add change note

erik-krogh · erik-krogh · commit d1602d538ea4 · 2021-03-17T10:06:41.000+01:00
diff --git a/javascript/change-notes/2021-03-17-puppeteer.md b/javascript/change-notes/2021-03-17-puppeteer.md
@@ -0,0 +1,4 @@
+lgtm,codescanning
+* URIs used in the puppeteer library are now recognized as sinks for `js/request-forgery`.
+  Affected packages are
+    [puppeteer](https://www.npmjs.com/package/puppeteer)
