diff --git a/CHANGES b/CHANGES
index 3eafb7184..d96c5d630 100644
--- a/CHANGES
+++ b/CHANGES
@@ -18,6 +18,7 @@ TRUNK
 
 - Advertise supported SASL Channel-Binding types (XEP-0440)
 - Implement RFC 9266 'tls-exporter' channel binding with TLS 1.3
+- New role and permissions framework and API
 
 ## Changes