changelog: add note from CVE-2025-22869

[ivanvc]

Adds entries regarding the golang.org/x/crypto upgrade to 0.35.0, to address CVE-2025-22869.

Please read https://github.com/etcd-io/etcd/blob/main/CONTRIBUTING.md#contribution-flow.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ivanvc
Once this PR has been reviewed and has the lgtm label, please assign ahrtr for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.86%. Comparing base (d52bd90) to head (23a560f).
Report is 8 commits behind head on main.

Additional details and impacted files

see 21 files with indirect coverage changes

@@            Coverage Diff             @@
##             main   #19479      +/-   ##
==========================================
+ Coverage   68.85%   68.86%   +0.01%     
==========================================
  Files         420      420              
  Lines       35762    35762              
==========================================
+ Hits        24624    24629       +5     
+ Misses       9714     9707       -7     
- Partials     1424     1426       +2     

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d52bd90...23a560f. Read the comment docs.

[ivanvc]

Note: I need @fuweid's changes in the v3.6 CHANGELOG from #19474. I rebased his branch to avoid conflicts, but because other commits were already in the main, it brought more commits. While removing them, it made me co-author Fu's commit.

I think the best would be if I manually rebase my branch once his pull request is merged.

[k8s-ci-robot]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[ahrtr]

Please rebase this PR, thx