diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 4ca17a48..2d0affc0 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -2,7 +2,7 @@ libssh2 1.11.1_DEV
 
 This release includes the following enhancements and bugfixes:
 
-- autotools: delete `--disable-tests` option, fix CI tests (e051ae34 #1271)
+- autotools: delete `--disable-tests` option, fix CI tests (e051ae34 #1271 revert: 7483edfa)
 - autotools: show the default for `hidden-symbols` option (a3f5594a #1269)
 - autotools: enable `-Wunused-macros` with gcc (ecdf5199 #1262 #1227 #1224)
 - autotools: fix dotless gcc and Apple clang version detections (89ccc83c #1232 #1187)
@@ -15,10 +15,13 @@ This release includes the following enhancements and bugfixes:
 - autotools: use comma separator in `Requires.private` of `libssh2.pc` (7f83de14 #1124)
 - autotools: improve libz position (c89174a7 #1077 #1075 #1013 regr: 4f0f4bff)
 - autotools: skip tests requiring static lib if `--disable-static` (572c57c9 #1072 #1056 regr: 83853f8a)
+- build: enable `-pedantic-errors` (3ec53f3e #1286)
+- build: add mingw-w64 support to `LIBSSH2_PRINTF()` attribute (f8c45794 #1287)
 - build: add `LIBSSH2_NO_DEPRECATED` option (b1414503 #1267 #1266 #1260 #1259)
 - build: enable missing OpenSSF-recommended warnings, with fixes (afa6b865 #1257)
 - build: enable more compiler warnings and fix them (7ecc309c #1224)
 - build: picky warning updates (328a96b3 #1219)
+- build: revert: respect autotools `DLL_EXPORT` in `libssh2.h` (481be044 #1141 revert: fb1195cf)
 - build: stop requiring libssl from openssl (c84745e3 #1128)
 - build: tidy-up `libssh2.pc.in` variable names (5720dd9f #1125)
 - build: add/fix `Requires.private` packages in `libssh2.pc` (ef538069 #1123)
@@ -63,7 +66,7 @@ This release includes the following enhancements and bugfixes:
 - cmake: delete duplicate `include()` (30eef0a6)
 - cmake: improve/fix mbedTLS detection (41594675 #1192 #1191)
 - cmake: tidy-up `foreach()` syntax (4a64ca14 #1180)
-- cmake: also test for `libssh2_VERSION` (a20572e9)
+- cmake: verify `libssh2_VERSION` in integration tests (a20572e9)
 - cmake: show cmake versions in ci (87f5769b)
 - cmake: quote more strings (e9c7d3af #1173)
 - cmake: add `ExternalProject` integration test (aeaefaf6 #1171)
@@ -89,10 +92,12 @@ This release includes the following enhancements and bugfixes:
 - docs: replace SHA1 with SHA256 in CMake example (766bde9f)
 - drop `www.` from `www.libssh2.org` (6e3e8839 #1172)
 - example: use `libssh2_socket_t` in X11 example (3f60ccb7)
-- example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output messages (8d69e63d #1258 cont: 6c84a426)
+- example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output messages (8d69e63d #1258 follow: 6c84a426)
 - example: fix regression in `ssh2_exec.c` (279a2e57 #1106 #1105 regr: b13936bd)
+- example, tests: call `WSACleanup()` for each `WSAStartup()` (94b6bad3 #1283)
 - example, tests: fix/silence `-Wformat-truncation=2` gcc warnings (744e059f)
 - hostkey: do not advertise ssh-rsa when SHA1 is disabled (82d1b8ff #1093 #1092)
+- libssh2.h: add deprecated function warnings (9839ebe5 #1289 #1260)
 - libssh2.h: add portable `LIBSSH2_SOCKET_CLOSE()` macro (28dbf016 #1278)
 - libssh2.h: use `_WIN32` for Windows detection instead of rolling our own (631e7734 #1238)
 - libssh2.pc: re-add & extend support for static-only libssh2 builds (624abe27 #1119 #1114)
@@ -109,7 +114,7 @@ This release includes the following enhancements and bugfixes:
 - misc: flatten `_libssh2_explicit_zero` if tree (74e74288 #1149)
 - NMakefile: delete (c515eed3 #1134 #1129)
 - openssl: use OpenSSL 3 HMAC API, add `no-deprecated` CI job (363dcbf4 #1243 #1235 #1207)
-- openssl: make a function static, add `#ifdef` comments (efee9133 #1246 cont: 03092292)
+- openssl: make a function static, add `#ifdef` comments (efee9133 #1246 follow: 03092292)
 - openssl: fix DSA code to use OpenSSL 3 API (82581941 #1244 #1207)
 - openssl: fix `EC_KEY` reference with OpenSSL 3 `no-deprecated` build (487152f4 #1236 #1235 #1207)
 - openssl: use non-deprecated APIs with OpenSSL 3.x (b0ab005f #1207)
@@ -121,10 +126,12 @@ This release includes the following enhancements and bugfixes:
 - reuse: fix duplicate copyright warning (b9a4ed83)
 - reuse: comply with 3.1 spec and 2.0.0 checker (fe6239a1 #1102 #1101 #1098)
 - reuse: provide SPDX identifiers (f6aa31f4 #1084)
-- revert: build: respect autotools `DLL_EXPORT` in `libssh2.h` (481be044 #1141)
 - scp: fix missing cast for targets without large file support (c317e06f #1060 #1057 #1002 regr: 5db836b2)
+- session: add `libssh2_session_callback_set2()` (c0f69548 #1285)
 - session: handle EINTR from send/recv/poll/select to try again as the error is not fatal (798ed4a7 #1058)
-- src: fix gcc 13 `-Wconversion` warning on Darwin (8cca7b77 #1209 cont: 08354e0a)
+- src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack" (d34d9258 #1291 #1290)
+- src: disable `-Wsign-conversion` warnings, add option to re-enable (6e451669 #1284 #1257)
+- src: fix gcc 13 `-Wconversion` warning on Darwin (8cca7b77 #1209 follow: 08354e0a)
 - src: drop a redundant `#include` (1f0174d0 #1153)
 - src: improve MSVC C4701 warning fix (8b924999 #1086 #1083)
 - src: bump `hash_len` to `size_t` in `LIBSSH2_HOSTKEY_METHOD` (8b917d76 #1076)
@@ -159,9 +166,9 @@ This release includes the following enhancements and bugfixes:
 This release would not have looked like this without help, code, reports and
 advice from friends like these:
 
-  Viktor Szakats, Ren Mingshuai, Daniel Stenberg, Michael Buckley, Aaron Stone,
+  Viktor Szakats, Ren Mingshuai, Michael Buckley, Daniel Stenberg, Aaron Stone,
   Brian Inglis, concussious on Github, Dan Fandrich, Haowei Hsu,
   Harmen Stoppels, Harry Mallon, Jack L, Jakob Egger, João M. S. Silva,
   Joel Depooter, Kai Pastor, Kenneth Davidson, mike-jumper, naddy,
   Nicolas Mora, Nursan Valeyev, PewPewPew, Radek Brich, rahmanih on Github,
-  Steve McIntyre, Xi Ruoyao
+  Steve McIntyre, Will Cosgrove, Xi Ruoyao