From 0d79e6418afbf5bb1d62bbc263011e45cd3d3fb5 Mon Sep 17 00:00:00 2001
From: lebaudantoine <lebaud.antoine131@gmail.com>
Date: Fri, 9 Oct 2026 17:35:29 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=93=9D(doc)=20update=20the=20CHANGELOG?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update the CHANGELOG with the entries for the recent
changes landed on the project.
---
 CHANGELOG.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bc335a291..770c43861 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,15 +8,23 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Added
+
+- ✨(backend) introduce a token exchange endpoint for iframe embeds
+
 ### Changed
 
 - ⚡️(backend) hash application secrets with SHA-256
 - ⚡️(backend) reduce domain queries on the application token endpoint
+- ♻️️️(backend) use a dedicated auth scheme for LiveKit token auth
+- ♻️(all) stop relying on cookies for the lobby flow
 
 ### Fixed
 
 - 🔒️(backend) prevent editing client id and secret in Django admin
 - 🔒️(frontend) upgrade tiff to fix CVE-2026-4775
+- 🔒️(backend) bind accepted lobby entries to the current username
+- 🔒️(backend) sign lobby participant id
 
 ## [1.34.0] - 2026-10-07