[1.5.x] Add release notes and bump version numbers for 1.5.4 security release.