Changelog: September 22, 2026

[zeyu2001]

• Date: September 22, 2026
• Commit: a4c8acd69

Documentation TODOs

These shipped features still need docs. The changelog links only to pages that already exist - add or update these, then link them:

• Browser-based authentication for scans: Document how to configure browser auth steps for a scan, how the live preview works, and how to verify authentication before running a full scan.
• External validation target authentication: Document how pentest validation probes authenticate against external targets using the browser auth setup.
• Manual whitebox finding retests: Document how to trigger a retest on an individual whitebox finding, what the retest covers, and how to interpret the results.

---

Note

Low Risk
Documentation-only changelog update with no application or infrastructure code changes.

Overview
Adds a September 22, 2026 changelog entry (Whitebox) and bumps the CHANGELOG:INSERT last-prod-sha marker to a4c8acd69077d6b6fb377f026d107bc51c4cc0d6 for the automated changelog workflow.

The new update documents three shipped capabilities: browser-based login steps for scans with a live auth preview, the same browser auth for external pentest validation targets, and per-finding whitebox retests after fixes without rerunning a full scan. It links readers to the existing Whitebox quickstart.

^{Reviewed by Cursor Bugbot for commit 6bb8042. Bugbot is set up for automated code reviews on this repo. Configure here.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-22T06:59:42.623548Z	6bb8042	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.