Prepare release/1.21.4 (#22571)

update: add changelog for release v1.21.4

Author: sreeram77

.release/security-scan.hcl

@@ -49,7 +49,24 @@ container {
 				"CVE-2022-49043", # libxml2@0:2.9.13-6.el9_5.2
 				"CVE-2025-46394",
 				"CVE-2024-58251",
-				"CVE-2025-47268"
+				"CVE-2025-47268",
+				"CVE-2024-57970",
+				"CVE-2024-23337",
+				"CVE-2025-3277",
+				"CVE-2025-25724",
+				"CVE-2025-32414",
+				"CVE-2024-40896",
+				"CVE-2025-3576",
+				"CVE-2025-5702",
+				"CVE-2025-5702",
+				"CVE-2025-5702",
+				"CVE-2025-6021",
+				"CVE-2025-31115",
+				"CVE-2024-52533",
+				"CVE-2025-6965",
+				"CVE-2025-8058",
+				"CVE-2025-8058",
+				"CVE-2025-8058"
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",

CHANGELOG.md

@@ -1,3 +1,17 @@
+## 1.21.4 (August 13, 2025)
+
+SECURITY:
+
+* security: Update Go to 1.23.12 to address CVE-2025-47906 [[GH-22547](https://github.com/hashicorp/consul/issues/22547)]
+
+IMPROVEMENTS:
+
+* ui: Replaced internal code editor with HDS (HashiCorp Design System) code editor and code block components for improved accessibility and maintainability across the Consul UI. [[GH-22513](https://github.com/hashicorp/consul/issues/22513)]
+
+BUG FIXES:
+
+* cli: capture pprof when ACL is enabled and a token with operator:read is used, even if enable_debug config is not explicitly set. [[GH-22552](https://github.com/hashicorp/consul/issues/22552)]
+
 ## 1.21.3 (July 18, 2025)
 
 IMPROVEMENTS:

version/VERSION

@@ -1 +1 @@
-1.21.4-dev
+1.21.4