Modify release notes (#4865)

* Modify release notes

Signed-off-by: Keith Mattix II <[email protected]>

* Remove duplicate line item

Signed-off-by: Keith Mattix II <[email protected]>

* Re-scope certificate changes for this release

Signed-off-by: Keith Mattix II <[email protected]>

* Update docs/release_notes.md

Co-authored-by: Delyan Raychev <[email protected]>
Signed-off-by: Keith Mattix II <[email protected]>

Co-authored-by: Delyan Raychev <[email protected]>

Author: keithmattix

docs/release_notes.md

@@ -4,11 +4,15 @@
 
 ### Notable changes
 
-- Root certificate rotation is now supported through the new CRD, MeshRootCertificate.
+- OSM certificate provider is now configured using the new CRD, MeshRootCertificate
+  - Custom trust domains (i.e. certificate CommonNames) are now supported
+- The authentication token used to configure the Hashicorp Vault certificate provider can now be passed in using a secretRef
 - Along with root certificate rotation we support custom trust domains, as well as rotating to new trust domains with no downtime.
 - Envoy has been updated to v1.22 and uses the `envoyproxy/envoy-distroless` image instead of the deprecated `envoyproxy/envoy-alpine` image.
+  - This means that `kubectl exec -c envoy ... -- sh` will no longer work for the Envoy sidecar
 - Added support for Kubernetes 1.23 and 1.24
 - `Rate limiting`: Added capability to perform local per-instance [rate limiting of TCP connections and HTTP requests](https://release-v1-2.docs.openservicemesh.io/docs/guides/traffic_management/rate_limiting).
+- Statefulsets and headless services have been fixed and work as expected
 
 ### Breaking Changes