From 9436a18e953c46a7f6a60b9c0d7528ff038f86e7 Mon Sep 17 00:00:00 2001
From: Chocobozzz <me@florianbigard.com>
Date: Mon, 29 Apr 2024 09:01:30 +0200
Subject: [PATCH] Update changelog

---
 CHANGELOG.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 578adcd6f..9d0cce057 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## v6.1.0-rc.1
+## v6.1.0
 
 ### IMPORTANT NOTES
 
@@ -11,6 +11,11 @@
     * Views use a *Session ID* generated by the web browser instead of using the request IP (former behavior can be restored in YAML config)
     * The goal of this change is to get closer to how other video platforms like Mux, Vimeo, or Instagram work
 
+### SECURITY
+
+  * Compact ActivityPub JSON-LD objects before using them to prevent incorrect access control @tesaguri
+  * Protect ActivityPub information related to private/internal/blocked videos
+
 ### Admin config (non-exhaustive)
 
   * **Breaking changes**:
@@ -127,6 +132,9 @@
   * Fix view endpoint crash on geoip update failure
   * Fix setting video subtitle from URL query
   * Fix selecting "Display all languages/categories/licences" in videos search resulting in an empty search
+  * Fix followers/following counter of local ActivityPub actors
+  * Fix notification button link on mobile
+  * Fix player subtitles on iOS
 
 
 ## v6.0.4