update CHANGES.md for release 1.5.4
What the developer wrote
Authored by Jon Griffiths
update CHANGES.md for release 1.5.4
What changed, and why it matters
This commit only updates the project's changelog file (CHANGES.md) to document what is included in the upcoming 1.5.4 release. No actual source code, build scripts, or configuration files were changed. It is a documentation-only release-notes update.
No security action needed for this commit. Review the actual code commits that correspond to the fixed items listed under Version 1.5.4 if a security assessment of those changes is required.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to CHANGES.md, adding a Version 1.5.4 section and fixing a typo in the previous 1.5.3 section (‘Corectly’). The listed fixed items describe changes that were presumably made in earlier commits, but this commit itself does not contain any of those code changes. Therefore it introduces no security-relevant code behavior on its own.
Changed components
CHANGES.mdInspect captured patch +22 / −1
diff --git a/CHANGES.md b/CHANGES.md
index 8c5eb16..35de086 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,5 +1,26 @@
# Changes
+## Version 1.5.4
+
+### Added
+- descriptor: Add support for elements confidential wallet policies.
+- docker: Build amd64/arm64 multi-arch images, migrate to blockstream/wallycore.
+- python: Add support and release wheels for Python 3.14.
+
+### Changed
+- build: Move CI and docker images to Debian Trixie.
+- deps: Bump libsecp256k1-zkp to current master branch, update emsdk.
+- java: update source version to v17 for supported Java installs.
+- js: Move to Node v24, bump fast-uri dependency.
+
+### Fixed
+- python: Remove internal dependency on distutils (which is now deprecated).
+- descriptor: Disallow leading zero in numbers/policy key indices.
+- descriptor: Return WALLY_ENONMEM correctly on out-of-memory errors.
+- elements: Align unblinding behaviour with elements-core.
+- build: Add missing cmake defines.
+- build: Various build and test fixes.
+
## Version 1.5.3
### Added
@@ -7,7 +28,7 @@
- build: Add support for fuzzing wally API calls.
### Fixed
-- psbt: corectly handle allocation failures in psbt_set_global_tx().
+- psbt: Corectly handle allocation failures in psbt_set_global_tx().
- tx: Avoid quadratic behaviour parsing txs with a huge number of witnesses.
- tx: Fix parsing Liquid transactions with short commitments.
- tx: Reject non-corresponding output as per bip341 when signing.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.