diff --git a/CHANGES.md b/CHANGES.md
index 3f50bc627a716..d8678d98f2b20 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,29 @@
+## edge-19-2.5
+
+* CLI
+  * Updated `linkerd check` to ensure hint URLs are displayed for RPC checks
+* Controller
+  * Updated the auto-inject admission controller webhook to respond to UPDATE
+    events for deployment workloads
+  * Updated destination service to return TLS identities only when the
+    destination pod is TLS-aware and is in the same controller namespace
+  * Lessen klog level to improve security
+  * Updated control-plane components to query Kubernetes at startup to determine
+    authorized namespaces and if ServiceProfile support is available
+  * Modified the stats payload to include the following TCP stats:
+    `tcp_open_connections`, `tcp_read_bytes_total`, `tcp_write_bytes_total`
+* Proxy
+  * Fixed issue with proxy falling back to filesystem polling due to improperly
+    sized inotify buffer
+* Web UI
+  * Removed 'Help' hierarchy and surfaced links on navigation sidebar
+  * Added a Debug page to the web dashboard, allowing you to introspect service discovery state
+  * Updated the resource detail page to start displaying a table with TCP stats
+* Internal
+  * Enabled the following linters: `unparam`, `unconvert`, `goimports`,
+    `goconst`, `scopelint`, `unused`, `gosimple`
+  * Bumped base Docker images
+
 ## stable-2.2.1
 
 This stable release polishes some of the CLI help text and fixes two issues that