CHANGELOG: add entry for the imminent v0.10.0

Starting to explain new features in more detail.
A bullet list of single lines can be enough for most bug fixes,
but some of the big refactors like SSA or caching need some context.

CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## [v0.10.0] - 2023-06-??
+
+This release drops support for Go 1.19, continues support for Go 1.20,
+and adds initial support for the upcoming Go 1.21.
+
+@lu4p rewrote the code to detect whether `reflect` is used on each Go type,
+which is used to decide which Go types should not be obfuscated to prevent breakage.
+The old code analyzed syntax trees with type information, which is cheap but clumsy.
+The new code uses SSA, which adds a bit of CPU cost to builds, but allows for a
+more powerful analysis that is less likely to break on edge cases.
+While this change does slow down builds slightly, we will start using SSA for more
+features in the near term, such as control flow obfuscation. See [#732].
+
+@pagran improved the patching of Go's linker to also obfuscate funcInfo.entryoff,
+making it harder to relate a function's metadata with its body in the binary. See [#641].
+
+@mvdan rewrote garble's caching to be more robust, avoiding errors such as
+"cannot load garble export file". The new caching system is entirely separate
+from Go's `GOCACHE`, being placed in `GARBLE_CACHE`, which defaults to a directory
+such as `~/.cache/garble`. See [#708].
+
+@DominicBreuker taught `-literals` to support obfuscating large string literals
+by using the "simple" obfuscator on them, as it runs in linear time. See [#720].
+
+@mvdan added support for `garble run`, the obfuscated version of `go run`,
+to quickly test that a main program still works when obfuscated. See [#661].
+
+A number of bugfixes are also included:
+
+* Ensure that `sync/atomic` types are still aligned by the compiler - [#686]
+* Print the chosen random seed when using `-seed=random` - [#696]
+* Avoid errors in `git apply` if the system language isn't English - [#698]
+* Avoid a panic when importing a missing package - [#694]
+* Suggest a command when asking the user to rebuild garble - [#739]
+
 ## [v0.9.3] - 2023-02-12
 
 This bugfix release continues support for Go 1.19 and 1.20, and features:
@@ -200,6 +235,18 @@ Known bugs:
 * obfuscating the standard library with `GOPRIVATE=*` is not well supported yet
 * `garble test` is temporarily disabled, as it is currently broken
 
+[v0.10.0]: https://github.com/burrowers/garble/releases/tag/v0.10.0
+[#641]: https://github.com/burrowers/garble/pull/641
+[#661]: https://github.com/burrowers/garble/issues/661
+[#686]: https://github.com/burrowers/garble/issues/686
+[#694]: https://github.com/burrowers/garble/issues/694
+[#696]: https://github.com/burrowers/garble/issues/696
+[#698]: https://github.com/burrowers/garble/issues/698
+[#708]: https://github.com/burrowers/garble/issues/708
+[#720]: https://github.com/burrowers/garble/pull/720
+[#732]: https://github.com/burrowers/garble/pull/732
+[#739]: https://github.com/burrowers/garble/pull/739
+
 [v0.9.3]: https://github.com/burrowers/garble/releases/tag/v0.9.3
 [#672]: https://github.com/burrowers/garble/issues/672
 [#675]: https://github.com/burrowers/garble/pull/675