Update NEWS for $SAFE/taint changes

1 files changed, 9 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 34c3f5e47e..e94ac65341 100644
--- a/NEWS
+++ b/NEWS
@@ -198,6 +198,15 @@ sufficient information, see the ChangeLog file or Redmine
   block arguments.
   Note that the parentheses are mandatory.  `bar ...` is parsed as an endless range.
 
+* Access and setting of <code>$SAFE</code> is now always warned. <code>$SAFE</code>
+  will become a normal global variable in Ruby 3.0. [Feature #16131]
+
+* <code>Object#{taint,untaint,trust,untrust}</code> and related functions in the C-API
+  no longer have an effect (all objects are always considered untainted), and are now
+  warned in verbose mode. This warning will be disabled even in non-verbose mode in
+  Ruby 3.0, and the methods and C functions will be removed in Ruby 3.2.
+  [Feature #16131] 
+
 === Core classes updates (outstanding ones only)
 
 Array::