1.36.2 changelog (#1186)

spikecurtis · johnstcn · commit 0a674098ada2 · 2022-12-06T16:30:05.000Z
* 1.36.2 changelog Signed-off-by: Spike Curtis <spike@coder.com> * Use consistent ordering of patch changelogs Signed-off-by: Spike Curtis <spike@coder.com> Signed-off-by: Spike Curtis <spike@coder.com> (cherry picked from commit 3becbfc)
diff --git a/changelog/1.36.2.md b/changelog/1.36.2.md
@@ -0,0 +1,21 @@
+---
+title: "1.36.2"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.36.2.
+
+### Features ✨
+
+There are no new features in 1.36.2.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/manifest.json b/manifest.json
@@ -610,6 +610,9 @@
         {
           "path": "./changelog/1.36.0.md",
           "children": [
+            {
+              "path": "./changelog/1.36.2.md"
+            },
             {
               "path": "./changelog/1.36.1.md"
             }

Original file line number	Diff line number	Diff line change
`@@ -610,6 +610,9 @@`
`610`	`610`	`{`
`611`	`611`	`"path": "./changelog/1.36.0.md",`
`612`	`612`	`"children": [`
	`613`	`+ {`
	`614`	`+ "path": "./changelog/1.36.2.md"`
	`615`	`+ },`
`613`	`616`	`{`
`614`	`617`	`"path": "./changelog/1.36.1.md"`
`615`	`618`	`}`