From e98e229bd2434b92863193e958c354ac30d8e5ba Mon Sep 17 00:00:00 2001
From: Robert Speicher <rspeicher@gmail.com>
Date: Wed, 7 Feb 2018 10:14:14 -0600
Subject: [PATCH] Update CHANGELOG.md for 10.2.8

[ci skip]
---
 CHANGELOG.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11998bb2bb2..9ad603fdc75 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -435,6 +435,16 @@ entry.
 - Clean up schema of the "merge_requests" table.
 
 
+## 10.2.8 (2018-02-07)
+
+### Security (4 changes)
+
+- Fix namespace access issue for GitHub, BitBucket, and GitLab.com project importers.
+- Fix stored XSS in code blocks that ignore highlighting.
+- Fix wilcard protected tags protecting all branches.
+- Restrict Todo API mark_as_done endpoint to the user's todos only.
+
+
 ## 10.2.7 (2018-01-18)
 
 - No changes.