diff --git a/static/releases.html b/static/releases.html
index a751bd70..df62608f 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -101,7 +101,7 @@
Changelog
-
+ - 2022102300
- 2022101800
- 2022101600
- 2022101500
@@ -624,6 +624,23 @@
release notes from before the rebranding of the project in 2018 and 2019.
+
@@ -641,7 +658,7 @@
- GmsCompatConfig: disable CAST_CONNECTION_NOTIFY popup dialogs
- GmsCompatConfig: fix crash in FastPair service
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): update GKI to Linux 5.10.149
- - kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): replace upstream default of sha1 with sha256 for module signing (GKI devices rely on verified boot for vendor modules and only use module signing for GKI modules of which there are currently 0, but it should be using a secure hash in case there are ever GKI modules and for when we extend it to vendor modules as a lower level 2nd layer of security not depending on userspace)
+
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): replace upstream default of sha1 with sha256 for module signing (GKI devices rely on verified boot for vendor modules and only use module signing for GKI modules of which there are currently 0, but it should be using a secure hash in case there are ever GKI modules and for when we extend it to vendor modules as a lower level 2nd layer of security not depending on userspace)
- kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): enable forced kernel module signing with a per-build signing key (RSA 4096 / sha256) as an additional lower level layer of security beyond the verification already provided by dm-verity and SELinux
- kernel (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): disable IP_SCTP
- kernel (Pixel 4a): enable REFCOUNT_FULL
@@ -650,7 +667,6 @@
- Auditor (Pixel 7, Pixel 7 Pro): update to version 64 (update was not released in time to be bundled with older devices)
- -->