diff --git a/CHANGES.rst b/CHANGES.rst
index 6c0b32a0c6..a1b9b21e05 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -8,6 +8,8 @@ Changes
 
 * Don't fail when gzip decoding an empty stream. (Issue #535)
 
+* Add sha256 support for fingerprint verification. (Issue #540)
+
 * ... [Short description of non-trivial change.] (Issue #)