From 212037f368e111f658e5f7cfde84a9683e828092 Mon Sep 17 00:00:00 2001 From: Andrey Antukh Date: Mon, 9 Nov 2026 09:56:27 +0000 Subject: [PATCH] :books: Add upload path hardening entry to 2.19.0 changelog Add the missing 2.19.0 entry for #12896: upload endpoints accepted non-multipart upload paths and validation error bodies arrived truncated. Fixed by #12067. The issue did not exist when the changelog section was last generated. AI-assisted-by: inkling-2-small-free --- CHANGES.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGES.md b/CHANGES.md index e550684ffd..7a8edb8fb3 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -121,6 +121,7 @@ The Admin Console is now enabled by default and the `enable-admin-console` flag - Fix `:referential-integrity` errors when creating, combining or renaming variant sets [#12734](https://github.com/penpot/penpot/issues/12734) (PR: [#12779](https://github.com/penpot/penpot/pull/12779)) - Fix save errors after masking a variant with Ctrl+M [#12748](https://github.com/penpot/penpot/issues/12748) (PR: [#12749](https://github.com/penpot/penpot/pull/12749)) - Fix icons in component instances not being shown on the canvas [#12752](https://github.com/penpot/penpot/issues/12752) +- Fix upload endpoints accepting non-multipart upload paths and validation error bodies being truncated [#12896](https://github.com/penpot/penpot/issues/12896) (PR: [#12067](https://github.com/penpot/penpot/pull/12067)) ### :sparkles: New features & Enhancements