Fix #1279
diff --git a/release-notes/VERSION b/release-notes/VERSION
index 05f85f9..e0f1cee 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -4,6 +4,10 @@
 === Releases ===
 ------------------------------------------------------------------------
 
+2.7.6 (not yet released)
+
+#1279: Ensure DOM parsing defaults to not expanding external entities
+
 2.7.5 (11-Jun-2016)
 
 #1098: DeserializationFeature.FAIL_ON_INVALID_SUBTYPE does not work with