f add two new merged prs

Author: TheBlueMatt

CHANGELOG.md

@@ -38,6 +38,9 @@ the old mempool/low/medium/high priorities are as follows:
    route a payment through from being able to learn the sender of the payment.
    In some rare cases, this may result in marginally reduced payment success
    rates (#2666).
+ * Anchor outputs are now properly considered when calculating the amount
+   available to send in HTLCs. This can prevent force-closes in anchor channels
+   when sending payments which overflow the available balance (#2674).
  * A peer which sends a `update_fulfill_htlc` message for a forwarded HTLC, then
    reconnects prior to sending a `commitment_signed` (thus retransmitting their
    `update_fulfill_htlc`) may result in the channel stalling and being unable
@@ -55,6 +58,13 @@ the old mempool/low/medium/high priorities are as follows:
    peers also working to confirm the latest commitment transaction when we wish
    to force-close (#2658).
 
+## Security
+0.0.118 expands mitigations against transaction cycling attacks to non-anchor
+channels, though note that no mitigations which exist today are considered robust
+to prevent the class of attacks.
+ * In order to mitigate against transaction cycling attacks, non-anchor HTLC
+   transactions are now properly re-signed before broadcasting (#2667).
+
 XXX diff stats
 
 # 0.0.117 - Oct 3, 2023 - "Everything but the Twelve Sinks"