Merge pull request #6656 from hashicorp/backport/am-changelog-0.21.3/absolutely-engaged-pug

Backport of chore: Update changelog for 0.21.3 release into release/0.21.x

CHANGELOG.md

@@ -7,8 +7,14 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
 ### New and Improved
 
 * Added support for IBM Passport Advantage Online licensing. You can now use PAO to enable Boundary Enterprise.
+* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))
 * Updated internal dependencies.
 
+### Security
+
+* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
+* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))
+
 ## 0.21.2 (2026/04/06)
 
 ### New and Improved