update changelog and fix comments

Author: Ye Zhu

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to the "vscode-java-dependency" extension will be documented
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## 0.27.0
+
+- feat  - Add CVE checking to nodify users to fix the critical/high-severity CVE issues by yezhu6 in https://github.com/microsoft/vscode-java-dependency/pull/948
+
 ## 0.26.5
 
 - Enhancement - Register Context Provider after Java LS ready in https://github.com/microsoft/vscode-java-dependency/pull/939

src/upgrade/display/notificationManager.ts

@@ -16,7 +16,7 @@ const NEXT_SHOW_TS_KEY = `${KEY_PREFIX}.nextShowTs`;
 const BUTTON_TEXT_UPGRADE = "Upgrade Now";
 const BUTTON_TEXT_FIX_CVE = "Fix CVE Issues";
 const BUTTON_TEXT_INSTALL_AND_UPGRADE = "Install Extension and Upgrade";
-const BUTTON_TEXT_INSTALL_AND_FIX_CVE = "Install Extension and Fix CVE Issues";
+const BUTTON_TEXT_INSTALL_AND_FIX_CVE = "Install Extension and Fix";
 const BUTTON_TEXT_NOT_NOW = "Not Now";
 
 const SECONDS_IN_A_DAY = 24 * 60 * 60;