Add testing changelog

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+# testing
+
+- :warning: Breaking change :warning:
+  - `SSO_PKCE` is now on by default, if you are running Zitadel you'll probably need to set it to `false` since it's incompatible with `CLIENT_SECRET`
+  - On first SSO login if the provider does not return the email verification status log in will be blocked.
+    Check the [documentation](https://github.com/Timshel/vaultwarden/blob/main/SSO.md#on-sso_allow_unknown_email_verification) for more details.
+
 # v2024.8.3-3
 
 - Integrate latest change from `Vaultwarden` [1.32.1](https://github.com/dani-garcia/vaultwarden/discussions/5036#discussioncomment-10838594)