diff --git a/packages/coding-agent/CHANGELOG.md b/packages/coding-agent/CHANGELOG.md
index 18d7bf1a7..d8124502b 100644
--- a/packages/coding-agent/CHANGELOG.md
+++ b/packages/coding-agent/CHANGELOG.md
@@ -12,7 +12,7 @@
 
 - `pi update` for installs from the pi.dev installer no longer passes `--min-release-age=0` to `npm ci`. The release lockfile pins every package, so the flag had no effect, and security scanners that block it stopped the update ([#11262](https://github.com/earendil-works/pi/issues/11262))
 - `/model` and `/scoped-models` now show a model's name next to its ID when the name adds words the ID lacks, such as a renamed `models.json` override ([#5916](https://github.com/earendil-works/pi/issues/5916), [#11347](https://github.com/earendil-works/pi/pull/11347))
-- New session directories are now created with mode `0700` and new session files with `0600`, as `auth.json` already was, so other local users cannot read conversations even when a parent directory is readable. This includes forked and imported sessions. Existing session directories and files keep their modes. Before, they followed the process umask, typically `0755` and `0644`
+- New session directories are now created with mode `0700` and new session files with `0600`, as `auth.json` already was, so other local users cannot read conversations even when a parent directory is readable. This includes forked and imported sessions. Existing session directories and files keep their modes. Before, they followed the process umask, typically `0755` and `0644` ([#11587](https://github.com/earendil-works/pi/pull/11587))
 
 ### Fixed