Reorder release notes

diff --git a/doc/notes/notes-9.20.16.rst b/doc/notes/notes-9.20.16.rst
index 88f24ecff63871576dabcacc00a77acbf44feaa9..81bc43737bbe549da2543c220099e23e7df9eb0f 100644 (file)
--- a/doc/notes/notes-9.20.16.rst
+++ b/doc/notes/notes-9.20.16.rst
@@ -15,6 +15,12 @@ Notes for BIND 9.20.16
 Bug Fixes
 ~~~~~~~~~
 
+- Skip unsupported algorithms when looking for a signing key.
+
+  A mix of supported and unsupported DNSSEC algorithms in the same zone
+  could cause validation failures. Unsupported algorithms are now
+  ignored when looking for signing keys. :gl:`#5622`
+
 - Fix :iscman:`dnssec-keygen` key collision checking for KEY RRtype
   keys.
 
@@ -42,12 +48,6 @@ Bug Fixes
   a server was specified before the :option:`dig -b` option. This has
   been fixed. :gl:`#5609`
 
-- Skip unsupported algorithms when looking for a signing key.
-
-  A mix of supported and unsupported DNSSEC algorithms in the same zone
-  could cause validation failures. Unsupported algorithms are now
-  ignored when looking for signing keys. :gl:`#5622`
-
 - Skip buffer allocations if not logging.
 
   Previously, we allocated a 2KB buffer for IXFR change logging,