diff --git a/static/releases.html b/static/releases.html
index 233b007c..59fa8674 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -725,6 +725,8 @@
                         <li>always compile VPN service packages with speed filter to avoid background recompilation since many of these apps only automatically connect at boot and the user has to manually reconnect if the OS restarts them such as when users manually trigger app restart via the background recompilation notification</li>
                         <li>disable GWP-ASan since it's a bug finding feature rather than a hardening feature and doesn't preserve all the hardened_malloc security properties for the random allocations in random system processes where it gets activated especially now that memory tagging is supported</li>
                         <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.199</li>
+                        <li>backport health permission UI fixes from AOSP</li>
+                        <li>backport DocumentsUI (Files) fix from AOSP preventing bypassing restrictions via initial open directory</li>
                         <li>GmsCompatConfig: update to <a href="https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-81">version 81</a></li>
                         <li>GmsCompatConfig: update to <a href="https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/releases/tag/config-82">version 82</a></li>
                         <li>use sdk_phone_x86_64 (emulator) target as the default one for convenience</li>