Consider using merge requests to generate changelogs
Currently developers have to manually generate changelog files. This gets tedious, and is easy to overlook. We should consider using merge requests for this, and add merge requests to the right section based on their milestone, labels, etc. For security releases and backports this might be difficult, as we'd be operating on different branches.
The rough idea is this: for a given release, find all merged merge requests with the matching milestone. Once found, ignore MRs that have already been released (= present in the changelog). Based on the labels, we then determine what type ("fixed", "feature", etc) to add. For patch releases this might get tricky, as the milestone does not include patch numbers.