* use security_fix category in changelogs for CVEs * these fragments do not say CVE but are security fixes Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
* Ensure we don't erase unsafe context in TaskExecutor.run on bytes. Fixes #62237 * Remove unused import * Add missing import * use args splatting for to_unsafe_text/bytes * Add security issue to changelog * fix yaml linting issue