From 27f73cb43f42b5f7bb99eb92ef073287e9c9fd59 Mon Sep 17 00:00:00 2001
From: Tom Boucher <trekkie@nomorestars.com>
Date: Fri, 10 Jul 2026 11:42:32 -0400
Subject: [PATCH] docs(changeset): backfill PR number (#2141)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .changeset/phase-id-redos-hardening.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.changeset/phase-id-redos-hardening.md b/.changeset/phase-id-redos-hardening.md
index 816a004a6..df9878105 100644
--- a/.changeset/phase-id-redos-hardening.md
+++ b/.changeset/phase-id-redos-hardening.md
@@ -1,5 +1,5 @@
 ---
 type: Security
-pr: 0
+pr: 2141
 ---
 **Hardened phase/roadmap/plan markdown parsing against quadratic-time (ReDoS) CPU exhaustion** — a crafted `ROADMAP.md`, `STATE.md`, or `PLAN.md` with large runs of unclosed `(`, `[`, `<tag>`, `<!--`, or `<details>` could drive the phase-header, Plans-count, `files_modified`, and `<tag>`-block parsers into O(n²) scans (tens of seconds on a ~1.5 MB file). Every affected regex is now linear: header tag/bracket clauses are length-bounded, the Plans-count scan is section-local, and all `<tag>…</tag>` extraction routes through a single ReDoS-safe seam. (#2128)