From 0af050a6b250419805bc4c361a873a6d011ae69e Mon Sep 17 00:00:00 2001
From: saubyk <39208279+saubyk@users.noreply.github.com>
Date: Sun, 19 Jul 2026 17:04:42 -0700
Subject: [PATCH] Fill in PR number in release note (#1643)

---
 release-notes/Release-notes-0.15.9.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/release-notes/Release-notes-0.15.9.md b/release-notes/Release-notes-0.15.9.md
index 6c67f352..715732f7 100644
--- a/release-notes/Release-notes-0.15.9.md
+++ b/release-notes/Release-notes-0.15.9.md
@@ -175,7 +175,7 @@ this release should add its entry under the appropriate section below.
   and node-unreachable error mapping) plus a clean lint and both production builds.
 
 - **Replace the deprecated `csurf` middleware with `csrf-csrf`**
-  ([#TBD](https://github.com/Ride-The-Lightning/RTL/pull/TBD), part of
+  ([#1643](https://github.com/Ride-The-Lightning/RTL/pull/1643), part of
   [#1634](https://github.com/Ride-The-Lightning/RTL/issues/1634)).
   `csurf` has been deprecated since 2022 and pins an old `cookie` release with a known
   advisory; npm's only offered "fix" is a downgrade. It is now replaced by the maintained