Update CHANGELOG.md for 13.0.13

[ci skip]

CHANGELOG.md

@@ -2,6 +2,14 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
+## 13.0.13 (2020-08-17)
+
+### Security (2 changes)
+
+- Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy.
+- Project access is checked during deploy token authentication.
+
+
 ## 13.0.12 (2020-08-05)
 ### Security (10 changes)

changelogs/unreleased/security-deploy-token-impersonate-user-project.yml

----
-title: Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy
-merge_request:
-author:
-type: security

changelogs/unreleased/security-deploy_token_project_auth.yml

----
-title: Project access is checked during deploy token authentication
-merge_request:
-author:
-type: security