chore: regenerate the changelog with gren 5.1.1

[cjbarth]

Rebuilds CHANGELOG.md with gren 5.1.1 and records the things the generator could not work out on its own.

What changed in the changelog

• Sections that were empty are filled in. Release membership attributes pull requests to the release whose commits contain them, so most releases before v6.1.0 — v0.8.0 through v0.9.0, v1.5.4–v1.5.6, v2.1.5, v2.1.6, v3.2.0, v3.2.1 — now list what they shipped instead of _No changelog for this release._.
• The security releases describe themselves. v6.0.1, v3.2.1 and v2.1.6 were each merged from a private fork, so there is no pull request to take a title or labels from. commitNotes in .grenrc.js gives those three commits an entry linking both advisories, which also restores the hand-written CVE line that regeneration would otherwise drop.
• Already-released changes are no longer announced twice. The v6.0.1–v6.1.2 releases were cut from 6.x, while master carried its own pull requests for the same fixes; those commits reached 6.x in chore: merge master into 6.x #600, and git cannot tell they are the same change. Address CVEs: CVE-2025-29774 and CVE-2025-29775 #494, Introduce new .getSignedReferences() function of signature to help prevent signature wrapping attacks #495, Adjust deprecation to better reflect real-world usage #498, Remove all reference XML data if any are corrupted #500 and Exports C14nCanonicalization, ExclusiveCanonicalization #471 are labelled duplicate and filtered with ignoreIssuesWith.
• Everything is grouped. Unlabelled pull requests were rendering as [**closed**] under 🙈 Other; chore: merge master into 6.x #600, Add agent instructions #544, Deprecate getOriginalXmlWithIds() #516, Fix double callback invoke on unhandled exception #528, fix: Support nested enveloped signature location (#525) #526 are now labelled to match this repo's conventions, and Tests for sha256-rsa-MGF1 #515 moved from documentation to chore.

Outside this diff

The titles of #4 and #12 were fixed on GitHub — a trailing space and a *This* emphasis that made prettier reject the generated file. Fixing them at the source means npm run lint passes on gren's raw output, with no formatting step in the changelog script.

Verification

npm run build, npm test (325 passing) and npm run lint all pass. Generating from 6.x and from master now produces identical output apart from the line for #600 itself, which only exists on 6.x.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 600f57ad-9096-4789-86c1-cf90893706a0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}