diff --git a/NEWS b/NEWS
index 84998aa28a..6bc7519447 100644
--- a/NEWS
+++ b/NEWS
@@ -44,8 +44,8 @@ CHANGES WITH 262:
           "systemd-sysupdate@.service" unit for varlink activation of sysupdate.
 
         * The default OpenPGP keyring lookup now combines the vendor keyring in
-          /usr with the local keyring in /etc. Deployments that relied on a
-          single /etc keyring to exclude vendor trust should set
+          /usr/ with the local keyring in /etc/. Deployments that relied on a
+          single /etc/ keyring to exclude vendor trust should set
           $SYSTEMD_OPENPGP_KEYRING explicitly.
 
         * TPM-sealed credentials are now pinned to the TPM's SRK. This prevents
@@ -285,8 +285,9 @@ CHANGES WITH 262:
         Changes in systemd-networkd:
 
         * The IPv6ProxyNDPAddress= setting in the [Network] section of .network
-          files has been renamed to ProxyNeighbor=. The setting can now also be
-          used to add IPv4 addresses to the kernel's IPv4 neighbor proxy table.
+          files has been renamed to ProxyNeighbor=, and remains accepted as a
+          deprecated alias. ProxyNeighbor= can add both IPv4 and IPv6 addresses
+          to the kernel's neighbor proxy tables.
 
         * "networkctl reload" gained --no-reconfigure to reload .network and
           .netdev files from disk without reconfiguring existing links. It uses
@@ -318,6 +319,21 @@ CHANGES WITH 262:
           backlog and then keeps the method call open, streaming new matching
           entries like journalctl -f until the client disconnects.
 
+        Changes in systemd-coredump and coredumpctl:
+
+        * systemd-coredump now supports the kernel coredump socket protocol
+          available since Linux 6.17. On supported kernels,
+          systemd-coredumpd.service listens on
+          /run/systemd/coredumpd/kernel, and
+          systemd-coredump-register.service registers the socket through
+          kernel.core_pattern. Older kernels continue to use the per-coredump
+          systemd-coredump@.service path. Changes to coredump.conf require
+          reloading systemd-coredumpd.service, and deployments that set a
+          custom kernel.core_pattern should mask or stop that service.
+
+        * The coredumpctl dump and debug commands now honor --json= and include
+          the selected coredump's metadata in the requested JSON format.
+
         Changes in systemd-resolved and resolvectl:
 
         * 'resolvectl openpgp' and 'resolvectl tlsa' now support --json= when
@@ -468,6 +484,21 @@ CHANGES WITH 262:
           additional sizing details such as currentSizeBytes, minimalSizeBytes
           and needFreeBytes where appropriate.
 
+        * systemd-repart now honors $SOURCE_DATE_EPOCH while populating images.
+          Timestamps copied from source trees are clamped to the epoch, and a
+          validated value is forwarded to mkfs and mtools, improving
+          reproducibility of generated file systems. Byte-for-byte
+          reproducibility may still require --offline=yes and suitable
+          file-system tooling.
+
+        Changes in systemd-nspawn:
+
+        * When systemd-nspawn creates both user and network namespaces, it now
+          initializes net.ipv4.ping_group_range from the container's mapped GID
+          range. This permits unprivileged container users to create ICMP echo
+          sockets when their GIDs are mapped. Externally supplied network
+          namespaces are left unchanged.
+
         Changes in systemd-vmspawn:
 
         * systemd-vmspawn --coco= now supports Intel TDX in addition to
@@ -582,7 +613,8 @@ CHANGES WITH 262:
           primary key, allowing signing-key rotation without distributing each
           subkey separately. $SYSTEMD_OPENPGP_KEYRING may select a custom
           keyring for unprivileged pulls or custom sysupdate definitions. When
-          unset, the existing system keyring lookup remains unchanged.
+          unset, the vendor keyring in /usr/ and the local keyring in /etc/ are
+          combined.
 
         * New dm-clone boot integration was added. /etc/clonetab entries are
           translated by systemd-clonesetup-generator into