Skip to content

Conversation

@tusharpandey13
Copy link
Contributor

@tusharpandey13 tusharpandey13 commented Nov 17, 2025

Updated some missing community contributions in CHANGELOG.

Credit Joshua Rogers (@MegaManSec) as the original author who
discovered and fixed the OAuth parameter injection vulnerability
in PR #2381.

This corrects an attribution error in PR #2413 where the commit
message incorrectly credited a different person.
@tusharpandey13 tusharpandey13 requested a review from a team as a code owner November 17, 2025 04:40
@tusharpandey13 tusharpandey13 changed the title docs: correct attribution in changelog for security fix docs: Correct attribution in changelog for security fix Nov 17, 2025
@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.38%. Comparing base (3abb9b5) to head (0c934c8).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2416   +/-   ##
=======================================
  Coverage   90.38%   90.38%           
=======================================
  Files          39       39           
  Lines        4481     4481           
  Branches      912      912           
=======================================
  Hits         4050     4050           
  Misses        425      425           
  Partials        6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@tusharpandey13 tusharpandey13 merged commit 817a4e2 into main Nov 17, 2025
9 checks passed
@tusharpandey13 tusharpandey13 deleted the fix/changelog-attribution-correction branch November 17, 2025 04:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants