[SoulPancake]

Updating changelog to mention fix for GHSA-4q64-52jh-rg9v in v0.10.6

Summary by CodeRabbit

• Security
  • Fixed an issue where API tokens or client secrets could appear in debug logs when debug mode was enabled. They are no longer written to those logs.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The 0.10.6 changelog now records a security fix for API tokens or client secrets appearing in debug logs when debug mode is enabled.

Changes

Security changelog

Layer / File(s)	Summary
Record the security fix CHANGELOG.md	The 0.10.6 changelog documents that API tokens or client secrets could be written to debug logs when debug mode was enabled.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other · Severity of issue fixed: Medium

Suggested reviewers: rhamzeh, ewanharris

Merge Risk: Minimal · up to d444a

This change only updates release notes to mention a security advisory fix. It does not alter runtime behavior, so there is no merge-blocking risk.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title "docs: update CHANGELOG.md for GHSA-4q64-52jh-rg9v" matches the changeset. The only change is a 0.10.6 changelog entry under Security that documents the fix for GHSA-4q64-52jh-rg9v, where AP…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title "docs: update CHANGELOG.md for GHSA-4q64-52jh-rg9v" matches the changeset. The only change is a 0.10.6 changelog entry under Security that documents the fix for GHSA-4q64-52jh-rg9v, where API tokens or client secrets could be written to debug logs. The title is specific and concise. It names the file and the advisory ID, though it does not describe the security issue itself.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6ec33c54-327c-4020-ab5d-bf11cbe69114

Commits

Reviewing files that changed from the base of the PR and between a21a531 and d444acb.

Files selected for processing: 1

• CHANGELOG.md

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

[Copilot]

🟢 Approval recommended

No active review issues were identified for the changelog update documenting the v0.10.6 credential-logging security fix.

No open issues 🎉

What changed in this PR

Updates the Python SDK changelog to document the security fix included in v0.10.6.

Changes:

• Adds a Security entry for GHSA-4q64-52jh-rg9v, describing possible API token or client secret exposure in debug logs.
• Links the entry to the security advisory and fixing commit.

File	Description
CHANGELOG.md	Documents the credential-logging security fix under v0.10.6.

_{Review effort: Balanced}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.03%. Comparing base (a21a531) to head (d444acb).

❌ Your project status has failed because the head coverage (70.03%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #336   +/-   ##
=======================================
  Coverage   70.03%   70.03%           
=======================================
  Files         143      143           
  Lines       10791    10791           
=======================================
  Hits         7558     7558           
  Misses       3233     3233           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.