hash-tree-0.1.1: ChangeLog.md

# ChangeLog for hash-tree

## 0.1.1

* Security: `verifyConsistencyProof` did not check that the second tree
  size was fully consumed (RFC 9162 Sec 2.1.4.2), so a proof could be
  accepted for a wrong second tree size. It also threw an error for
  over-long proofs and did not reject `first > second`.
* `verifyInclusionProof` now rejects a negative leaf index.