diff --git a/ci/release_notes.md b/ci/release_notes.md
new file mode 100644
index 00000000..3442052c
--- /dev/null
+++ b/ci/release_notes.md
@@ -0,0 +1,7 @@
+# Upgrades
+
+- `haproxy` has been upgraded to v2.4.4 from v2.4.2 to mitigate CVE-2021-40346
+
+# Acknowledgements
+
+Thanks @peterellisjones/@plowin for the PR / fixes!