[bitcoindevkit-release-plz]

🤖 New release

• bdk-cli: 4.0.0 -> 4.1.0

Changelog

4.1.0 - 2026-10-27

Added

• (wallet) add saved config list and delete commands
• (hwi) Add fingerprint to "hwi xpub"
• (hwi) Add merging ext and int desc into policy
• (hwi) Move register, address & sign to wallet
• (hwi) Reuse saved wallet config for hwi
• (hwi) Add hwi documentation
• (hwi) Add hidapi to workflows
• (hwi) Add hwi feature to dispatch and routing
• (hwi) Add hwi subcommand handler
• (hwi) Add utility fns to detect & list device
• (multipath) Add checks for desc pair
• (multipath) Add tests for multipath desc
• (multipath) limit multipath desc to two paths
• (multipath) add multipath desc support

Fixed

• (log) show warnings by default
• (compile) compile only for the requested script context
• (cli) use valid envt variable names for env fallbacks
• (client) Route cbf traffic via configured SOCKS5 proxy
• (client) route electrum & esplora traffic through config proxy
• (deps) bump rustls to 0.23.45
• (deps) bump chacha20 to 0.10.2
• (fee_rate) parse fee_rate at clap and keep sub-sat/vB precision
• (create_tx,bump_fee) return errors instead of panicking
• harden datadir and config file permissions
• (combine_psbt) Propagate Psbt::combine errors

Other

• Merge docs: list supported network values in CLI help #364: docs: list supported network values in CLI help

• (config) remove redundant wallet field from WalletConfigInner

• test redb without default features

• document saved wallet config commands

• (hwi) add more tests to helper fns

• list supported network values in CLI help

• (hwi) move descriptor utils into descriptor utils

• (changelog) note warnings shown by default

• (compile) cover sh and sh-wsh script types

• (compile) use ValueEnum for script type

• removed changelog section from pr template

• bump workflow action versions

• add release-plz workflow and update release docs

• remove unused tap dependency

• Added support for Multipath (two-paths) descriptors.

• Fixed the data directory and config.toml permission being world-readable (0755/0644) to 0700/0600 on Unix.

• Fixed create_tx and bump_fee panicking on malformed --utxos and --add_data values instead of returning an error

• Fixed --fee_rate silently truncating to a whole sat/vB, falling back to a default, or producing a zero-fee transaction, unusable values are now rejected

• Fixed routing electrum and esplora traffic through configured socks5 proxy

• Routed compact filter (cbf) traffic through the configured SOCKS5 proxy

• Rejected --proxy on the rpc backend, and unsupported proxy options (--proxy_auth, --timeout) on the rpc and cbf backends, instead of silently ignoring them

• Fixed compile rejecting policies that are valid for the requested script type

• Fixed warn! messages, including the mainnet notice, being hidden unless RUST_LOG was set; warnings are now shown by default

• Added hwi feature with a hardware wallet hwi command to list connected devices, register a wallet policy, display a receive address, and sign PSBTs. Supports Ledger, Coldcard, BitBox02, Jade and Specter.

• Replaced plain wallets with wallets list, and added wallets delete <wallet_name> for unused saved wallet configurations.

• Removed the redundant wallet field from wallets list output; the wallet name is still available as the top-level key

---

This PR was generated with release-plz.

[notmandatory]

Ran this as a test to confirm the GitHub settings are correct. Looks good so far, the final test will be when we publish the next version. Before publishing we should update this PR by running the release-plz action again, and then manually clean up the CHANGELOG.md file before merging.

[notmandatory]

@tvpeter any ideas on what we need to do to fix the audit issues? Are we waiting for some upstream fixes?

[tvpeter]

@tvpeter any ideas on what we need to do to fix the audit issues? Are we waiting for some upstream fixes?

Yes, we are waiting for upstream fix. @vadim-anfv was tracking it in #308