diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1099c3530..ffa07141a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -40,6 +40,8 @@
 * builder/virtualbox: Add sata port count configuration option. [GH-4699]
 * post-processor/amazon-import: Add support for `license_type`. [GH-4634]
 * provisioner/chef-solo: Add option to select Chef version. [GH-4791]
+* command/push: add `-sensitive` flag to mark pushed vars are sensitive.
+    [GH-4970]
 
 
 ### BUG FIXES:
diff --git a/vendor/github.com/hashicorp/go-checkpoint/README.md b/vendor/github.com/hashicorp/go-checkpoint/README.md
index e717b6ad3..ab8ebc0d3 100644
--- a/vendor/github.com/hashicorp/go-checkpoint/README.md
+++ b/vendor/github.com/hashicorp/go-checkpoint/README.md
@@ -1,7 +1,7 @@
 # Go Checkpoint Client
 
 [Checkpoint](http://checkpoint.hashicorp.com) is an internal service at
-Hashicorp that we use to check version information, broadcast security
+Hashicorp that we use to check version information, broadcoast security
 bulletins, etc.
 
 We understand that software making remote calls over the internet
@@ -10,7 +10,7 @@ disabled in all of our software that includes it. You can view the source
 of this client to see that we're not sending any private information.
 
 Each Hashicorp application has it's specific configuration option
-to disable checkpoint calls, but the `CHECKPOINT_DISABLE` makes
+to disable chekpoint calls, but the `CHECKPOINT_DISABLE` makes
 the underlying checkpoint component itself disabled. For example
 in the case of packer:
 ```