--- CBOR-XS/Changes	2013/11/28 12:08:07	1.29
+++ CBOR-XS/Changes	2013/12/01 14:48:00	1.40
@@ -1,12 +1,29 @@
 Revision history for Perl extension CBOR::XS
 
-1.0
-TODO: stringref for hash keys only?
-TODO: document utf8 strings etc.
+TODO: pack_keys?
+TODO: document encode_cbor_sharing?
+TODO: weaken cyclic structures?
+
+1.11
+	- new setting: validate_utf8, for when you can't trust your cbor data.
+        - do not leak memory on decoding errors, when allow_cycles is enabled.
+
+1.1  Sat Nov 30 19:14:27 CET 2013
+	- INCOMPATIBLE CHANGE: new decoder setting: allow_cyclic, needed to decode
+          cyclic data structures (to avoid memleaks in unsuspecting code).
+	- no longer "share" references that aren't, i.e. true/false/null/error/tagged.
+	- fix stringref w.r.t. indefinite-length strings.
+        - verify indefinite-length string chunk types.
+        - do not allow extremely large arrays - assume an array element
+          requires at least one CBOR byte, to avoid memory exhaustion attacks.
+        - major code overhaul.
+
+1.0  Thu Nov 28 16:43:31 CET 2013
         - use the now official tag values for extensions. remove the
           experimental notice. it's the real thing now, with real bugs.
         - renamed allow_stringref to pack_strings.
 	- port to perl <= 5.16.
+        - slightly improve the documentation.
 
 0.09  Fri Nov 22 16:54:18 CET 2013
 	- bignum/bigfloat/decimal support.