From 42e4292683afeb13544185c940a6cc73b76c3182 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Tue, 6 Oct 2026 23:26:51 +0200
Subject: [PATCH] docs(changelog): note the dependency advisories

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e10a84052..689422754 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -55,6 +55,8 @@ asks when a question is ambiguous, and remembers what it is told.
   today, and a steady value as one figure.
 - **Memory refresh** asks the Coach capability before deferring, so a
   switched-off Coach does not re-queue it.
+- **Dependencies.** The MCP SDK moves to 1.32 (GHSA-6qxp-vccf-f47h) and
+  `proxy-addr` to 2.0.8 (GHSA-jqcg-44mw-7w3h).
 
 ### Changed