1 files changed, 14 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md
index 9835733b17..a370c3fc99 100644
--- a/actionpack/CHANGELOG.md
+++ b/actionpack/CHANGELOG.md
@@ -1,3 +1,17 @@
+*   Output only one Content-Security-Policy nonce header value per request.
+
+    Fixes #32597.
+
+    *Andrey Novikov*, *Andrew White*
+
+*   Move default headers configuration into their own module that can be included in controllers.
+
+    *Kevin Deisz*
+
+*   Add method `dig` to `session`.
+
+    *claudiob*, *Takumi Shotoku*
+
 *   Controller level `force_ssl` has been deprecated in favor of
     `config.force_ssl`.