diff --git a/releasenotes/notes/md5-removal-005f5c7a1038443f.yaml b/releasenotes/notes/md5-removal-005f5c7a1038443f.yaml
new file mode 100644
index 0000000..5be845d
--- /dev/null
+++ b/releasenotes/notes/md5-removal-005f5c7a1038443f.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    MD5 is no longer used as a hashing mechanism internally. This is not
+    expected to have any external impact as it only changes how random
+    identifiers are generated.