Add release notes for 3.13

_includes/manuals/3.13/1.2_release_notes.md

 This section will be updated prior to the next release. 
 This section will be updated prior to the next release. 
@@ -21,7 +21,92 @@ Clients will remain supported.
 
 ### Deprecations
 
-### Release Notes
+Now that Debian 12 is supported, Foreman 3.14 will drop support for Debian 11.
+Note this is for running Foreman itself.
+Clients will remain supported.
+
+### Release notes for 3.13.0
+#### Foreman
+* Make SeedHelper.test_template_requirements public ([#37963](https://projects.theforeman.org/issues/37963))
+* Typo in app/models/provisioning_template.rb ([#37949](https://projects.theforeman.org/issues/37949))
+* Enable remote desktop on Windows Hosts ([#37927](https://projects.theforeman.org/issues/37927))
+* Rubocop layout rules fix ([#37926](https://projects.theforeman.org/issues/37926))
+* Make sure sudo is installed for non-root users to use REX ([#37919](https://projects.theforeman.org/issues/37919))
+* don't use plain "proxy" when talking about HTTP proxies on the settings page ([#37843](https://projects.theforeman.org/issues/37843))
+* Bulk Packages wizard - Host search bleeds into package/errata search ([#37768](https://projects.theforeman.org/issues/37768))
+* User search filter for auth_source_type returns error code 500 ([#37767](https://projects.theforeman.org/issues/37767))
+* Incorrect Network at displayed host/edit page in the interface tab when importing host from compute resources  ([#37731](https://projects.theforeman.org/issues/37731))
+* Web UI: Error message not copyable ([#37718](https://projects.theforeman.org/issues/37718))
+* Move telemetry allowed_labels to settings ([#37647](https://projects.theforeman.org/issues/37647))
+* Fix Style/SoleNestedConditional cop ([#37431](https://projects.theforeman.org/issues/37431))
+* Fix some Style/ cop ([#37427](https://projects.theforeman.org/issues/37427))
+* Fix Layout/ArgumentAlignment cop ([#37425](https://projects.theforeman.org/issues/37425))
+* setup Zeitwerk inflector ([#33895](https://projects.theforeman.org/issues/33895))
+
+#### Foreman - API
+* Parameters API doesn't expose hidden_value attribute when creating parameters ([#37878](https://projects.theforeman.org/issues/37878))
+* Host Creation via GraphQL only as Admin ([#37765](https://projects.theforeman.org/issues/37765))
+
+#### Foreman - Authentication
+* NetIQ eDirectory for authentication ([#37085](https://projects.theforeman.org/issues/37085))
+* User mail address should either be always optional or always required ([#10946](https://projects.theforeman.org/issues/10946))
+
+#### Foreman - Host creation
+* Don't apply the compute profile when updating host ([#37800](https://projects.theforeman.org/issues/37800))
+* Host create form - UI improvements ([#37519](https://projects.theforeman.org/issues/37519))
+
+#### Foreman - Host registration
+* Provide option to use wget for the new Register Host feature ([#36688](https://projects.theforeman.org/issues/36688))
+
+#### Foreman - JavaScript stack
+* Give Toasts keys for ToastsList ([#37915](https://projects.theforeman.org/issues/37915))
+* not all webpack assets are properly invalidated on change ([#37775](https://projects.theforeman.org/issues/37775))
+* rename AuthSource Welcome variables to fix translation ([#37691](https://projects.theforeman.org/issues/37691))
+
+#### Foreman - Rails
+* Enable Zeitwerk autoload mode for Rails 6+ ([#29991](https://projects.theforeman.org/issues/29991))
+
+#### Foreman - Templates
+* Fix CVE-2024-8553 ([#37978](https://projects.theforeman.org/issues/37978))
+* Update remote_execution_pull_setup to generate a yggdrasil-version-agnostic yggdrasil configuration file ([#37877](https://projects.theforeman.org/issues/37877))
+* Installing packages on SLES fails if they involve a repo whose GPG key is not yet present on the target system ([#37870](https://projects.theforeman.org/issues/37870))
+* remote_execution_ssh_keys template does not set proper sudoers file permissions ([#37867](https://projects.theforeman.org/issues/37867))
+* Typo in "Unknown '%{klass}' resource class" error message ([#37841](https://projects.theforeman.org/issues/37841))
+* subscription_manager_setup.erb doesn't point to correct host ([#37769](https://projects.theforeman.org/issues/37769))
+* Use http proxy in provisioning templates if host parameter has been set ([#37730](https://projects.theforeman.org/issues/37730))
+
+#### Foreman - Tests
+* intermittent host_js integeration test failure:  test_0002_correctly override global params " Expected false to be truthy." ([#37774](https://projects.theforeman.org/issues/37774))
+
+#### Foreman - Unattended installations
+* Windows default user template sets incorrect Puppet server ([#37912](https://projects.theforeman.org/issues/37912))
+* Ansible password is not extracted correctly in the Windows default provisioning template ([#37903](https://projects.theforeman.org/issues/37903))
+
+#### Foreman - Web Interface
+* Add possibility to display action when table is empty ([#37836](https://projects.theforeman.org/issues/37836))
+* Add possibility to display message when table is empty ([#37805](https://projects.theforeman.org/issues/37805))
+* Pagination doesn't re-render a table when switching pages ([#37770](https://projects.theforeman.org/issues/37770))
+* inherit overrides deploy on in hostgroup ([#37714](https://projects.theforeman.org/issues/37714))
+* open Documentation in new tab in generic table ([#37592](https://projects.theforeman.org/issues/37592))
+* remove hand cursor from generic table ([#37591](https://projects.theforeman.org/issues/37591))
+
+#### Installer
+* Checks don’t disable the default CA path which means openssl will use the default system CA path by default ([#37828](https://projects.theforeman.org/issues/37828))
+* PostgreSQL 13 upgrade aborts when user locale doesn't match cluster locale ([#37797](https://projects.theforeman.org/issues/37797))
+
+#### Installer - Foreman modules
+* Not possible to use ProxyJump or ProxyCommand for Ansible. ([#37803](https://projects.theforeman.org/issues/37803))
+* Cockpit integration fails with AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F in foreman-ssl_error_ssl.log ([#37761](https://projects.theforeman.org/issues/37761))
+
+#### Installer - foreman-installer script
+* reset data hook passes PGPASSWORD as part of the shell command ([#37940](https://projects.theforeman.org/issues/37940))
+* Disconnected upgrade fails to switch postgresql dnf module ([#37874](https://projects.theforeman.org/issues/37874))
+
+#### SELinux
+* websockify doesn't work with SELinux enabled ([#37791](https://projects.theforeman.org/issues/37791))
+
+*A full list of changes in 3.13.0 is available via [Redmine](https://projects.theforeman.org/issues?set_filter=1&sort=id%3Adesc&status_id=closed&f[]=cf_12&op[cf_12]=%3D&v[cf_12]=1880)*
+
 
 ### Contributors