Updating CHANGES for release

Author: ilgrosso

CHANGES

@@ -2,6 +2,26 @@ Apache Syncope - CHANGES
 Licensed under Apache License 2.0 - http://www.apache.org/licenses/LICENSE-2.0
 --------------------------------------------------------------------------------
 
+Release Notes - Syncope - Version 4.0.3
+================================================================================
+
+** Bug
+    * [SYNCOPE-1922] - Disallow searches by encrypted attribute
+    * [SYNCOPE-1924] - Bug in retainAll, removeAll, and removeIf methods of PropagationByResource
+    * [SYNCOPE-1925] - Contextual menu stays open after modal window is closed
+    * [SYNCOPE-1928] - Session timeout not working for Console
+
+** Improvement
+    * [SYNCOPE-1926] - Reduce number of update on Syncope after a SCIM PATCH
+    * [SYNCOPE-1927] - Macro Tasks: simplify binary form property binding
+    * [SYNCOPE-1929] - Console: allow to extend session duration
+    * [SYNCOPE-1930] - Exploit MariaDB with JSON
+    * [SYNCOPE-1931] - Allow for JEXL custom functions
+    * [SYNCOPE-1932] - Improve AES management
+
+** Task
+    * [SYNCOPE-1923] - Virtual Threads and JDK versions
+
 Release Notes - Syncope - Version 4.0.2
 ================================================================================