summaryrefslogtreecommitdiff
path: root/releasenotes/notes/fix-broken-trusted-config-updates-b68948bdbead17b2.yaml
blob: e4c89f0ad0c8916bb0772178b3a7e307e12db8fc (plain)
1
2
3
4
5
6
7
8
9
10
---
security:
  - |
    Fixed a bug where config (trusted) layout updates could be used
    pre-merge as a dynamically loaded layout. This could happen if Zuul
    was running with config errors that originated from outside of
    the config (trusted) repo. A logic error allowed code to fall
    through and return the trusted layout in this case.

    Users should upgrade.