chore: Add security section to release notes (#5636)

scripts/release/check_commit_metadata.sh

@@ -45,6 +45,9 @@ main() {
 	breaking_label=release/breaking
 	breaking_category=breaking
 
+	# Security related changes are labeled `security`.
+	security_label=security
+
 	# Get abbreviated and full commit hashes and titles for each commit.
 	mapfile -t commits < <(git log --no-merges --pretty=format:"%h %H %s" "$range")
 
@@ -100,6 +103,9 @@ main() {
 			COMMIT_METADATA_CATEGORY[$commit_sha_short]=$breaking_category
 			COMMIT_METADATA_BREAKING=1
 			continue
+		elif [[ ${labels[$commit_sha_long]} = *"label:$security_label"* ]]; then
+			COMMIT_METADATA_CATEGORY[$commit_sha_short]=$security_label
+			continue
 		fi
 
 		if [[ $commit_prefix =~ $prefix_pattern ]]; then

scripts/release/generate_release_notes.sh

@@ -68,6 +68,7 @@ mapfile -t commits < <(git log --no-merges --pretty=format:"%ct %h %s" "${old_ve
 # NOTE(mafredri): These need to be supported in check_commit_metadata.sh as well.
 declare -a section_order=(
 	breaking
+	security
 	feat
 	fix
 	docs
@@ -83,6 +84,7 @@ declare -a section_order=(
 
 declare -A section_titles=(
 	[breaking]='BREAKING CHANGES'
+	[security]='SECURITY'
 	[feat]='Features'
 	[fix]='Bug Fixes'
 	[docs]='Documentation'