Fixed x86_64 assembly feature check that could fail when user-provided `CFLAGS` included `-Werror`. This would cause the build to fall back to the slower C implementation instead of using the optimized x86_64 assembly.
+
## [0.7.0] - 2025-07-21
#### Added
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.