From 2b09d6ae7e4cc9d19d57946a9f2e586fd1f5b878 Mon Sep 17 00:00:00 2001 From: Spike Curtis Date: Mon, 5 Dec 2022 22:18:26 +0000 Subject: [PATCH] Add 1.35.4 changelog Signed-off-by: Spike Curtis --- changelog/1.35.4.md | 21 +++++++++++++++++++++ manifest.json | 3 +++ 2 files changed, 24 insertions(+) create mode 100644 changelog/1.35.4.md diff --git a/changelog/1.35.4.md b/changelog/1.35.4.md new file mode 100644 index 000000000..2340c32cd --- /dev/null +++ b/changelog/1.35.4.md @@ -0,0 +1,21 @@ +--- +title: "1.35.4" +description: "Released on 12/05/2022" +--- + +### Breaking changes ❗ + +There are no breaking changes in 1.35.4. + +### Features ✨ + +There are no new features in 1.35.4. + +### Bug fixes 🐛 + +- Fixed an issue where operations on API keys were not audit-logged. + +### Security updates 🔐 + +- Fixed an issue where an attacker could craft a malicious DevURL redirect link + to exfiltrate a token that allows accessing that user's devURLs. diff --git a/manifest.json b/manifest.json index ca3f29c7c..18009d1f1 100644 --- a/manifest.json +++ b/manifest.json @@ -578,6 +578,9 @@ { "path": "./changelog/1.35.0.md", "children": [ + { + "path": "./changelog/1.35.4.md" + }, { "path": "./changelog/1.35.3.md" },