diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3b0e0606..bccb31a4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 * Fix: broken storage/mtime granularity detection on vfat
 * Improve: `path_to_filesystem()` by pre-detection of collision-free file system
 * Adjustment: MKCOL/MKCALENDAR return now CONFLICT instead of BADREQUEST of file name collision
+* Improve: [auth] catch bcrypt>=5.0.0 enforced max password length early and support legacy "passlib" as well as "libpass" (rework 3.6.0)
 
 ## 3.7.1
 * Fix: share address book collection as birthday calendar not working on non-DEBUG level