Document for GitOps 1.10.2 Release Notes

Fixing nitpick

modules/gitops-release-notes-1-10-2.adoc

@@ -0,0 +1,22 @@
+// Module included in the following assembly:
+//
+// * release_notes/gitops-release-notes.adoc
+
+:_mod-docs-content-type: REFERENCE
+[id="gitops-release-notes-1-10-2_{context}"]
+= Release notes for {gitops-title} 1.10.2
+
+{gitops-title} 1.10.2 is now available on {OCP} 4.12, 4.13, and 4.14.
+
+[id="fixed-issues-1-10-2_{context}"]
+== Fixed issues
+
+The following issue has been resolved in the current release:
+
+* Before this update, all versions of Argo CD `v2.8.3` and later were vulnerable to cross-server request forgery (CSRF) attacks. As a result, Argo CD would accept non-GET requests even if they did not specify their content type. This update fixes the issue by upgrading the Argo CD to `v.2.8.9` and patching this vulnerability in the Argo CD API.
+
+[IMPORTANT]
+====
+Breaking change: The Argo CD API will no longer accept non-GET requests that do not specify application or JSON as their content type. Although the accepted content types list is configurable, do not disable the content type check completely.
+====
+link:https://issues.redhat.com/browse/GITOPS-3922[GITOPS-3922]

modules/gitops-release-notes-1-9-4.adoc

@@ -0,0 +1,22 @@
+// Module included in the following assembly:
+//
+// * release_notes/gitops-release-notes.adoc
+
+:_mod-docs-content-type: REFERENCE
+[id="gitops-release-notes-1-9-4_{context}"]
+= Release notes for {gitops-title} 1.9.4
+
+{gitops-title} 1.9.4 is now available on {OCP} 4.12, 4.13, and 4.14.
+
+[id="fixed-issues-1-9-4_{context}"]
+== Fixed issues
+
+The following issue has been resolved in the current release:
+
+* Before this update, all versions of Argo CD `v2.7.2` and later were vulnerable to cross-server request forgery (CSRF) attacks. As a result, Argo CD would accept non-GET requests even if they did not specify their content type. This update fixes the issue by upgrading the Argo CD to `v.2.7.16` and patching this vulnerability in the Argo CD API.
+
+[IMPORTANT]
+====
+Breaking change: The Argo CD API will no longer accept non-GET requests that do not specify application or JSON as their content type. Although the accepted content types list is configurable, do not disable the content type check completely.
+====
+link:https://issues.redhat.com/browse/GITOPS-3921[GITOPS-3921]

release_notes/gitops-release-notes.adoc

@@ -25,12 +25,18 @@ include::modules/making-open-source-more-inclusive.adoc[leveloffset=+1]
 
 // Modules included, most to least recent
 
+// Release notes for Red Hat OpenShift GitOps 1.10.2
+include::modules/gitops-release-notes-1-10-2.adoc[leveloffset=+1]
+
 // Release notes for Red Hat OpenShift GitOps 1.10.1
 include::modules/gitops-release-notes-1-10-1.adoc[leveloffset=+1]
 
 // Release notes for Red Hat OpenShift GitOps 1.10.0
 include::modules/gitops-release-notes-1-10-0.adoc[leveloffset=+1]
 
+// Release notes for Red Hat OpenShift GitOps 1.9.4
+include::modules/gitops-release-notes-1-9-4.adoc[leveloffset=+1]
+
 // Release notes for Red Hat OpenShift GitOps 1.9.3
 include::modules/gitops-release-notes-1-9-3.adoc[leveloffset=+1]