chore: release v0.5.4 (#112)

github-actions[bot] · brendanjryan · web-flow · commit 38101df36eb2 · 2026-04-02T22:30:21.000-07:00
Co-authored-by: brendanjryan &lt;1572504+brendanjryan@users.noreply.github.com&gt;
diff --git a/.changelog/quiet-birds-swim.md b/.changelog/quiet-birds-swim.md
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.4 (2026-04-03)
+
+### Patch Changes
+
+- Fixed Tempo attribution memos to be deterministically bound to challenge IDs using a keccak256-derived nonce instead of random bytes. Added `verify_challenge_binding` to enforce that verified payments carry a memo matching the specific challenge being redeemed. (by @BrendanRyan, [#111](https://github.com/tempoxyz/pympp/pull/111))
+
 ## 0.5.3 (2026-04-01)
 
 ### Patch Changes
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pympp"
-version = "0.5.3"
+version = "0.5.4"
 description = "Python SDK for the Machine Payments Protocol (MPP)"
 readme = "README.md"
 requires-python = ">=3.11"
