Add release notes

RELEASE_NOTES.md

@@ -23,6 +23,13 @@ bin/rails db:migrate
 
 ### 1.3. Follow the steps and commands detailed in these notes
 
+#### 1.3.1 Config Parameter change
+
+Prior to 0.28, Decidim offered the possibility of configuring the a list of disallowed domains used to restrict user access using either `Decidim.password_blacklist` or environment variable `DECIDIM_PASSWORD_BLACKLIST`. While upgrading to 0.28, those methods have been renamed as follows:
+
+`Decidim.password_blacklist` becomes `Decidim.denied_passwords`
+`DECIDIM_PASSWORD_BLACKLIST` becomes `DECIDIM_DENIED_PASSWORDS`
+
 ## 2. General notes
 
 ## 3. One time actions

decidim-admin/config/locales/en.yml

@@ -375,8 +375,8 @@ en:
         form:
           domain_too_short: Domain too short
         update:
-          error: Failed to update domain allowlist
-          success: Domain allowlist updated successfully
+          error: Failed to update domain whitelist
+          success: Domain whitelist updated successfully
       exports:
         export_as: "%{name} as %{export_format}"
         formats:
@@ -843,8 +843,8 @@ en:
           remove: Remove
           up: Up
         form:
-          add: Add to allowlist
-          title: External domain allowlist
+          add: Add to whitelist
+          title: External domain whitelist
       organization_homepage:
         content_blocks:
           create:

decidim-core/lib/decidim/core.rb

@@ -476,7 +476,7 @@ def self.reset_all_column_information
     ]
   end
 
-  # Blacklisted passwords. Array may contain strings and regex entries.
+  # Denied passwords. Array may contain strings and regex entries.
   config_accessor :denied_passwords do
     []
   end