update CHANGES.md for release 1.5.3
What the developer wrote
Authored by Jon Griffiths
update CHANGES.md for release 1.5.3
What changed, and why it matters
This commit is only a changelog update for libwally-core version 1.5.3. It does not change any source code, cryptographic logic, or build configuration. The diff adds release notes describing new features and bug fixes that were made in earlier commits. Because no code is modified, this commit itself cannot introduce or fix a security vulnerability.
No action is required for this commit. If reviewing for security, examine the actual commits that implemented the listed fixes (PSBT allocation failure handling, transaction parsing, BIP341 signing checks, map reinsertion bug) rather than this changelog-only update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates CHANGES.md with release notes for libwally-core 1.5.3. It documents added features (BIP32 validation improvements, fuzzing support), fixed bugs (PSBT allocation failure handling, transaction parsing quadratic behavior, Liquid transaction short commitments, BIP341 output correspondence checks, map integer reinsertion bug, JS dependency bumps), and minor fixes. The actual code changes for these items are not present in this commit; only the changelog text is changed.
Changed components
Inspect captured patch +17 / −2
diff --git a/CHANGES.md b/CHANGES.md
index bcb6e8f..8c5eb16 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,12 +1,27 @@
# Changes
+## Version 1.5.3
+
+### Added
+- bip32: Add updated BIP checks to bip32_key_unserialize().
+- build: Add support for fuzzing wally API calls.
+
+### Fixed
+- psbt: corectly handle allocation failures in psbt_set_global_tx().
+- tx: Avoid quadratic behaviour parsing txs with a huge number of witnesses.
+- tx: Fix parsing Liquid transactions with short commitments.
+- tx: Reject non-corresponding output as per bip341 when signing.
+- map: Fix incorrect clear when reinserting an integer after removing bytes.
+- js: Bump webpack, serialize-javascript and terser-webpack-plugin dependencies.
+- Various minor code and build fixes.
+
## Version 1.5.2
### Added
-- taproot: add bip341_control_block_verify().
+- taproot: Add bip341_control_block_verify().
### Changed
-- map: ignore duplicates in map_merkle_path_add() for consistency.
+- map: Ignore duplicates in map_merkle_path_add() for consistency.
### Fixed
- build: Fix building with the Elements ABI disabled.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.