diff --git a/.changelog/527.internal.md b/.changelog/527.internal.md
new file mode 100644
index 0000000..c382557
--- /dev/null
+++ b/.changelog/527.internal.md
@@ -0,0 +1 @@
+CI: fix command injection plus other changes