doc: update changelogs

Author: vikalp-mightybyte

CHANGELOG-Unreleased.md

@@ -6,11 +6,26 @@
 
 ### New features
 
+- [SQLCipher] Add `changePassword(newPassphrase)` API to change encryption key on an open database at runtime (JSI-only)
+- [SQLCipher] Add `sqlite3_rekey` support in native C++ layer with post-rekey verification
+
 ### Fixes
 
 - [LokiJS] Multitab sync issue fix
 - [Android] Added linker flag for building with 16kB page alignment
 - [TS] make catchError visible to typescript
+- [SQLCipher] Fix use-after-free when encrypted database fails to open (error message was read after `sqlite3_close`)
+- [SQLCipher] Fix `throw new` to `throw` in native C++ so exceptions are catchable by `catch(const std::exception&)` handlers
+- [SQLCipher] Fix sqlite handle leak on `sqlite3_open` failure (missing `sqlite3_close` before throw)
+- [SQLCipher] Zero encryption password from memory after use in Database, DatabaseBridge, and SqliteDb layers
+- [SQLCipher] Zero password on error path in `changePassword` bridge method
+- [SQLCipher] Throw error when `passphrase` is used without `jsi: true` to prevent silent fallback to unencrypted DB
+- [SQLCipher] Make passphrase+jsi invariant run in production builds (not dev-only)
+- [SQLCipher] Forward `passphrase` in `testClone` to support encrypted database cloning
+- [Android] Align gradle property name `isEncryptedDB` with docs and iOS podspec (was `encryptedDB`)
+- [Native] Restore `#include` in shared C++ headers for MSVC/GCC portability (revert `#import`)
+- [Native] Restore standard `public:`/`private:` indentation in shared header class declarations
+- [Native] Clean up debug log markers (`#####`) in encryption path
 
 ### Performance
 
@@ -22,3 +37,5 @@
 
 - Updated internal dependencies
 - Updated documentation scripts
+- [SQLCipher] Add Node Jest tests for encryption validation and passphrase plumbing
+- [SQLCipher] Add RN integration tests for encrypted DB round-trip, `changePassword`, and error cases

CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to this project will be documented in this file.
 
 Contributors: Please add your changes to CHANGELOG-Unreleased.md
 
+## 0.28.1-1 - 2026-03-26
+
+### New features
+
+- [SQLCipher] Add `changePassword(newPassphrase)` API to change encryption key at runtime (JSI-only)
+- [SQLCipher] Add `sqlite3_rekey` support in native C++ layer with post-rekey verification
+
+### Fixes
+
+- [SQLCipher] Fix use-after-free when encrypted database fails to open
+- [SQLCipher] Fix `throw new` to `throw` in native C++ so exceptions are catchable
+- [SQLCipher] Fix sqlite handle leak on `sqlite3_open` failure
+- [SQLCipher] Zero encryption password from memory after use at all native layers
+- [SQLCipher] Throw error when `passphrase` is used without `jsi: true`
+- [SQLCipher] Forward `passphrase` in `testClone` for encrypted database support
+- [Android] Align gradle property `isEncryptedDB` with docs and iOS podspec
+- [Native] Restore `#include` in shared C++ headers for cross-platform portability
+- [Native] Clean up debug log markers in encryption path
+
+### Internal
+
+- [SQLCipher] Add Node Jest and RN integration tests for encryption
+
 ## 0.28 - 2025-04-07
 
 ### BREAKING CHANGES