From e34039626f957d3e3e50843d15c1b20547fc90e2 Mon Sep 17 00:00:00 2001
From: Bassem Dghaidi <568794+Link-@users.noreply.github.com>
Date: Wed, 18 Mar 2026 07:03:52 -0700
Subject: [PATCH] Update RELEASES

---
 RELEASES.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/RELEASES.md b/RELEASES.md
index 9d2e502..480bc12 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -25,6 +25,12 @@
 
 ## Changelog
 
+### 5.0.4
+
+- Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns)
+- Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
+- Bump `fast-xml-parser` to v5.5.6
+
 ### 5.0.3
 
 - Bump `@actions/cache` to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)