From d88ebafee7113f523bcd89d5fd71a11611bdfbcc Mon Sep 17 00:00:00 2001
From: Dominik Jain <dominik.jain@oraios-ai.de>
Date: Sat, 18 Jul 2026 11:15:44 +0200
Subject: [PATCH] Add news on trusted projects

---
 news/20260718.html | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 news/20260718.html

diff --git a/news/20260718.html b/news/20260718.html
new file mode 100644
index 00000000..710eabe4
--- /dev/null
+++ b/news/20260718.html
@@ -0,0 +1,19 @@
+<div class="news-item">
+    <h3>Trusted Projects</h3>
+    <p class="date">July 18, 2026</p>
+    <p>
+        Serena v1.6.0 introduced the notion of <i>trusted projects</i>.<br>
+        In particular, only trusted projects are allowed to run activation commands and configure language server-specific
+        settings at the project level.
+    </p>
+    <p>
+        To not break existing workflows, existing Serena configurations were migrated to trust all projects
+        by default (whereas new installations will have no trusted projects by default).
+    </p>
+    <p>
+        <b>Configure trusted projects!</b>
+        If you sometimes activate projects from untrusted sources, we highly recommend that you adjust
+        the <code>trusted_project_path_patterns</code> setting in
+        <a href="https://oraios.github.io/serena/02-usage/050_configuration.html#global-configuration" target="_blank">Serena's global configuration</a>.
+    </p>
+</div>