From 008b2ed9528f3f0f248304467816cbbb50fa1bf1 Mon Sep 17 00:00:00 2001 From: Li Lin Date: Fri, 8 Jul 2022 13:09:33 -0700 Subject: [PATCH] Add section for --var-file-allowlist in changelog (#2375) * Add section for --var-file-allowlist in changelog * Update CHANGELOG.md Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com> Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com> --- CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 22e021ce15..1c19970f02 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,12 @@ Bugfixes and new Features https://github.com/runatlantis/atlantis/releases/tag/v0.19.5 +## Backwards Incompatibilities / Notes: +* `--var-file-allowlist` flag has been added to restrict the access of files on Atlantis install from pull request + comments. Set the flag if you want to explicitly grant the access to files outside the default data directory. + + Previously, any file could be passed to `-var-file`. Now only files under the directories in the allowlist are permitted. + # v0.19.4 Bugfixes and new Features