docs: update CHANGELOG.md for GHSA-4q64-52jh-rg9v - #336

No actionable comments were generated in the recent review.

Walkthrough

The 0.10.6 changelog now records a security fix for API tokens or client secrets appearing in debug logs when debug mode is enabled.

Changes

Security changelog

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other · Severity of issue fixed: Medium

Suggested reviewers: rhamzeh, ewanharris

Merge Risk: Minimal · up to d444a

This change only updates release notes to mention a security advisory fix. It does not alter runtime behavior, so there is no merge-blocking risk.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title "docs: update CHANGELOG.md for GHSA-4q64-52jh-rg9v" matches the changeset. The only change is a 0.10.6 changelog entry under Security that documents the fix for GHSA-4q64-52jh-rg9v, where AP…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title "docs: update CHANGELOG.md for GHSA-4q64-52jh-rg9v" matches the changeset. The only change is a 0.10.6 changelog entry under Security that documents the fix for GHSA-4q64-52jh-rg9v, where API tokens or client secrets could be written to debug logs. The title is specific and concise. It names the file and the advisory ID, though it does not describe the security issue itself.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6ec33c54-327c-4020-ab5d-bf11cbe69114

Commits

Reviewing files that changed from the base of the PR and between a21a531 and d444acb.

Files selected for processing: 1

• CHANGELOG.md

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.03%. Comparing base (a21a531) to head (d444acb).

❌ Your project status has failed because the head coverage (70.03%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

@@           Coverage Diff           @@
##             main     #336   +/-   ##
=======================================
  Coverage   70.03%   70.03%           
=======================================
  Files         143      143           
  Lines       10791    10791           
=======================================
  Hits         7558     7558           
  Misses       3233     3233           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.