Commit 32660c81 authored by GitLab Release Tools Bot's avatar GitLab Release Tools Bot Committed by John T Skarbek

Update CHANGELOG.md for 13.11.2-ee

[ci skip]
parent 5735ea1b
......@@ -2,6 +2,17 @@
documentation](doc/development/changelog.md) for instructions on adding your own
entry.
## 13.11.2 (2021-04-27)
### Security (5 changes)
- Prevent tokens with only read_api scope from executing mutations.
- Do not allow deploy tokens in the dependency proxy authentication service.
- Disable keyset pagination for branches by default.
- Bump Carrierwave gem to v1.3.2.
- Restrict setting system_note_timestamp to owners.
## 13.11.1 (2021-04-22)
### Changed (1 change)
......
---
title: Prevent tokens with only read_api scope from executing mutations
merge_request:
author:
type: security
---
title: Do not allow deploy tokens in the dependency proxy authentication service
merge_request:
author:
type: security
---
title: Disable keyset pagination for branches by default
merge_request:
author:
type: security
---
title: Bump Carrierwave gem to v1.3.2
merge_request:
author:
type: security
---
title: Restrict setting system_note_timestamp to owners
merge_request:
author:
type: security
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment