Reorder release notes

diff --git a/doc/notes/notes-9.18.3.rst b/doc/notes/notes-9.18.3.rst
index 05d2c71cb29c1747a3f1f0b250d848ad6deb3094..e24bbcfc7eb2882ce2a9dd00d385743ea8a30d9b 100644 (file)
--- a/doc/notes/notes-9.18.3.rst
+++ b/doc/notes/notes-9.18.3.rst
@@ -40,15 +40,6 @@ Known Issues
 New Features
 ~~~~~~~~~~~~
 
-- Support DNS Extended Errors (:rfc:`8914`) ``Stale Answer`` and
-  ``Stale NXDOMAIN Answer`` when stale answers are returned from cache.
-  :gl:`#2267`
-
-- Add support for remote TLS certificate verification, both to
-  :iscman:`named` and :iscman:`dig`, making it possible to implement
-  Strict and Mutual TLS authentication, as described in :rfc:`9103`,
-  Section 9.3. :gl:`#3163`
-
 - Catalog Zones schema version 2, as described in the
   "DNS Catalog Zones" IETF draft version 5 document, is now supported by
   :iscman:`named`. All of the previously supported BIND-specific catalog
@@ -62,6 +53,15 @@ New Features
   diagnosing the problem. :gl:`#3221` :gl:`#3222` :gl:`#3223`
   :gl:`#3224` :gl:`#3225`
 
+- Support DNS Extended Errors (:rfc:`8914`) ``Stale Answer`` and
+  ``Stale NXDOMAIN Answer`` when stale answers are returned from cache.
+  :gl:`#2267`
+
+- Add support for remote TLS certificate verification, both to
+  :iscman:`named` and :iscman:`dig`, making it possible to implement
+  Strict and Mutual TLS authentication, as described in :rfc:`9103`,
+  Section 9.3. :gl:`#3163`
+
 Bug Fixes
 ~~~~~~~~~