Update release notes and bump version

I forgot to commit these, so we are skipping 0.4.6.
AustinWise · Apr 6, 2024 · 274d686 · 274d686
1 parent 3793561
commit 274d686
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,11 @@
-WIP
+0.4.7 (2024-04-05)
 =====
 
+* Implement support for transclusion (Thanks @therealbstern!) [#61](https://github.com/AustinWise/smeagol/issues/61)
+* Use `/DEPENDENTLOADFLAG` to mitigate hypothetical DLL injection attacks on Windows. [#61](https://github.com/AustinWise/smeagol/issues/61)
+* Update some dependencies based on CVEs that Dependabot flagged. These CVEs are unlikely to pose
+  a risk to typical uses of Smeagol.
+
 0.4.5 (2023-12-21)
 =====
 Update dependencies. Not functional changes intended.

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "smeagol-wiki"
-version = "0.4.6"
+version = "0.4.7"
 edition = "2021"
 description = "A personal wiki webserver. Work in progress."
 license = "MIT"

diff --git a/README.md b/README.md
@@ -73,6 +73,17 @@ root directory of the wiki:
 * `index-page` on Gollum defaults to `Home`. Smeagol defaults to `README` to be
   compatible with online code hosting systems such as GitHub and Azure Devops.
 * The default port is `8000` rather than `4567`.
+* Support for transclusion. If a line contains `{{file-name.md}}`, the contents of `file-name.md`
+  will replace that line.
+
+## Security
+
+Smeagol is intended to be run on your local computer to read your own private data. It is not
+designed to be exposed to the public internet: there is no authentication.
+
+That said, there is one class of security problem I would be interested in hearing about: opening
+a maliciously designed Wiki with Smeagol either causing code execution or writing to files outside
+the wiki directory. Please file an issue if you encounter such a problem.
 
 ## Why Rust, please tell me more about why you love Rust