chore: add changelogs for 1.37.1, 1.36.2, 1.35.4 (#1188)

johnstcn · spikecurtis · web-flow · commit 87b5eed503bf · 2022-12-06T16:34:03.000Z
* chore: add 1.37.1 changelog (#1185) (cherry picked from commit ccd3847) * 1.36.2 changelog (#1186) * 1.36.2 changelog Signed-off-by: Spike Curtis <spike@coder.com> * Use consistent ordering of patch changelogs Signed-off-by: Spike Curtis <spike@coder.com> Signed-off-by: Spike Curtis <spike@coder.com> (cherry picked from commit 3becbfc) * Add 1.35.4 changelog (#1187) Signed-off-by: Spike Curtis <spike@coder.com> Signed-off-by: Spike Curtis <spike@coder.com> (cherry picked from commit 6a7115c) Co-authored-by: Spike Curtis <spike@spikecurtis.com>
diff --git a/changelog/1.35.4.md b/changelog/1.35.4.md
@@ -0,0 +1,21 @@
+---
+title: "1.35.4"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.35.4.
+
+### Features ✨
+
+There are no new features in 1.35.4.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/changelog/1.36.2.md b/changelog/1.36.2.md
@@ -0,0 +1,21 @@
+---
+title: "1.36.2"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.36.2.
+
+### Features ✨
+
+There are no new features in 1.36.2.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/changelog/1.37.1.md b/changelog/1.37.1.md
@@ -0,0 +1,21 @@
+---
+title: "1.37.1"
+description: "Released on 12/05/2022"
+---
+
+### Breaking changes ❗
+
+There are no breaking changes in 1.37.1.
+
+### Features ✨
+
+There are no new features in 1.37.1.
+
+### Bug fixes 🐛
+
+- Fixed an issue where operations on API keys were not audit-logged.
+
+### Security updates 🔐
+
+- Fixed an issue where an attacker could craft a malicious DevURL redirect link
+  to exfiltrate a token that allows accessing that user's devURLs.
diff --git a/manifest.json b/manifest.json
@@ -600,11 +600,19 @@
       "icon_path": "./assets/images/icons/paper.svg",
       "children": [
         {
-          "path": "./changelog/1.37.0.md"
+          "path": "./changelog/1.37.0.md",
+          "children": [
+            {
+              "path": "./changelog/1.37.1.md"
+            }
+          ]
         },
         {
           "path": "./changelog/1.36.0.md",
           "children": [
+            {
+              "path": "./changelog/1.36.2.md"
+            },
             {
               "path": "./changelog/1.36.1.md"
             }
@@ -613,6 +621,9 @@
         {
           "path": "./changelog/1.35.0.md",
           "children": [
+            {
+              "path": "./changelog/1.35.4.md"
+            },
             {
               "path": "./changelog/1.35.3.md"
             },

Original file line number	Diff line number	Diff line change
`@@ -600,11 +600,19 @@`
`600`	`600`	`"icon_path": "./assets/images/icons/paper.svg",`
`601`	`601`	`"children": [`
`602`	`602`	`{`
`603`		`- "path": "./changelog/1.37.0.md"`
	`603`	`+ "path": "./changelog/1.37.0.md",`
	`604`	`+ "children": [`
	`605`	`+ {`
	`606`	`+ "path": "./changelog/1.37.1.md"`
	`607`	`+ }`
	`608`	`+ ]`
`604`	`609`	`},`
`605`	`610`	`{`
`606`	`611`	`"path": "./changelog/1.36.0.md",`
`607`	`612`	`"children": [`
	`613`	`+ {`
	`614`	`+ "path": "./changelog/1.36.2.md"`
	`615`	`+ },`
`608`	`616`	`{`
`609`	`617`	`"path": "./changelog/1.36.1.md"`
`610`	`618`	`}`
`@@ -613,6 +621,9 @@`
`613`	`621`	`{`
`614`	`622`	`"path": "./changelog/1.35.0.md",`
`615`	`623`	`"children": [`
	`624`	`+ {`
	`625`	`+ "path": "./changelog/1.35.4.md"`
	`626`	`+ },`
`616`	`627`	`{`
`617`	`628`	`"path": "./changelog/1.35.3.md"`
`618`	`629`	`},`