diff --git a/CHANGES b/CHANGES
index f7946ae..d85587c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,12 +1,18 @@
-next
+0.9.5
   * New feature: strfry router!
   * INCOMPATIBLE change: The "lookbehind" feature of plugins was removed
+  * INCOMPATIBLE change to negentropy sync protocol! (again)
+    - The fingerprint function has now been changed to SHA-256, to protect the
+      integrity of the sync mechanism in the presence of adversarial event creators
+    - Going forward, the protocol now has mechanisms for backwards/forwards compatibility
   * Bugfix: Prevent a crash when a non-indexOnly scan was paused and then one of the
     buffered levIds was deleted or replaced before the scan resumed
   * Plugins can now be specified as shell commands, so you can pass command-line switches
     to them, set environment variables, use pipes/redirects, etc.
   * Plugins now propagate the environment variables of the strfry process to the
     plugin processes
+  * Now if you don't return a "msg" (or return an empty string), it will no longer
+    pollute your logs with "blocked event" messages
 
 0.9.4
   * INCOMPATIBLE change to negentropy sync protocol!