diff --git a/docs/NEWS.md b/docs/NEWS.md
index 5185069..0ee9a2a 100644
--- a/docs/NEWS.md
+++ b/docs/NEWS.md
@@ -1,10 +1,10 @@
 ### 1.8.x-UNRELEASED
 
+ * fix: corrected percentage formatting so it doesn't jump from 2 to 3 characters wide at 100% ([#80](https://codeberg.org/a-j-wood/pv/issues/80))
  * fix: replaced "`--remote`" mechanism, using a temporary file instead of SysV IPC, so it can work reliably even when there are multiple PV instances
  * fix: corrected compilation failure when without IPC support
- * fix: corrected percentage formatting so it doesn't jump from 2 to 3 characters wide at 100% ([#80](https://codeberg.org/a-j-wood/pv/issues/80))
+ * security: addressed all issues highlighted by the software auditing tools "`splint`" and "`flawfinder`" (see "`make analyse`") ([#77](https://codeberg.org/a-j-wood/pv/issues/77))
  * cleanup: compilation warnings fixed on non-IPC and MacOS systems
- * cleanup: addressed more potential issues highlighted by the software auditing tools "`splint`" and "`flawfinder`" (see "`make analyse`")
 
 ### 1.8.0 - 24 September 2023
 
diff --git a/docs/TODO.md b/docs/TODO.md
index dcb45a7..d2fede5 100644
--- a/docs/TODO.md
+++ b/docs/TODO.md
@@ -26,6 +26,5 @@ Things still to do.  (#n) indicates the issue tracker number.
  * ([#56](https://codeberg.org/a-j-wood/pv/issues/56)) Support for backgrounding pv, and allowing it to be monitored separately ([jimbobmcgee](https://github.com/jimbobmcgee))
  * ([#67](https://codeberg.org/a-j-wood/pv/issues/67)) Wrap another process to monitor its stdin & stdout ([Alex Mason](https://github.com/axman6))
  * ([#76](https://codeberg.org/a-j-wood/pv/issues/76)) Provide a way to test translations without installing
- * ([#77](https://codeberg.org/a-j-wood/pv/issues/77)) Eliminate all warnings from "splint" and "flawfinder"
 
 Any assistance would be appreciated.