From 17b1c64ca449803f72d48e6b1db7612c8843e63b Mon Sep 17 00:00:00 2001
From: Johan Haals <johan.haals@gmail.com>
Date: Mon, 29 Aug 2022 13:34:45 +0200
Subject: [PATCH] chore: clarify helmet changes in changelog

Signed-off-by: Johan Haals <johan.haals@gmail.com>
---
 .changeset/renovate-16f36a0.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.changeset/renovate-16f36a0.md b/.changeset/renovate-16f36a0.md
index d7bf43dfe1..74c33ec0a7 100644
--- a/.changeset/renovate-16f36a0.md
+++ b/.changeset/renovate-16f36a0.md
@@ -7,3 +7,8 @@
 ---
 
 Updated dependency `helmet` to `^6.0.0`.
+
+Please note that these policies are no longer applied by default:
+
+helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default
+helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7.