Update docs/releases.md

Co-authored-by: Copilot <[email protected]>

Author: ildyria

docs/releases.md

@@ -59,7 +59,7 @@ When both the encrypted links and the temporary links are disabled, it is possib
 
 We applied defense in depth:
 
-1. when neither functionality are enabled, we direclty return a 401/403 error on any call to `/image/{path}`.
+1. when neither functionality are enabled, we directly return a 401/403 error on any call to `/image/{path}`.
 2. when either of the functionality are enabled, we check that the `$path` value generated by `Storage::disk(StorageDiskType::LOCAL->value)->path($path);` is within the intended image directory. Should this happen, we return a 418 error code (I'm a teapot) which can later be used to detect malicious calls and combined with fail-2-ban to block the IP address of the attacker.
 
 #### Credits