diff --git a/ChangeLog b/ChangeLog
index 2013e70a..79bd0438 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,16 +8,21 @@ available on ARM platforms.
 WebAssembly modules with functions that ran significantly slower than
 without it.
  - Emscripten: a new option allows compilation with SIMD support.
+ - Emscripten: native ESM module generation is now supported.
  - JavaScript sumo builds now allow up to 80 MiB memory usage, so that
 `crypto_pwhash` with the interactive settings can be used in pure
 JavaScript, not just WebAssembly.
  - XOF state alignment has been relaxed.
  - `crypto_core_keccak1600_state` has been added.
  - Export missing `crypto_ipcrypt_nd_keygen()` helper function.
+ - `crypto_auth_hmacsha256_init` and `crypto_auth_hmacsha512_init` now
+accept NULL key pointers (with a zero key length), for consistency with
+other `_init` functions.
  - apple-xcframework: headers are now in a Clibsodium subdirectory
 to prevent module.modulemap collisions with other xcframeworks.
  - Fixed compilation with GCC on aarch64 and gcc 4.x.
- - On aarch64, aes256-gcm is now enabled even when not using clang.
+ - On aarch64, aes256-gcm is now enabled even when not using clang,
+including MSVC.
  - Added compatibility with Visual Studio 2026 when toolsets do not
 define PlatformToolsetVersion.
  - Libsodium can be directly used as a dependency in a Zig project.