1.36.2 changelog (#1186)

spikecurtis · web-flow · commit 3becbfca86a9 · 2022-12-05T14:29:08.000-08:00
* 1.36.2 changelog

Signed-off-by: Spike Curtis &lt;spike@coder.com&gt;

* Use consistent ordering of patch changelogs

Signed-off-by: Spike Curtis &lt;spike@coder.com&gt;

Signed-off-by: Spike Curtis &lt;spike@coder.com&gt;
diff --git a/changelog/1.36.2.md b/changelog/1.36.2.md
@@ -0,0 +1,21 @@
+---
+title: "1.36.2"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.36.2.
+
+### Features ✨
+
+There are no new features in 1.36.2.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/manifest.json b/manifest.json
@@ -587,6 +587,9 @@
         {
           "path": "./changelog/1.36.0.md",
           "children": [
+            {
+              "path": "./changelog/1.36.2.md"
+            },
             {
               "path": "./changelog/1.36.1.md"
             }

Original file line number	Diff line number	Diff line change
`@@ -587,6 +587,9 @@`
`587`	`587`	`{`
`588`	`588`	`"path": "./changelog/1.36.0.md",`
`589`	`589`	`"children": [`
	`590`	`+ {`
	`591`	`+ "path": "./changelog/1.36.2.md"`
	`592`	`+ },`
`590`	`593`	`{`
`591`	`594`	`"path": "./changelog/1.36.1.md"`
`592`	`595`	`}`