Reorder release notes

diff --git a/doc/notes/notes-9.20.9.rst b/doc/notes/notes-9.20.9.rst
index 52b65ca474e3f48822a55bde0cdfad2ab2ccd516..2c381532350630b194de73a1d080f7c89d417a4d 100644 (file)
--- a/doc/notes/notes-9.20.9.rst
+++ b/doc/notes/notes-9.20.9.rst
@@ -25,6 +25,22 @@ Security Fixes
 Feature Changes
 ~~~~~~~~~~~~~~~
 
+- Return DNS COOKIE and NSID with BADVERS.
+
+  This change allows the client to identify a server that returns a
+  BADVERS response and to provide a DNS SERVER COOKIE to be included in
+  the resent request. :gl:`#5235`
+
+- Disable separate memory context for libxml2 memory allocations on
+  macOS.
+
+  As of macOS Sequoia 15.4, custom memory allocation functions are no
+  longer supported by the system-wide version of libxml2. This prevents
+  tracking libxml2 memory allocations in a separate :iscman:`named`
+  memory context, so the latter has been disabled on macOS; the system
+  allocator is now directly used for libxml2 memory allocations on that
+  operating system. :gl:`#5268`
+
 - Use Jinja2 templates in system tests.
 
   `python-jinja2` is now required to run system tests. :gl:`#4938`
@@ -32,6 +48,13 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- Revert NSEC3 closest encloser lookup improvements.
+
+  The performance improvements for NSEC3 closest encloser lookups that
+  were restored in BIND 9.20.8 turned out to cause incorrect NSEC3
+  records to be returned in nonexistence proofs and were therefore
+  reverted again. :gl:`#5292`
+
 - Fix EDNS YAML output in :iscman:`dig`.
 
   :iscman:`dig` was producing invalid YAML when displaying some EDNS
@@ -56,22 +79,6 @@ Bug Fixes
 
   :gl:`#5014`
 
-- Return DNS COOKIE and NSID with BADVERS.
-
-  This change allows the client to identify a server that returns a
-  BADVERS response and to provide a DNS SERVER COOKIE to be included in
-  the resent request. :gl:`#5235`
-
-- Disable separate memory context for libxml2 memory allocations on
-  macOS.
-
-  As of macOS Sequoia 15.4, custom memory allocation functions are no
-  longer supported by the system-wide version of libxml2. This prevents
-  tracking libxml2 memory allocations in a separate :iscman:`named`
-  memory context, so the latter has been disabled on macOS; the system
-  allocator is now directly used for libxml2 memory allocations on that
-  operating system. :gl:`#5268`
-
 - Fix RDATA checks for PRIVATEOID keys.
 
   In PRIVATEOID keys, the key data begins with a length byte followed by
@@ -87,10 +94,3 @@ Bug Fixes
   responses were not returned immediately for names in domains delegated
   from authoritative zones configured on the resolver. This has been
   fixed. :gl:`#5275`
-
-- Revert NSEC3 closest encloser lookup improvements.
-
-  The performance improvements for NSEC3 closest encloser lookups that
-  were restored in BIND 9.20.8 turned out to cause incorrect NSEC3
-  records to be returned in nonexistence proofs and were therefore
-  reverted again. :gl:`#5292`