[SoulPancake]

Updating changelog to mention fix for GHSA-c949-2vhm-4ghg in v0.11.2

Summary by CodeRabbit

• Security
  • Documented an issue where enabling debug logging could expose client secrets in error output, along with a reference to the fix and security advisory.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The 0.11.2 changelog adds a Security entry about client secrets being written to standard error when HttpRequestAttempt.debug-logging is enabled. It links to the advisory and fix commit.

Changes

Security changelog

Layer / File(s)	Summary
Document the client-secret exposure CHANGELOG.md	The 0.11.2 changelog documents the client-secret exposure and links to the advisory and fix commit.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other · Severity of issue fixed: Medium

Suggested reviewers: ewanharris

Merge Risk: Minimal · up to 40573

This is a documentation-only changelog update that records a security fix. It does not change runtime behavior and is ready to merge.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title names the actual change: a CHANGELOG.md update that documents the fix for GHSA-c949-2vhm-4ghg. The raw summary confirms the changeset adds a 0.11.2 Security entry about client secrets writte…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the actual change: a CHANGELOG.md update that documents the fix for GHSA-c949-2vhm-4ghg. The raw summary confirms the changeset adds a 0.11.2 Security entry about client secrets written to standard error when HttpRequestAttempt.debug-logging was enabled. The title is specific and matches the single file changed, though it does not describe the vulnerability itself.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: fa27d0e1-ea18-4f5a-807a-e9bfbef94cf0

Commits

Reviewing files that changed from the base of the PR and between 523e06f and 40573d4.

Files selected for processing: 1

• CHANGELOG.md

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

[Copilot]

🟢 Approval recommended

No active review issues are identified for the documentation-only changelog update describing the client-secret logging fix.

No open issues 🎉

What changed in this PR

Updates the v0.11.2 changelog to document the fix for security advisory GHSA-c949-2vhm-4ghg. This is a documentation-only change.

Changes:

• Adds a Security section describing possible client-secret exposure to standard error when HttpRequestAttempt.debug-logging is enabled.
• Links the advisory and the commit containing the fix.

File	Description
CHANGELOG.md	Documents the client-secret logging fix in v0.11.2.

_{Review effort: Balanced}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 39.48%. Comparing base (523e06f) to head (40573d4).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #414   +/-   ##
=========================================
  Coverage     39.48%   39.48%           
  Complexity     1332     1332           
=========================================
  Files           202      202           
  Lines          7776     7776           
  Branches        916      916           
=========================================
  Hits           3070     3070           
  Misses         4549     4549           
  Partials        157      157           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.