Add 1.35.4 changelog (#1187)

spikecurtis · johnstcn · commit 4a75a505e9ea · 2022-12-06T16:30:14.000Z
Signed-off-by: Spike Curtis <spike@coder.com> Signed-off-by: Spike Curtis <spike@coder.com> (cherry picked from commit 6a7115c)
diff --git a/changelog/1.35.4.md b/changelog/1.35.4.md
@@ -0,0 +1,21 @@
+---
+title: "1.35.4"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.35.4.
+
+### Features ✨
+
+There are no new features in 1.35.4.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/manifest.json b/manifest.json
@@ -621,6 +621,9 @@
         {
           "path": "./changelog/1.35.0.md",
           "children": [
+            {
+              "path": "./changelog/1.35.4.md"
+            },
             {
               "path": "./changelog/1.35.3.md"
             },
