update CHANGES.md for release 1.5.6
What changed, and why it matters
This commit only updates the project's changelog file (CHANGES.md) to document what is included in the upcoming 1.5.6 release. It does not change any source code, build scripts, tests, or documentation that affects how the software runs. The changelog entries describe fixes that were already made in earlier commits, including a security-relevant fix about preventing memory leaks via extended CPU registers on x86. Because this commit itself only edits the changelog, it introduces no new security risk and requires no action.
No action needed for this commit. Review the actual source-code commits that implemented the listed fixes if an audit of those changes is required.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is a single-file Markdown edit to CHANGES.md. It renames the ‘Version 1.5.5’ section to ‘Version 1.5.6’, adds three fixed items under that section (internal memcpy de-optimization on x86; descriptor base miniscript requirement for sh()/wsh(); descriptor rejection of nested expressions with unconsumed trailing input), and moves the previous 1.5.5 section to an ‘(Unreleased)’ heading. No code, build, or test changes are present. The security-relevant content is purely historical documentation of prior fixes.
Changed components
CHANGES.mdInspect captured patch +8 / −2
diff --git a/CHANGES.md b/CHANGES.md
index ce7bbda..d5f9bdd 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,9 +1,15 @@
# Changes
-## Version 1.5.5
+## Version 1.5.6
### Fixed
-- De-optimize some memcpy calls on x86 to prevent leaks via extended registers.
+- internal: De-optimize some memcpy calls on x86 to prevent leaks via extended registers.
+- descriptor: Require base miniscript expressions for sh()/wsh().
+- descriptor: Reject nested expressions with unconsumed trailing input.
+
+## Version 1.5.5
+
+(Unreleased)
## Version 1.5.4
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.