doc: add CHANGES.md entry for const-correct X509_ATTRIBUTE functions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
MergeDate: Fri Feb 13 14:46:30 2026
(Merged from https://github.com/openssl/openssl/pull/29813)

diff --git a/CHANGES.md b/CHANGES.md
index 98e78e5d10a4bfd56555efc16963dbd9a5621912..a8682317e537b650397ad31e2b3ecedea89eb087 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -47,6 +47,15 @@ OpenSSL 4.0
 
    *Bob Beck*
 
+ * Made X509_ATTRIBUTE accessor functions const-correct. The functions
+   X509_ATTRIBUTE_get0_object(), X509_ATTRIBUTE_get0_type(), and
+   X509_ATTRIBUTE_get0_data() now accept `const X509_ATTRIBUTE *` and
+   return const pointers. Related PKCS12 functions PKCS12_get_attr_gen(),
+   PKCS12_get_attr(), and PKCS8_get_attr() have also been updated to
+   return `const ASN1_TYPE *`.
+
+   *kovan*
+
  * Added CSHAKE as per [SP 800-185]
 
    *Shane Lontis*