Add missing CHANGELOG entry
What does this MR do?
this merge request adds a missing changelog entry. it is being added here because it needed to be released and verified before being communicated to customers. additionally, the disclosure process has changed and i am following guidance presented there. i've added the new disclosure process as an agenda item for dast weekly.