update CHANGELOG

Author: matthiasgeihs

packages/seedless-onboarding-controller/CHANGELOG.md

@@ -27,6 +27,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - check for token expired in toprf call, refresh token and retry if expired
   - `submitPassword` revoke refresh token and replace with new one after password submit to prevent malicious use if refresh token leak in persisted state
 - Removed `recoveryRatelimitCache` from the controller state. ([#5976](https://github.com/MetaMask/core/pull/5976)).
+- Changed `recoverCurrentDevicePassword` to no longer persist passwords in the backup store. ([#5988](https://github.com/MetaMask/core/pull/5988))
 
 ## [1.0.0]