diff --git a/CHANGELOG.md b/CHANGELOG.md index b3fd1639..934f0938 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -24,3 +24,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed - Reverted webseed regression fix (PR #2002 by thePR0M3TH3AN) + +### Security + +- Fixed magnet parameter injection vulnerability via `xt` parameter decoding. (PR #2345 by PR0M3TH3AN) diff --git a/docs/agents/WEEKLY_AGENT_TASK_LOG.csv b/docs/agents/WEEKLY_AGENT_TASK_LOG.csv index 3db41fd7..f813cb3d 100644 --- a/docs/agents/WEEKLY_AGENT_TASK_LOG.csv +++ b/docs/agents/WEEKLY_AGENT_TASK_LOG.csv @@ -1,2 +1,3 @@ date,agent_name,prompt_file,status,branch,summary 2026-02-12,bug-reproducer-agent,bitvid-bug-reproducer-agent.md,completed,unstable,"Created reproducer for hashtag preferences flakiness (tests/hashtag-preferences.test.mjs)" +2026-02-12,changelog-agent,bitvid-changelog-agent.md,completed,unstable,"Drafted changelog and release notes for week of 2026-02-12" diff --git a/releases/draft-20260212.md b/releases/draft-20260212.md new file mode 100644 index 00000000..89c278a4 --- /dev/null +++ b/releases/draft-20260212.md @@ -0,0 +1,15 @@ +# Release Draft - 2026-02-12 + +## Highlights + +### Security Fixes (Main) + +- **Magnet Injection Vulnerability:** Addressed a potential injection vulnerability via the `xt` parameter in magnet links (PR #2345). This ensures stricter validation and safer handling of magnet URIs. + +### Maintenance (Unstable) + +- **Automated Audits:** Routine execution of the audit agent to verify code health and compliance (PR #2405). + +## Upgrade Notes + +- No breaking changes or major dependency updates in this window.