Update CHANGELOG for version 25.4.0-0 (#1444)

Automated changes by pre-release.yml GitHub action

---------

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: cchen-vertica <cchen-vertica@users.noreply.github.com>
Co-authored-by: cchen-vertica <cchen8@opentext.com>

Author: github-actions[bot]

CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to this project will be documented in this file.
 The file is generated by [Changie](https://github.com/miniscruff/changie).
 
 
+## 25.4.0-0 - 2025-10-20
+### Added
+* [#1400](https://github.com/vertica/vertica-kubernetes/issues/1400) `enabled` field in TLS configs; overrides and deprecates `vertica.com/enable-tls-auth`.
+* [#1364](https://github.com/vertica/vertica-kubernetes/issues/1364) DBTLSConfig has been added to Vertica DB definition. Users can customize TLS version and cipher suites.
+* [#1370](https://github.com/vertica/vertica-kubernetes/issues/1370) Injecting Environment Variables via extraEnv and envFrom (from ConfigMaps/Secrets)
+### Fixed
+* [#1429](https://github.com/vertica/vertica-kubernetes/issues/1429) Fix for CVE-2025-22871 and CVE-2025-47907
+
+## 25.3.1-0 - 2025-09-22
+### Added
+* [#1361](https://github.com/vertica/vertica-kubernetes/issues/1361) Support for pulling the Vertica image for the scrutinize pod from private repositories.
+* [#1343](https://github.com/vertica/vertica-kubernetes/issues/1343) Caching for TLS certificates with configurable expiry duration. The cache can also be disabled if not needed.
+### Changed
+* [#1383](https://github.com/vertica/vertica-kubernetes/issues/1383) Support upgrading from an admintools-managed database to a vclusterops-managed database.
+* [#1380](https://github.com/vertica/vertica-kubernetes/issues/1380) Support updating both TLS secrets (httpsNMA and clientServer) simultaneously.
+* [#1347](https://github.com/vertica/vertica-kubernetes/issues/1347) TLS mode is now case-insensitive.
+* [#1355](https://github.com/vertica/vertica-kubernetes/issues/1355) NMATLSSecret is no longer deprecated, and TLS secrets are no longer auto-generated when TLS is disabled.
+### Fixed
+* [#1385](https://github.com/vertica/vertica-kubernetes/issues/1385) Re-IP operation failed because of quorum check.
+* [#1356](https://github.com/vertica/vertica-kubernetes/issues/1356) Restarting a subcluster after shutdown fails.
+* [#1342](https://github.com/vertica/vertica-kubernetes/issues/1342) Avoid unsandboxing an already unsandboxed subcluster.
+
 ## 25.3.0-0 - 2025-07-03
 ### Added
 * [#1318](https://github.com/vertica/vertica-kubernetes/issues/1318) Added timeout when draining connections during read-only online upgrade

changes/25.3.1-0.md

@@ -0,0 +1,13 @@
+## 25.3.1-0 - 2025-09-22
+### Added
+* [#1361](https://github.com/vertica/vertica-kubernetes/issues/1361) Support for pulling the Vertica image for the scrutinize pod from private repositories.
+* [#1343](https://github.com/vertica/vertica-kubernetes/issues/1343) Caching for TLS certificates with configurable expiry duration. The cache can also be disabled if not needed.
+### Changed
+* [#1383](https://github.com/vertica/vertica-kubernetes/issues/1383) Support upgrading from an admintools-managed database to a vclusterops-managed database.
+* [#1380](https://github.com/vertica/vertica-kubernetes/issues/1380) Support updating both TLS secrets (httpsNMA and clientServer) simultaneously.
+* [#1347](https://github.com/vertica/vertica-kubernetes/issues/1347) TLS mode is now case-insensitive.
+* [#1355](https://github.com/vertica/vertica-kubernetes/issues/1355) NMATLSSecret is no longer deprecated, and TLS secrets are no longer auto-generated when TLS is disabled.
+### Fixed
+* [#1385](https://github.com/vertica/vertica-kubernetes/issues/1385) Re-IP operation failed because of quorum check.
+* [#1356](https://github.com/vertica/vertica-kubernetes/issues/1356) Restarting a subcluster after shutdown fails.
+* [#1342](https://github.com/vertica/vertica-kubernetes/issues/1342) Avoid unsandboxing an already unsandboxed subcluster.

changes/25.4.0-0.md

@@ -0,0 +1,7 @@
+## 25.4.0-0 - 2025-10-20
+### Added
+* [#1400](https://github.com/vertica/vertica-kubernetes/issues/1400) `enabled` field in TLS configs; overrides and deprecates `vertica.com/enable-tls-auth`.
+* [#1364](https://github.com/vertica/vertica-kubernetes/issues/1364) DBTLSConfig has been added to Vertica DB definition. Users can customize TLS version and cipher suites.
+* [#1370](https://github.com/vertica/vertica-kubernetes/issues/1370) Injecting Environment Variables via extraEnv and envFrom (from ConfigMaps/Secrets)
+### Fixed
+* [#1429](https://github.com/vertica/vertica-kubernetes/issues/1429) Fix for CVE-2025-22871 and CVE-2025-47907