diff --git a/changelog/changes/2024-07-01-replace-nmap.md b/changelog/changes/2024-07-01-replace-nmap.md
new file mode 100644
index 0000000000..141fe5d973
--- /dev/null
+++ b/changelog/changes/2024-07-01-replace-nmap.md
@@ -0,0 +1 @@
+- Replace nmap netcat with openbsd variant. The license didn't get an exception from CNCF. Something about the definition of "derivative works" being too broad.