FTR, just because we have made a habit of putting out nice summaries of changes, alongside sometimes announcing cherrypicked packages, it doesn't mean that our lovely users should expect everything to get announced; we highlight stuff that looks interesting and the rest we leave out at our discretion.
As it happens, I was the person who approved the bash PR (which dealt with reinstating missing install-time defaults), and who subsequently asked if the bash package could be cherrypicked to shannon.
We build Release Candidate ISOs from the shannon repo, so it needed to go in for RC ISO testing. These kinds of changes can happen during RC freeze periods.
End of story.