* Backport the include directive patch for 1.3 * Add a changelog entry for same * reorder the changelog to put security first.