Update CHANGELOG.

CHANGELOG

@@ -1,45 +1,59 @@
-Unreleased - 2025-11-15
+CHANGELOG
 
-"Error handling modernization" (in progress)
+v1.11.0 - 2025-11-15
 
-- Introduced typed, wrapped errors via certlib/certerr.Error (Source, Kind, Op, Err) with Unwrap.
-- Standardized helper constructors: DecodeError, ParsingError, VerifyError, LoadingError.
-- Preserved sentinel errors (e.g., ErrEncryptedPrivateKey, ErrInvalidPEMType, ErrEmptyCertificate) for errors.Is.
-- Refactored certlib to use certerr in key paths (CSR parsing/verification, PEM cert pool, certificate read/load).
-- Migrated logging/file.go and cmd/kgz away from github.com/pkg/errors to stdlib wrapping.
-- Removed dependency on github.com/pkg/errors; ran go mod tidy.
-- Added package docs for certerr and a README section on error handling and matching.
-- Added unit tests for certerr (Is/As and message formatting).
+Added
+- cache/mru: introduce MRU cache implementation with timestamp utilities.
 
-Planned next steps:
-- Continue refactoring remaining error paths for consistent wrapping.
-- Add focused tests for key flows (encrypted private key, CSR invalid PEM types, etc.).
-- Run golangci-lint (errorlint, errcheck) and address findings.
+Changed
+- certlib: complete overhaul to simplify APIs and internals.
+- repo: widespread linting cleanups across many packages (config, dbg, die,
+  fileutil, log/logging, mwc, sbuf, seekbuf, tee, testio, etc.).
+- cmd: general program cleanups; `cert-bundler` lint fixes.
 
-Release 1.2.1 - 2018-09-15
+Removed
+- rand: remove unused package.
+- testutil: remove unused code.
 
-+ Add missing format argument to Errorf call in kgz.
 
-Release 1.2.0 - 2018-09-15
+v1.10.1 — 2025-11-15
 
-+ Adds the kgz command line utility.
+Changed
+- certlib: major overhaul and refactor.
+- repo: linter autofixes ahead of release.
 
-Release 1.1.0 - 2017-11-16
 
-+ A number of new command line utilities were added
+v1.10.0 — 2025-11-14
 
-	+ atping
-	+ cruntar
-	+ renfnv
-        +
-	+ ski
-	+ subjhash
-	+ yamll
+Added
+- cmd: add `cert-revcheck` command.
 
-+ new package: ahash
-	+ package for loading hashes from an algorithm string
+Changed
+- ci/lint: add golangci-lint stage and initial cleanup.
 
-+ new certificate loading functions in the lib package
 
-+ new package: tee
-	+ emulates tee(1)
+v1.9.1 — 2025-11-15
+
+Fixed
+- die: correct calls to `die.With`.
+
+
+v1.9.0 — 2025-11-14
+
+Added
+- cmd: add `cert-bundler` tool.
+
+Changed
+- misc: minor updates and maintenance.
+
+
+v1.8.1 — 2025-11-14
+
+Added
+- cmd: add `tlsinfo` tool.
+
+
+v1.8.0 — 2025-11-14
+
+Baseline
+- Initial baseline for this changelog series.