diff --git a/changes.txt b/changes.txt
index d10d7f4b..f1ffc5e4 100644
--- a/changes.txt
+++ b/changes.txt
@@ -1,3 +1,7 @@
+Adminer 4.9.0-dev:
+- Validate server input in login form.
+- Validate connection to server in HTTP based drivers.
+
 Adminer 4.8.2 (released 2024-03-16):
 Support multi-line table comments
 MySQL: Use ST_SRID() instead of SRID() for MySQL 8 (PR #418)