Update CHANGELOG.md for 13.2.5

[ci skip]

CHANGELOG.md

@@ -2,6 +2,14 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 13.2.5 (2020-08-17)
+
+### Security (2 changes)
+
+- Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy.
+- Project access is checked during deploy token authentication.
+
+
 ## 13.2.4 (2020-08-11)
 
 ### Security (1 change)

changelogs/unreleased/security-deploy-token-impersonate-user-project.yml

----
-title: Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy
-merge_request:
-author:
-type: security

changelogs/unreleased/security-deploy_token_project_auth.yml

----
-title: Project access is checked during deploy token authentication
-merge_request:
-author:
-type: security