diff --git a/.changes/config.json b/.changes/config.json
index 7d7bbe20e12..78a03db4c17 100644
--- a/.changes/config.json
+++ b/.changes/config.json
@@ -7,6 +7,7 @@
     "bug": "Bug Fixes",
     "pref": "Performance Improvements",
     "changes": "What's Changed",
+    "sec": "Security fixes",
     "deps": "Dependencies"
   },
   "defaultChangeTag": "changes",
diff --git a/.changes/core-leading-dot.md b/.changes/core-leading-dot.md
new file mode 100644
index 00000000000..432d94ac656
--- /dev/null
+++ b/.changes/core-leading-dot.md
@@ -0,0 +1,5 @@
+---
+'tauri': 'patch:sec'
+---
+
+Fix regression in `1.4` where the default behavior of the file system scope was changed to allow reading hidden files and directories by default.