Changelog for 2.138

Legend:

security fix
major bug fix
bug fix
major enhancement
enhancement

Community feedback:

no major issues
notable issues
required rollback

What's new in 2.138 (2018-08-15)

Security fixes. (security advisory)
Security hardening related to Stapler routing. (SECURITY-595 in the 2018-12-05 security advisory)