Update changelog with latest sd-boot, sd-stub, and bootctl changes

diff --git a/NEWS b/NEWS
index 4868748a3e91a29942293c53fdbd9d3851ffc714..db5d84c47dbf933d128c2bb4a2556d2cc2ec8d72 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -20,6 +20,18 @@ CHANGES WITH 253 in spe:
        * systemd-boot handles various seed inputs using a domain- and
          field-separated hashing scheme.
 
+       * systemd-boot's 'random-seed-mode' option has been removed. A system
+         token is now always required to be present for random seeds to be
+         used.
+
+       * systemd-stub now processes random seeds in the same way as
+         systemd-boot, in case a unified kernel image is being used from a
+         different bootloader than systemd-boot.
+
+       * bootctl will now generate a system token on all EFI systems, even
+         virtualized ones, and is activated in the case that the system token
+         is missing from either sd-boot and sd-stub booted systems.
+
 CHANGES WITH 252 🎃:
 
         Announcements of Future Feature Removals: