diff --git a/changelog/changes/2025-05-13-nvidia-sysext.md b/changelog/changes/2025-05-13-nvidia-sysext.md
new file mode 100644
index 0000000000..ad9ad6cee7
--- /dev/null
+++ b/changelog/changes/2025-05-13-nvidia-sysext.md
@@ -0,0 +1,2 @@
+- Compile OS-dependent NVIDIA kernel module sysexts signed for secure boot. ([scripts#2798](https://github.com/flatcar/scripts/pull/2798/))
+- Allow per-sysext USE flags and architecture-specific sysexts. ([scripts#2798](https://github.com/flatcar/scripts/pull/2798/))
diff --git a/changelog/changes/2025-05-13-oot-module-signing.md b/changelog/changes/2025-05-13-oot-module-signing.md
new file mode 100644
index 0000000000..8bf9df80e0
--- /dev/null
+++ b/changelog/changes/2025-05-13-oot-module-signing.md
@@ -0,0 +1 @@
+- Sign out-of-tree kernel modules using the ephemeral signing key so that ZFS and NVIDIA sysexts can work with secure boot. ([scripts#2636](https://github.com/flatcar/scripts/pull/2636/))