diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 322d1134..f6cb08b3 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -1,8 +1,19 @@
 # Changelog
 
 All notable changes to this project will be documented in this file.
-## [5.5] 2024-07-03
-* 
+## [5.5] 2024-07-15
+* fail fast if digest is unsafe
+* refuse to use xor digest for passwords over insecure connections
+* add RHEL10 builds
+* prevent simple XSS from server menu data
+* preserve disconnection message
+* hide file transfers if not supported by the server
+* add 'Download' file menu entry
+* password attribute is a list
+* don't try to convert strings to strings
+* ignore whitespace when updating vcs info
+* newer python compatibility: prefer setuptools, also add setuptools to the build dependencies
+* consistency: always return a string
 
 ## [5.4] 2023-11-28
 * update libraries: jquery and jquery-ui
diff --git a/packaging/debian/changelog b/packaging/debian/changelog
index 0d37f520..716ba6ff 100644
--- a/packaging/debian/changelog
+++ b/packaging/debian/changelog
@@ -1,7 +1,18 @@
 xpra-html5 (5.5-r1-1) UNRELEASED; urgency=low
-  * TODO
-
- -- Antoine Martin antoine@xpra.org  Wed, 03 Jul 2024 15:49:51 +0700 +700
+  * fail fast if digest is unsafe
+  * refuse to use xor digest for passwords over insecure connections
+  * add RHEL10 builds
+  * prevent simple XSS from server menu data
+  * preserve disconnection message
+  * hide file transfers if not supported by the server
+  * add 'Download' file menu entry
+  * password attribute is a list
+  * don't try to convert strings to strings
+  * ignore whitespace when updating vcs info
+  * newer python compatibility: prefer setuptools, also add setuptools to the build dependencies
+  * consistency: always return a string
+
+ -- Antoine Martin antoine@xpra.org  Mon, 15 Jul 2024 12:20:52 +0700 +700
 
 xpra-html5 (5.4-r0-1) UNRELEASED; urgency=low
   * update jquery and jquery-ui libraries
diff --git a/packaging/rpm/xpra-html5.spec b/packaging/rpm/xpra-html5.spec
index ba4965cc..d220f974 100644
--- a/packaging/rpm/xpra-html5.spec
+++ b/packaging/rpm/xpra-html5.spec
@@ -78,8 +78,19 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 
 %changelog
-* Wed Jul 03 2024 Antoine Martin <antoine@xpra.org> 5.5-1-1
-- TODO
+* Mon Jul 15 2024 Antoine Martin <antoine@xpra.org> 5.5-1-1
+- fail fast if digest is unsafe
+- refuse to use xor digest for passwords over insecure connections
+- add RHEL10 builds
+- prevent simple XSS from server menu data
+- preserve disconnection message
+- hide file transfers if not supported by the server
+- add 'Download' file menu entry
+- password attribute is a list
+- don't try to convert strings to strings
+- ignore whitespace when updating vcs info
+- newer python compatibility: prefer setuptools, also add setuptools to the build dependencies
+- consistency: always return a string
 
 * Tue Nov 28 2023 Antoine Martin <antoine@xpra.org> 5.4-1
 - update jquery and jquery-ui libraries