# HG changeset patch
# User Marcin Kuzminski <marcin@rhodecode.com>
# Date 2019-10-28 10:17:55
# Node ID ea101d5239dc20ddd65b65faae300269b3b5c681
# Parent  0f09c1a734e267268097b3229ab8eb3761e4780b

docs: added release docs for 4.17.4

diff --git a/docs/release-notes/release-notes-4.17.4.rst b/docs/release-notes/release-notes-4.17.4.rst
new file mode 100644
--- /dev/null
+++ b/docs/release-notes/release-notes-4.17.4.rst
@@ -0,0 +1,47 @@
+|RCE| 4.17.4 |RNS|
+------------------
+
+Release Date
+^^^^^^^^^^^^
+
+- 2019-10-28
+
+
+New Features
+^^^^^^^^^^^^
+
+
+
+General
+^^^^^^^
+
+- Permissions: properly flush user cache permissions in more cases of permission changes.
+  Some API methods and user-group additions didn't invalidate permission caches resulting in
+  users not seeing the permission changes immediately.
+- Pull requests: properly handle exceptions in state change logic, and improve logging on this.
+
+
+Security
+^^^^^^^^
+- Security: fixed XSS in file editing.
+
+
+Performance
+^^^^^^^^^^^
+
+
+
+Fixes
+^^^^^
+
+- Diffs: handle paths with quotes in diffs.
+- Diffs: fixed outdated files in pull-requests re-using the filediff raw_id for anchor generation.
+  This could make rendering diff crash in cases of only having outdated files in a diff.
+- Diffs: handle very odd case of binary, corrupted diffs which crashed the diff parser.
+- Svn: handle non-ascii message editing.
+
+
+Upgrade notes
+^^^^^^^^^^^^^
+
+- Scheduled release addressing problems in 4.17.X releases.
diff --git a/docs/release-notes/release-notes.rst b/docs/release-notes/release-notes.rst
--- a/docs/release-notes/release-notes.rst
+++ b/docs/release-notes/release-notes.rst
@@ -9,6 +9,7 @@ Release Notes
 .. toctree::
    :maxdepth: 1
 
+   release-notes-4.17.4.rst
    release-notes-4.17.3.rst
    release-notes-4.17.2.rst
    release-notes-4.17.1.rst