changelog++

CHANGELOG.md

@@ -32,6 +32,9 @@ IMPROVEMENTS:
  * auth/jwt: Bound claims may now contain boolean values [JWT-73]
  * auth/jwt: CLI logins can now open the browser when running in WSL [JWT-77]
  * core: Exit ScanView if context has been cancelled [GH-7419]
+ * core: re-encrypt barrier and recovery keys if the unseal key is updated
+   [GH-7493]
+ * core (enterprise): Add background seal re-wrap
  * core/metrics: Add config parameter to allow unauthenticated sys/metrics 
    access. [GH-7550]  
  * replication (enterprise): Write-Ahead-Log entries will not duplicate the
@@ -84,6 +87,8 @@ BUG FIXES:
 
  * agent: Fix handling of gzipped responses [GH-7470]
  * cli: Fix panic when pgp keys list is empty [GH-7546]
+ * core: add hook for initializing seals for migration [GH-7666]
+ * core (enterprise): Fix seal migration in enterprise
  * identity: Add required field `response_types_supported` to identity token
    `.well-known/openid-configuration` response [GH-7533]
  * secrets/database: Fix bug in combined DB secrets engine that can result in