What the developer wrote
Authored by ziggie
docs: update release notes
What changed, and why it matters
This commit only edits the release notes document. It describes a previously merged code change that tightens validation of time-lock settings for Lightning payments, but the commit itself contains no code changes and therefore does not alter software behavior or fix a bug directly.
No action is needed for this documentation commit. Review PR #10927 separately if you want to assess the actual security relevance of the functional change it describes.
Security signals we found
Release notes mention a prior change that validates final-hop HTLC CLTV expiry and caps per-channel TimeLockDelta at 2016
No code, build, configuration, or cryptographic changes are present in this commit
Evidence from the diff
The diff adds a paragraph to docs/release-notes/release-notes-0.21.1.md documenting PR #10927. That PR apparently makes LND validate the CLTV expiry of final-hop HTLCs against the node’s receive policy and enforces a maximum channel TimeLockDelta of 2016. This commit is purely documentation; no source code is modified.
Changed components
docs/release-notes/release-notes-0.21.1.mdInspect captured patch +11 / −0
diff --git a/docs/release-notes/release-notes-0.21.1.md b/docs/release-notes/release-notes-0.21.1.md
index 4741674..870c5f0 100644
--- a/docs/release-notes/release-notes-0.21.1.md
+++ b/docs/release-notes/release-notes-0.21.1.md
@@ -47,6 +47,17 @@
## Functional Updates
+* lnd now [validates the CLTV expiry of HTLCs at the final
+hop](https://github.com/lightningnetwork/lnd/pull/10927). A final HTLC whose
+CLTV expiry falls outside the node's receive policy is failed back, bringing
+the final hop in line with the CLTV delta limits already enforced on the
+forwarding path.
+As part of this change, the channel policy `TimeLockDelta` is
+now validated against LND's supported forwarding bounds: any node that
+previously set a per-channel `TimeLockDelta` greater than `2016` (the maximum
+default value) will now have its `UpdateChannelPolicy` request
+rejected, and must lower the value accordingly below the specified maximum.
+
## RPC Updates
## lncli Updates
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.