update CHANGES.md for release 1.5.2
What changed, and why it matters
This commit only updates the project's CHANGES.md release notes file. It documents what was added, changed, and fixed in version 1.5.2, but it does not modify any source code, build scripts, or cryptographic logic. The actual security-relevant fixes were made in earlier commits that are merely summarized here.
Review the actual commits that implemented the listed fixes (PSBT parsing, BIP118 sighash, taproot control block verification) to assess their security impact; this documentation commit itself requires no action.
Security signals we found
Release notes mention prior fixes to PSBT parsing checks, BIP118 sighash computation, and taproot control block verification
No source-code changes in this commit
Evidence from the diff
The diff is a documentation-only change to CHANGES.md listing release 1.5.2 items: a new taproot API (bip341_control_block_verify), a map duplicate-handling change, and fixes for Elements ABI builds, BIP118 ANYPREVOUTANYSCRIPT sighash computation, and PSBT parsing checks for merkle paths, witnesses, and buffer lengths. No code is changed in this commit.
Changed components
CHANGES.mdInspect captured patch +13 / −0
diff --git a/CHANGES.md b/CHANGES.md
index 6597987..bcb6e8f 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,5 +1,18 @@
# Changes
+## Version 1.5.2
+
+### Added
+- taproot: add bip341_control_block_verify().
+
+### Changed
+- map: ignore duplicates in map_merkle_path_add() for consistency.
+
+### Fixed
+- build: Fix building with the Elements ABI disabled.
+- tx: Fix BIP118 ANYPREVOUTANYSCRIPT sighash computation.
+- psbt: Fix merkle path, witness and buffer length checks when parsing.
+
## Version 1.5.1
### Added
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.