This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new f6d41d5fd8 Improved: Group the security fixes and security hardening
in the release notes (OFBIZ-13696)
f6d41d5fd8 is described below
commit f6d41d5fd87669bf17bef648c6791c67421c928c
Author: Mridul Pathak <[email protected]>
AuthorDate: Wed Oct 21 14:33:34 2026 +0530
Improved: Group the security fixes and security hardening in the release
notes (OFBIZ-13696)
Pull requests labeled cve are listed under Security fixes and the other
pull requests labeled security under Security hardening, ahead of the type
categories since a pull request is listed in the first category whose labels
match. The labels are set by hand, cve only once the CVE is announced, after
which the release notes can be generated again.
---
.github/release.yml | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/.github/release.yml b/.github/release.yml
index fc7940b217..bcf841122d 100644
--- a/.github/release.yml
+++ b/.github/release.yml
@@ -21,6 +21,10 @@
# GitHub reads this file from the tag being released, so it has to be on the
# release branch before the tag is cut.
# The type labels are set from the PR title prefix by pr-type-label.yml.
+# The cve and security labels are set by hand, cve only once the CVE is
+# announced, after which the release notes can be generated again.
+# A pull request is listed in the first category whose labels match, so the
+# security categories come before the type categories.
# See
https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes
changelog:
@@ -30,6 +34,12 @@ changelog:
authors:
- dependabot[bot]
categories:
+ - title: Security fixes
+ labels:
+ - cve
+ - title: Security hardening
+ labels:
+ - security
- title: Bug fixes
labels:
- bug
