Updates for 6.0.9 release.

git-svn-id: https://svn.redmine.org/redmine/branches/6.0-stable@24508 e93f8b46-1217-0410-a6f0-8f06a7374b81

doc/CHANGELOG

@@ -4,6 +4,51 @@ Redmine - project management software
 Copyright (C) 2006-  Jean-Philippe Lang
 https://www.redmine.org/
 
+== 2026-03-16 v6.0.9
+
+=== [Code cleanup/refactoring]
+
+* Patch #43872: Update GitHub Actions workflow dependencies
+
+=== [Database]
+
+* Patch #43668: Serialize address limit checks during email_addresses#create
+
+=== [Issues]
+
+* Feature #43837: Add a hint to the issue relation add form that clarifies multiple comma-separated issue IDs are accepted
+
+=== [Issues filter]
+
+* Patch #43736: author.group filter test fix
+
+=== [Issues list]
+
+* Defect #31972: An empty group_count badge is displayed when grouped with created_on
+
+=== [Permissions and roles]
+
+* Feature #43659: Set minimum width for Permission column in permission report
+
+=== [Security]
+
+* Defect #43661: Unsafe eval usage in AttachmentsHelper
+* Defect #43690: Directory Traversal via Backslash-Separated Paths in Filesystem SCM
+* Defect #43691: DOM (Stored) XSS in @mention autocomplete via unescaped user name
+* Defect #43692: LDAP Injection (Unescaped Input in LDAP Search Filter)
+* Defect #43694: DOM XSS: HTML Injection via Custom Field Name in Query Filter Generation
+* Defect #43830: User who is allowed to view only their own time entries can retrieve other users’ time entry details by directly specifying the TimeEntry ID via the REST API
+* Defect #43840: Update Nokogiri to 1.19.1
+
+=== [Text formatting]
+
+* Defect #40918: Wiki "Edit this section" does not extract SeText headings correctly in CommonMark Markdown
+
+=== [UI]
+
+* Defect #43804: Custom field preview does not work on bulk issue edit
+* Defect #43869: Default assignee selected by category is not shown in UI
+
 == 2026-01-05 v6.0.8
 
 === [Code cleanup/refactoring]

lib/redmine/version.rb

@@ -24,7 +24,7 @@ module Redmine
   module VERSION
     MAJOR = 6
     MINOR = 0
-    TINY  = 8
+    TINY  = 9
 
     # Branch values:
     # * official release: nil