Update changelog.

Changelog.md

@@ -6,6 +6,14 @@ Breaking Changes
 
 New
 
+* ASPA support is now always compiled in and available if `enable-aspa` is
+  set. The `aspa` Cargo feature has been removed. ([#990])
+* New configuration option `aspa-provider-limit` that limits the number of
+  provider ASNs allowed in an ASPA objects. If an object with more
+  provider ASNs is encountered it as well as all other ASPA objects for
+  the same customer ASN are ignored to avoid accidental false rejections
+  of AS paths. The default value is 10,000. ([#989])
+
 Bug fixes
 
 * The validation HTTP endpoints now accept prefixes with non-zero host
@@ -20,6 +28,8 @@ Other changes
 
 [#980]: https://github.com/NLnetLabs/routinator/pull/980
 [#987]: https://github.com/NLnetLabs/routinator/pull/987
+[#989]: https://github.com/NLnetLabs/routinator/pull/989
+[#990]: https://github.com/NLnetLabs/routinator/pull/990
 [#992]: https://github.com/NLnetLabs/routinator/pull/992
 [@sleinen]: https://github.com/sleinen