[Security] Add changelog note about calling the constructor of DefaultLoginRateLimiter with an empty secret

alexandre-daubois · alexandre-daubois · commit d9a3e24570ac · 2023-09-04T13:47:15.000+02:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,7 @@ CHANGELOG
 ---
 
  * `UserValueResolver` no longer implements `ArgumentValueResolverInterface`
+ * Deprecate calling the constructor of `DefaultLoginRateLimiter` with an empty secret
 
 6.3
 ---
