Add CHANGELOG entries

CHANGELOG.md

@@ -1,10 +1,49 @@
 # Changelog
 
+### 4.5.0
+
+ - Added support for resolving protocol relative URLs (#275)
+ - Added `FormBody::addFileFromString()`
+
+### 4.4.1
+
+ - Reject pushes with invalid stream ID
+ - Fix potential double stream release, which might result in int → float overflows and thus type errors
+
+### 4.4.0
+
+This version fixes a security weakness that might leak sensitive request headers from the initial request to the redirected host on cross-domain redirects, which were not removed correctly. `Message::setHeaders` does _not_ replace the entire set of headers, but only operates on the headers matching the given array keys, see fa79253.
+
+ - Support direct HTTP/2 connections without TLS (#271)
+ - Security: Remove headers on cross-domain redirects
+
+### 4.3.1
+
+ - Relax `"conflict"` rule with `amphp/file` to allow `dev-master` installations with Composer v1.x (#267, composer/composer#8856)
+ - Error if request URI provides a relative path instead of sending an invalid request (#269)
+
+### 4.3.0
+
+ - **Added inactivity timeout** (#263)
+   This provides a separate timeout while waiting for the response or streaming the body. If no data is received for the response within the given number of milliseconds, the request fails similarly to the transfer timeout.
+ - **Close idle connections if there are too many**
+   Requesting URLs from many hosts without reusing connections will otherwise result in resource exhaustion due to too many open files.
+ - Improved types for static analysis
+
+### 4.2.2
+
+ - Fixed transfer timeout enforcement for HTTP/2 (#262)
+
+### 4.2.1
+
+ - Fixed HTTP/2 on 32 bit platforms
+ - Fixed potentially stalled requests in ConnectionLimitingPool (#256)
+
 ### 4.2.0
 
  - Add improved ConnectionLimitingPool
    The new ConnectionLimitingPool limits connections instead of streams. In addition, it has improved connection handling, racing between new connections and existing connections becoming available once the limit has been reached. The older LimitedConnectionPool has been renamed to StreamLimitingPool with a class alias for backward compatibility.
- - Don't set ALPN if only HTTP/1.1 is enabled, which allows connections to certain misbehaving servers (#255) 
+ - Don't set ALPN if only HTTP/1.1 is enabled, which allows connections to certain misbehaving servers (#255)
 
 ### 4.1.0