Move deprecation to separate section in ChangeLog
@@ -6,7 +6,7 @@ Bugfix
* Fix ssl_parse_record_header() to silently discard invalid DTLS records
as recommended in RFC 6347 Section 4.1.2.7.
-API Changes
+New deprecations
* Deprecate usage of RSA primitives with non-matching key-type
(e.g., signing with a public key).
