Reorder release notes

diff --git a/doc/notes/notes-9.19.16.rst b/doc/notes/notes-9.19.16.rst
index 54ae318b97e20564bcd0aa66d4ba8b044d4b4948..b50f11000893c78fe23b18fe952afa0243d8d5da 100644 (file)
--- a/doc/notes/notes-9.19.16.rst
+++ b/doc/notes/notes-9.19.16.rst
@@ -21,9 +21,6 @@ Removed Features
   :any:`dnssec-dnskey-kskonly`, :any:`dnssec-update-mode`,
   :any:`sig-validity-interval`, and :any:`update-check-ksk`. :gl:`#3672`
 
-- The :any:`dialup` and :any:`heartbeat-interval` options have been
-  deprecated and will be removed in a future BIND 9 release. :gl:`#3700`
-
 Feature Changes
 ~~~~~~~~~~~~~~~
 
@@ -36,13 +33,16 @@ Feature Changes
   :any:`inline-signing` is set at the ``zone`` level, it overrides the
   value set in :any:`dnssec-policy`. :gl:`#3677`
 
-Bug Fixes
-~~~~~~~~~
-
 - To improve query-processing latency under load, the uninterrupted time
   spent on resolving long chains of cached domain names has been
   reduced. :gl:`#4185`
 
+- The :any:`dialup` and :any:`heartbeat-interval` options have been
+  deprecated and will be removed in a future BIND 9 release. :gl:`#3700`
+
+Bug Fixes
+~~~~~~~~~
+
 - Setting :any:`dnssec-policy` to ``insecure`` prevented zones
   containing resource records with a TTL value larger than 86400 seconds
   (1 day) from being loaded. This has been fixed by ignoring the TTL