Add section for --var-file-allowlist in changelog (#2375)

* Add section for --var-file-allowlist in changelog * Update CHANGELOG.md Co-authored-by: Luke Kysow <[email protected]> Co-authored-by: Luke Kysow <[email protected]>
runatlantis · Jul 8, 2022 · 008b2ed · 008b2ed
1 parent e767395
commit 008b2ed
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -15,6 +15,12 @@ Bugfixes and new Features
 
 https://github.com/runatlantis/atlantis/releases/tag/v0.19.5
 
+## Backwards Incompatibilities / Notes:
+* `--var-file-allowlist` flag has been added to restrict the access of files on Atlantis install from pull request
+  comments. Set the flag if you want to explicitly grant the access to files outside the default data directory.
+
+  Previously, any file could be passed to `-var-file`. Now only files under the directories in the allowlist are permitted.
+
 # v0.19.4
 
 Bugfixes and new Features