@forge/csp

Index: package/CHANGELOG.md
===================================================================
--- package/CHANGELOG.md
+++ package/CHANGELOG.md
@@ -1,6 +1,12 @@
 # @forge/csp
 
+## 6.3.1-next.0
+
+### Patch Changes
+
+- 873db00: Allow Jira Assets object icons (`assets-media.atlassian.com`) by default in the Custom UI `img-src` CSP directive across all environments (dev, staging, prod, FedRAMP and IC). Apps rendering Assets icons no longer need to declare this Atlassian-owned domain under `permissions.external.images`, so it no longer counts toward the external image domain limit (ECO-1691).
+
 ## 6.3.0
 
 ### Minor Changes