minor tweaks

static/releases.html

@@ -315,6 +315,8 @@
                 <li>only include Updater app when OFFICIAL_BUILD=true is set in the environment to avoid accidental use of the default update server with unofficial builds that are not compatible</li>
                 <li>Vanadium: update Chromium base to 80.0.3987.162</li>
                 <li>PDF Viewer: <a href="https://github.com/GrapheneOS/PdfViewer/releases/tag/3">version 3</a></li>
+                <li>update SELinux policy for officially supported devices based on isolated_app domain split</li>
+                <li>raise protected_fifos / protected_regular from 1 (world-writable directories) to 2 (group-writable directories too)</li>
             </ul>
 
             -->