Update changelog

Author: morganpa

CHANGELOG.md

@@ -1,3 +1,6 @@
+## v0.33.9
+- Allow account reset codebuild access to custom nuke config bucket
+
 ## v0.33.8
 - Upgrade the Swagger UI dependency to remove a very dangerous vulnerability (upgrade Swagger UI to v3.51.2).
 
@@ -103,7 +106,7 @@
 
 This release makes breaking changes to the `GET /leases` endpoint, so that requests will always return a HTTP 200 response, with a JSON array in the payload, even if the result set is empty. Previously, if a query had no results, the endpoint would return an HTTP 404 response, with an error object in the response body.
 
-DCE API clients will need to be updated accordingly, to handle this response.  
+DCE API clients will need to be updated accordingly, to handle this response.
 
 ## v0.25.0
 
@@ -249,7 +252,7 @@ In order to upgrade your DCE deployment to v0.19.0, you will need to:
 
 Prior to v0.19.0, leases were held in perpetuity by principals, or until the principal removed their lease via the `DELETE /leases` endpoint. Leased accounts would be "reset" at the end of the week. During reset, the lease would be marked as _Locked_, and then marked as _Active_ again after the reset was complete.
 
-As of v0.19.0, leases are held for a defined time period (defined by the `expiresOn` property), and then destroyed (marked as `Inactive`). Accounts are reset after the leases expires. There is no longer any type of `*Locked` state, as leases are always either `Active` or `Inactive`.  
+As of v0.19.0, leases are held for a defined time period (defined by the `expiresOn` property), and then destroyed (marked as `Inactive`). Accounts are reset after the leases expires. There is no longer any type of `*Locked` state, as leases are always either `Active` or `Inactive`.
 
 Changes for this new behavior include:
 
@@ -304,7 +307,7 @@ Changes for this new behavior include:
 ## v0.13.0
 
 - **BREAKING** Remove Optum-specific rules from the default aws-nuke config.
-- **BREAKING** Disable `aws-nuke` by default.  
+- **BREAKING** Disable `aws-nuke` by default.
 - Add outputs for DynDB table ARNs
 
 **v0.13.0 Migration Notes**