prepare v5.4.9 release notes

misc/release/notes.md

@@ -8,13 +8,18 @@ For details, go to the [Centrifugo documentation site](https://centrifugal.dev).
 
 ## What's changed
 
+### Improvements
+
+* Change Dockerfile to run `centrifugo` under non-root user [#922](https://github.com/centrifugal/centrifugo/pull/922) by @dmeremyanin
+
 ### Fixes
 
-* Kafka async consumer: fix potential loss of records under load [#917](https://github.com/centrifugal/centrifugo/pull/917)
-* Centrifugo now does not log tokens when writing INFO level log entry about client error caused by command processing.
+* Fix a deadlock during pub/sub and recovery sync when using Redis engine and server-side subscriptions, fixes [#925](https://github.com/centrifugal/centrifugo/issues/925)
+* Fix pause/resume race in Kafka async consumer [#927](https://github.com/centrifugal/centrifugo/pull/927) – the race could lead to a partition non being processed, while in normal condition the chance of the race is minimal, this was observed in a real system under CPU throttling conditions.
+* Fix flaky `TestHandleRefreshWithoutProxyServerStart` test [#920](https://github.com/centrifugal/centrifugo/pull/920) by @makhov
 
 ### Miscellaneous
 
 * This release is built with Go 1.23.4.
 * Check out the [Centrifugo v6 roadmap](https://github.com/centrifugal/centrifugo/issues/832). It outlines important changes planned for the next major release. We have already started working on v6 and are sharing updates in the issue and our community channels.
-* See also the corresponding [Centrifugo PRO release](https://github.com/centrifugal/centrifugo-pro/releases/tag/v5.4.9).
+* See also the corresponding [Centrifugo PRO release](https://github.com/centrifugal/centrifugo-pro/releases/tag/v5.4.10).