diff --git a/CHANGELOG.md b/CHANGELOG.md
index 253d5ca1a50..626ece0ab7d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -191,6 +191,9 @@ New Lookups:
  * ini
  * shelvefile
 
+New filters:
+ * combine
+
 New Connection Methods:
  *  Added a connection plugin for talking to docker containers on the ansible controller machine without using ssh
 
@@ -206,7 +209,13 @@ Minor changes:
  * play output is now dynamically sized to terminal with a minimal of 80 coluumns (old default)
  * vars_prompt and pause are now skipped with a warning if the play is called non interactively (i.e. pull from cron)
  * Support for OpenBSD's 'doas' privilege escalation method.
+
+Vault changes:
  * most vault operations can now be done over multilple files
+ * ansible-vault encrypt/decrypt read from stdin if no other input file is given,
+   and can write to a given ``--output file``. This lets you avoid ever writing
+   sensitive plaintext to disk.
+ * ansible-vault rekey accepts the --new-vault-password-file option.
 
 ## 1.9.2 "Dancing In the Street" - Jun 26, 2015