diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6ab9f7f..b482c9a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## Unreleased
 
+* Deprecate support for `sessions.sessid` column. In 3.0, only
+  `sessions.session_id` will be supported.
+* Add `secure_session_only` configuration to disable accepting insecure
+  sessions.
 * Drop Rails 7.0 support.
 
 ## 2.2.0