From 8f433e7774f9b212ed77a0b3aee1495759f2a91b Mon Sep 17 00:00:00 2001
From: Niklas Mohrin <dev@niklasmohrin.de>
Date: Tue, 18 Mar 2025 23:38:12 +0100
Subject: [PATCH] Release v1.7.2

---
 CHANGELOG.md       | 16 ++++++++++++++++
 Cargo.lock         |  2 +-
 Cargo.toml         |  2 +-
 docs/src/usage.txt |  2 +-
 4 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04fdd4d..2c8af3a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,21 @@ Possible log types:
 - `[docs]` for documentation changes.
 - `[chore]` for maintenance work.
 
+### [v1.7.2][v1.7.2] (2025-03-18)
+
+This patch release updates the `zip` dependency to mitigate a potential security
+vulnerability. A successful attack against tealdeer users would require
+manipulation of the tldr pages archive downloaded during an update. As the
+archive is downloaded from a trusted source (the tldr-pages organization), it
+seems very unlikely that running a version of tealdeer prior to 1.7.2 poses a
+security risk. Nevertheless, it cannot hurt to rule out any chance of an attack
+by updating tealdeer to version 1.7.2.
+
+For more details, please see https://github.com/advisories/GHSA-94vh-gphv-8pm8.
+
+- [security] Require `zip >= 2.3.0`
+- [chore] Run CI on backport branches and on dispatch
+
 ### [v1.7.1][v1.7.1] (2024-11-14)
 
 This patch release updates the `yansi` dependency to version 1, so that the
@@ -457,6 +472,7 @@ Thanks!
 [v1.6.1]: https://github.com/tealdeer-rs/tealdeer/compare/v1.6.0...v1.6.1
 [v1.7.0]: https://github.com/tealdeer-rs/tealdeer/compare/v1.6.1...v1.7.0
 [v1.7.1]: https://github.com/tealdeer-rs/tealdeer/compare/v1.7.0...v1.7.1
+[v1.7.2]: https://github.com/tealdeer-rs/tealdeer/compare/v1.7.1...v1.7.2
 
 [i34]: https://github.com/tealdeer-rs/tealdeer/issues/34
 [i43]: https://github.com/tealdeer-rs/tealdeer/issues/43
diff --git a/Cargo.lock b/Cargo.lock
index 582b25d..2652093 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1426,7 +1426,7 @@ dependencies = [
 
 [[package]]
 name = "tealdeer"
-version = "1.7.1"
+version = "1.7.2"
 dependencies = [
  "anyhow",
  "app_dirs2",
diff --git a/Cargo.toml b/Cargo.toml
index e584a29..59a7d72 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,7 @@ name = "tealdeer"
 readme = "README.md"
 repository = "https://github.com/tealdeer-rs/tealdeer/"
 documentation = "https://tealdeer-rs.github.io/tealdeer/"
-version = "1.7.1"
+version = "1.7.2"
 include = ["/src/**/*", "/tests/**/*", "/Cargo.toml", "/README.md", "/LICENSE-*", "/screenshot.png", "completion/*"]
 rust-version = "1.75"
 edition = "2021"
diff --git a/docs/src/usage.txt b/docs/src/usage.txt
index 5129fbe..a326eac 100644
--- a/docs/src/usage.txt
+++ b/docs/src/usage.txt
@@ -1,4 +1,4 @@
-tealdeer 1.7.1: A fast TLDR client
+tealdeer 1.7.2: A fast TLDR client
 Danilo Bargen <mail@dbrgn.ch>, Niklas Mohrin <dev@niklasmohrin.de>
 
 Usage: tldr [OPTIONS] [COMMAND]...