Update CHANGELOG.md

CHANGELOG.md

@@ -20,6 +20,8 @@
 - `svelte`: ^5.45.6 -> ^5.46.1
 - `svelte-check`: ^4.3.4 -> ^4.3.5
 - `vite`: ^7.2.6 -> ^7.3.0
+- Added `eslint-plugin-security`: ^3.0.1
+
 
 ### Major Codebase Changes
 
@@ -27,3 +29,12 @@
 - Updated license from `MIT` to `BSD-3-Clause`
 - Moved from `Makefile` to `Taskfile`
 - Codebase organization and structure changes
+
+### CI/CD Updates
+
+- Updated CI workflows to use `task` commands instead of bash scripts
+- Added gosec security scanning to backend build pipeline
+
+### Security
+
+- Overrode `cookie` package to latest version (1.1.1) due to low severity vulnerability in default version.