From 2c6532051214dbe06bfaea7c741acff71c49e1f9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9F=90=E4=BA=9A=E7=91=9F?= <mouyase@qq.com>
Date: Sat, 2 May 2026 20:15:58 +0800
Subject: [PATCH] docs(coding-agent): record SearXNG auth hardening

---
 packages/coding-agent/CHANGELOG.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/packages/coding-agent/CHANGELOG.md b/packages/coding-agent/CHANGELOG.md
index ec41d5f6e..9989da457 100644
--- a/packages/coding-agent/CHANGELOG.md
+++ b/packages/coding-agent/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+### Fixed
+
+- Fixed SearXNG web search Basic Auth validation to reject RFC 7617 control characters and clarified the equivalent `config.yml` and environment variable settings.
+
 ## [14.7.1] - 2026-05-06
 
 ### Added
@@ -7818,4 +7822,4 @@ Initial public release.
 - Git branch display in footer
 - Message queueing during streaming responses
 - OAuth integration for Gmail and Google Calendar access
-- HTML export with syntax highlighting and collapsible sections
\ No newline at end of file
+- HTML export with syntax highlighting and collapsible sections