password_hash
* add changelog fragment * password_hash|length == 120 * mention the new default bcrypt format in the porting guide