1 files changed, 18 insertions, 1 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md
index 44d87878a4..a370c3fc99 100644
--- a/actionpack/CHANGELOG.md
+++ b/actionpack/CHANGELOG.md
@@ -1,4 +1,21 @@
-## Rails 6.0.0.alpha (Unreleased) ##
+*   Output only one Content-Security-Policy nonce header value per request.
+
+    Fixes #32597.
+
+    *Andrey Novikov*, *Andrew White*
+
+*   Move default headers configuration into their own module that can be included in controllers.
+
+    *Kevin Deisz*
+
+*   Add method `dig` to `session`.
+
+    *claudiob*, *Takumi Shotoku*
+
+*   Controller level `force_ssl` has been deprecated in favor of
+    `config.force_ssl`.
+
+    *Derek Prior*
 
 *   Rails 6 requires Ruby 2.4.1 or newer.