anchor.diff:      <%= image_tag 'releases/17.6.0/rerun-failed-jobs.png', alt: 'Rerun failed jobs' %>
     </figure>
   
  +* The in-built password file authentication plugin now supports `bcrypt`, which is a stronger password hashing function. GoCD server adminstrators should migrate `SHA1` passwords to use `bcrypt` instead.
  +
   <h4>API Enhancements</h4>
   
   * Introduced a <%= link_to_api 'github-webhook', 'GitHub webhook API' %> to accept push events on a GitHub repository or repositories in a GitHub organization.
  
positive.code:   "Ketan Padegaonkar",
    "Lubaina R",
    "Mahesh Panchaksharaiah",
    "Rajiesh N",
    "Stephen Murby",
    "Varsha Varadarajan",
  ].sort.uniq.join(', ')
  
negative.code: <h4>Security Fixes</h4>
  
  This release has critical security fixes to prevent CSRF, XSS and Session hijacking exploits. We highly recommend users to upgrade to keep your GoCD server and agent secure.
  Thanks [4cad](https://hackerone.com/4cad) for reporting these issues. 
  
  <h4>Improvements</h4>
  
  * <%= link_to_commit '42c681d1585db99747877830c2b1fdc2ca3e80b1', 'Added option to skip agent startup on windows.', 3577 %>
  