add cors to release notes