Preparing for v1.0c3 release.
diff --git a/CHANGELOG b/CHANGELOG
index 960845d..a71eb5c 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,26 @@
+v1.0c3
+ Version 1.0 Release Candidate 3
+
+ - In samples and oauth2 decorator, escape untrusted content before displaying it.
+ - Do not allow credentials files to be symlinks.
+ - Add XSRF protection to oauth2decorator callback 'state'.
+ - Handle uploading chunked media by stream.
+ - Handle passing streams directly to httplib2.
+ - Add support for Google Compute Engine service accounts.
+ - Flows no longer need to be saved between uses.
+ - Change GET to POST if URI is too long. Fixes issue #96.
+ - Add a keyring based Storage.
+ - More robust picking up JSON error responses.
+ - Make batch errors align with normal errors.
+ - Add a Google Compute sample.
+ - Token refresh to work with 'old' GData API
+ - Loading of client_secrets JSON file backed by a cache.
+ - Switch to new discovery path parameters.
+ - Add support for additionalProperties when printing schema'd objects.
+ - Fix media upload parameter names. Reviewed in http://codereview.appspot.com/6374062/
+ - oauth2client support for URL-encoded format of exchange token response (e.g. Facebook)
+ - Build cleaner and easier to read docs for dynamic surfaces.
+
v1.0c2
Version 1.0 Release Candidate 2