update changelog

Author: squell

CHANGELOG.md

@@ -1,20 +1,40 @@
 # Changelog
 
+## [0.2.5] - 2025-04-01
+
+### Added
+- `sudo visudo` will protect you from accidentally locking yourself out
+- `Defaults lolcat` to give nice colours to your sudo session
+- Support for `--prompt` and `SUDO_PROMPT` environment variable
+- Support for `Defaults targetpw`
+- Support for `VAR=VALUE` matching in `Defaults env_keep/env_check`
+- Support for `--bell`
+
+### Changed
+- Portability: sudo-rs supports FreeBSD!
+- `sudo -v` will only ask for a password if the policy requires it
+
+### Fixed
+- Man page claimed `timestamp_timeout` supported negative values (#1032)
+- `timestamp_timeout` in excess of 292 bn. years were not rejected (#1048)
+- Usernames in /etc/sudoers can contain special characters by using double
+  quotes or escaping them (#1045)
+
 ## [0.2.4] - 2025-02-25
 
 ### Added
-- Support for 'SETENV:' and corresponding 'sudo VAR=value command' syntax
-- Support for 'Defaults rootpw'
-- Support for 'Defaults pwfeedback'
-- Support for host/user/runas/command-specific Defaults
+- Support for `SETENV:` and corresponding `sudo VAR=value command` syntax
+- Support for `Defaults rootpw`
+- Support for `Defaults pwfeedback`
+- Support for host/user/runas/command-specific `Defaults`
 
 ### Changed
 - Portability: sudo-rs now has experimental support for FreeBSD!
 - `pam-login` feature now controls if PAM service name 'sudo-i' is used
 
 ### Fixed
 - Bug in syslog writer could cause sudo to hang (#856)
-- SHELL was not canonicalized when using 'sudo -s' or 'sudo -i' (#962)
+- SHELL was not canonicalized when using `sudo -s` or `sudo -i` (#962)
 - RunAs_Spec was not carried over on the same /etc/sudoers line (#974)
 - sudo --list did not unfold multiple-level aliases (#978)
 - The man page for sudoers was missing (#943)