diff --git a/doc/arm/changelog.rst b/doc/arm/changelog.rst
index 813dd3cb8c..0696b9c9ba 100644
--- a/doc/arm/changelog.rst
+++ b/doc/arm/changelog.rst
@@ -21,7 +21,7 @@ Changelog
 Changes prior to 9.20.0
 -----------------------
 
-::
+.. code-block:: none
 
 		--- 9.20.0 released ---
 
@@ -119,6 +119,8 @@ Changes prior to 9.20.0
 	6382.	[bug]		Fix RPZ response's SOA record TTL, which was incorrectly
 				set to 1 if 'add-soa' is used. [GL #3323]
 
+.. code-block:: none
+
 		--- 9.19.24 released ---
 
 	6381.	[bug]		dns_qp_lookup() could position the iterator at the
@@ -161,6 +163,8 @@ Changes prior to 9.20.0
 	6370.	[bug]		Wrong source address used for IPv6 notify messages.
 				[GL #4669]
 
+.. code-block:: none
+
 		--- 9.19.23 released ---
 
 	6369.	[func]		The 'fixed' value for the 'rrset-order' option has
@@ -198,6 +202,8 @@ Changes prior to 9.20.0
 
 	6359.	[bug]		Fix bug in Depends (keymgr_dep) function. [GL #4552]
 
+.. code-block:: none
+
 		--- 9.19.22 released ---
 
 	6358.	[bug]		Fix validate_dnskey_dsset when KSK is not signing,
@@ -355,6 +361,8 @@ Changes prior to 9.20.0
 				'host -C' commands when one of the name servers returns
 				SERVFAIL. [GL #4508]
 
+.. code-block:: none
+
 		--- 9.19.21 released ---
 
 	6323.	[placeholder]
@@ -372,6 +380,8 @@ Changes prior to 9.20.0
 
 	6320.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.19.20 released ---
 
 	6319.	[func]		Limit isc_async_run() overhead for RBTDB tree pruning.
@@ -457,6 +467,8 @@ Changes prior to 9.20.0
 	6298.	[bug]		Fix dns_qp_lookup bugs related to the iterator.
 				[GL !8558]
 
+.. code-block:: none
+
 		--- 9.19.19 released ---
 
 	6297.	[bug]		Improve LRU cleaning behaviour. [GL #4448]
@@ -521,6 +533,8 @@ Changes prior to 9.20.0
 
 	6281.	[bug]		Fix a data race in dns_tsigkeyring_dump(). [GL #4328]
 
+.. code-block:: none
+
 		--- 9.19.18 released ---
 
 	6280.	[bug]		Fix missing newlines in the output of "rndc nta -dump".
@@ -655,6 +669,8 @@ Changes prior to 9.20.0
 	6247.	[func]		Implement incremental hashing in both isc_siphash
 				and isc_hash units. [GL #4306]
 
+.. code-block:: none
+
 		--- 9.19.17 released ---
 
 	6246.	[placeholder]
@@ -740,6 +756,8 @@ Changes prior to 9.20.0
 	6222.	[func]		Fixes to provider/engine based ECDSA key handling.
 				[GL !8152]
 
+.. code-block:: none
+
 		--- 9.19.16 released ---
 
 	6221.	[cleanup]	Refactor dns_rdataset internals, move rdatasetheader
@@ -789,6 +807,8 @@ Changes prior to 9.20.0
 	6208.	[func]		Return BADCOOKIE for out-of-date or otherwise bad, well
 				formed DNS SERVER COOKIES. [GL #4194]
 
+.. code-block:: none
+
 		--- 9.19.15 released ---
 
 	6207.	[cleanup]	The code implementing TSIG/TKEY support has been cleaned
@@ -847,6 +867,8 @@ Changes prior to 9.20.0
 				process of the catalog zone was already running.
 				[GL #4136]
 
+.. code-block:: none
+
 		--- 9.19.14 released ---
 
 	6192.	[placeholder]
@@ -948,6 +970,8 @@ Changes prior to 9.20.0
 				dighost_shutdown() callback twice and cause problems
 				if the callback function was not idempotent. [GL #4039]
 
+.. code-block:: none
+
 		--- 9.19.13 released ---
 
 	6164.	[bug]		Set the rndc idle read timeout back to 60 seconds,
@@ -1027,6 +1051,8 @@ Changes prior to 9.20.0
 
 	6147.	[performance]	Fix the TCP server parent quota use. [GL #3985]
 
+.. code-block:: none
+
 		--- 9.19.12 released ---
 
 	6146.	[performance]	Replace the zone table red-black tree and associated
@@ -1132,6 +1158,8 @@ Changes prior to 9.20.0
 	6121.	[cleanup]	Remove support for TKEY Mode 2 (Diffie-Hellman Exchanged
 				Keying). [GL #3905]
 
+.. code-block:: none
+
 		--- 9.19.11 released ---
 
 	6120.	[bug]		Use two pairs of dns_db_t and dns_dbversion_t in a
@@ -1266,6 +1294,8 @@ Changes prior to 9.20.0
 	6084.	[bug]		When BIND was built without jemalloc, the allocator flag
 				ISC_MEM_ZERO could return non-zero memory. [GL #3845]
 
+.. code-block:: none
+
 		--- 9.19.10 released ---
 
 	6083.	[bug]		Fix DNSRPS-enabled builds as they were inadvertently
@@ -1325,6 +1355,8 @@ Changes prior to 9.20.0
 				not negotiate "dot" ALPN token could crash BIND
 				on shutdown. That has been fixed. [GL #3767]
 
+.. code-block:: none
+
 		--- 9.19.9 released ---
 
 	6067.	[security]	Fix serve-stale crash when recursive clients soft quota
@@ -1426,6 +1458,8 @@ Changes prior to 9.20.0
 	6044.	[bug]		There was an "RSASHA236" typo in a log message.
 				[GL !7206]
 
+.. code-block:: none
+
 		--- 9.19.8 released ---
 
 	6043.	[bug]		The key file IO locks objects would never get
@@ -1538,6 +1572,8 @@ Changes prior to 9.20.0
 				Robin Hood hashing.  The API requires the keys to
 				be stored with the stored value.  [GL !6790]
 
+.. code-block:: none
+
 		--- 9.19.7 released ---
 
 	6013.	[bug]		Fix a crash that could happen when you change
@@ -1624,6 +1660,8 @@ Changes prior to 9.20.0
 				the structure. Remove DNS_NAMEATTR_* macros.
 				Fix latent attribute handling bug in RBT. [GL !6902]
 
+.. code-block:: none
+
 		--- 9.19.6 released ---
 
 	5992.	[func]		Introduce the new isc_mem_*x() APIs that takes extra
@@ -1739,6 +1777,8 @@ Changes prior to 9.20.0
 	5963.	[bug]		Ensure struct named_server is properly initialized.
 				[GL #6531]
 
+.. code-block:: none
+
 		--- 9.19.5 released ---
 
 	5962.	[security]	Fix memory leak in EdDSA verify processing.
@@ -1846,6 +1886,8 @@ Changes prior to 9.20.0
 	5935.	[bug]		Fix DiG lookup reference counting bug, which could
 				be observed in NSSEARCH mode. [GL #3478]
 
+.. code-block:: none
+
 		--- 9.19.4 released ---
 
 	5934.	[func]		Improve fetches-per-zone fetch limit logging to log
@@ -1919,6 +1961,8 @@ Changes prior to 9.20.0
 				compression is disabled in the non-improving case.
 				[GL #3423]
 
+.. code-block:: none
+
 		--- 9.19.3 released ---
 
 	5919.	[func]		The "rndc fetchlimit" command lists name servers
@@ -1994,6 +2038,8 @@ Changes prior to 9.20.0
 
 	5900.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.19.2 released ---
 
 	5899.	[func]		Don't try to process DNSSEC-related and ZONEMD records
@@ -2049,6 +2095,8 @@ Changes prior to 9.20.0
 				Replace it by isc_task_send() when we are shutting
 				down. [GL !6275]
 
+.. code-block:: none
+
 		--- 9.19.1 released ---
 
 	5886.	[security]	Fix a crash in DNS-over-HTTPS (DoH) code caused by
@@ -2164,6 +2212,8 @@ Changes prior to 9.20.0
 				entries being unlinked from the hash table too
 				soon. [GL #3256]
 
+.. code-block:: none
+
 		--- 9.19.0 released ---
 
 	5856.	[bug]		The "starting maxtime timer" message related to outgoing
@@ -2437,6 +2487,8 @@ Changes prior to 9.20.0
 				channel code to use ISC_R_SHUTTINGDOWN result
 				code to detect named being shut down. [GL #3079]
 
+.. code-block:: none
+
 		--- 9.17.22 released ---
 
 	5789.	[bug]		Allow replacing expired zone signatures with
@@ -2499,6 +2551,8 @@ Changes prior to 9.20.0
 				condition variable and add missing isc_mutex_destroy()
 				for nmworker lock. [GL #3051]
 
+.. code-block:: none
+
 		--- 9.17.21 released ---
 
 	5775.	[bug]		Added a timer in the resolver to kill fetches that
@@ -2581,6 +2635,8 @@ Changes prior to 9.20.0
 				via DNS-over-HTTPS, according to the recommendations
 				given in RFC 8484. [GL #2854]
 
+.. code-block:: none
+
 		--- 9.17.20 released ---
 
 	5755.	[bug]		The statistics channel wasn't correctly handling
@@ -2663,6 +2719,8 @@ Changes prior to 9.20.0
 	5737.	[bug]		Address Coverity warning in lib/dns/dnssec.c.
 				[GL #2935]
 
+.. code-block:: none
+
 		--- 9.17.19 released ---
 
 	5736.	[security]	The "lame-ttl" option is now forcibly set to 0. This
@@ -2772,6 +2830,8 @@ Changes prior to 9.20.0
 	5712.	[func]		Remove native PKCS#11 support in favor of engine_pkcs11
 				from the OpenSC project. [GL #2691]
 
+.. code-block:: none
+
 		--- 9.17.18 released ---
 
 	5711.	[bug]		"map" files exceeding 2GB in size failed to load due to
@@ -2879,6 +2939,8 @@ Changes prior to 9.20.0
 				successor key. This enables dnssec-signzone to gradually
 				replace RRSIGs during a ZSK rollover. [GL #1551]
 
+.. code-block:: none
+
 		--- 9.17.17 released ---
 
 	5689.	[security]	An assertion failure occurred when named attempted to
@@ -2971,6 +3033,8 @@ Changes prior to 9.20.0
 				algorithms for the same listener. This has been fixed.
 				[GL #2756]
 
+.. code-block:: none
+
 		--- 9.17.16 released ---
 
 	5671.	[bug]		A race condition could occur where two threads were
@@ -3058,6 +3122,8 @@ Changes prior to 9.20.0
 	5653.	[bug]		A bug that caused the NSEC3 salt to be changed on every
 				restart for zones using KASP has been fixed. [GL #2725]
 
+.. code-block:: none
+
 		--- 9.17.14 released ---
 
 	5652.	[bug]		A copy-and-paste error in change 5584 caused the
@@ -3115,6 +3181,8 @@ Changes prior to 9.20.0
 	5639.	[bug]		Check that the first and last SOA record of an AXFR are
 				consistent. [GL #2528]
 
+.. code-block:: none
+
 		--- 9.17.13 released ---
 
 	5638.	[bug]		Improvements related to network manager/task manager
@@ -3217,6 +3285,8 @@ Changes prior to 9.20.0
 				inconsistencies have been eliminated. [GL #389]
 				[GL #2289]
 
+.. code-block:: none
+
 		--- 9.17.12 released ---
 
 	5617.	[placeholder]
@@ -3309,6 +3379,8 @@ Changes prior to 9.20.0
 				functions declared in the <ctype.h> header with
 				arguments of type char. [GL #2567]
 
+.. code-block:: none
+
 		--- 9.17.11 released ---
 
 	5597.	[bug]		When serve-stale was enabled and starting the recursive
@@ -3413,6 +3485,8 @@ Changes prior to 9.20.0
 				put on the wrong free list. This prevented named from
 				starting up. [GL #2460]
 
+.. code-block:: none
+
 		--- 9.17.10 released ---
 
 	5578.	[protocol]	Make "check-names" accept A records below "_spf",
@@ -3498,6 +3572,8 @@ Changes prior to 9.20.0
 				"stale-answer-ttl" has been changed from 1 second to 30
 				seconds, following RFC 8767 recommendations. [GL #2248]
 
+.. code-block:: none
+
 		--- 9.17.9 released ---
 
 	5559.	[bug]		The --with-maxminddb=PATH form of the build-time option
@@ -3541,6 +3617,8 @@ Changes prior to 9.20.0
 
 	5547.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.17.8 released ---
 
 	5546.	[placeholder]
@@ -3589,6 +3667,8 @@ Changes prior to 9.20.0
 	5534.	[bug]		The CNAME synthesized from a DNAME was incorrectly
 				followed when the QTYPE was CNAME or ANY. [GL #2280]
 
+.. code-block:: none
+
 		--- 9.17.7 released ---
 
 	5533.	[func]		Add the "stale-refresh-time" option, a time window that
@@ -3650,6 +3730,8 @@ Changes prior to 9.20.0
 	5517.	[bug]		Do not treat UV_EOF as a TCP4RecvErr or a TCP6RecvErr.
 				[GL #2208]
 
+.. code-block:: none
+
 		--- 9.17.6 released ---
 
 	5516.	[func]		The default EDNS buffer size has been changed from 4096
@@ -3702,6 +3784,8 @@ Changes prior to 9.20.0
 				handles, now using isc_nmhandle_attach() and _detach()
 				instead of _ref() and _unref(). [GL #2122]
 
+.. code-block:: none
+
 		--- 9.17.5 released ---
 
 	5502.	[func]		'dig +bufsize=0' no longer disables EDNS. [GL #2054]
@@ -3760,6 +3844,8 @@ Changes prior to 9.20.0
 				named that the DS record for a given zone or key has
 				been updated in the parent zone. [GL #1613]
 
+.. code-block:: none
+
 		--- 9.17.4 released ---
 
 	5485.	[placeholder]
@@ -3881,6 +3967,8 @@ Changes prior to 9.20.0
 	5459.	[bug]		Fixed bad isc_mem_put() size when an invalid type was
 				specified in an "update-policy" rule. [GL #1990]
 
+.. code-block:: none
+
 		--- 9.17.3 released ---
 
 	5458.	[bug]		Prevent a theoretically possible NULL dereference caused
@@ -3946,6 +4034,8 @@ Changes prior to 9.20.0
 	5439.	[bug]		The DS RRset returned by dns_keynode_dsset() was used in
 				a non-thread-safe manner. [GL #1926]
 
+.. code-block:: none
+
 		--- 9.17.2 released ---
 
 	5438.	[bug]		Fix a race in TCP accepting code. [GL #1930]
@@ -4146,6 +4236,8 @@ Changes prior to 9.20.0
 				implicitly set to "yes". Now "inline-signing" is only
 				set to "yes" if the zone is not dynamic. [GL #1709]
 
+.. code-block:: none
+
 		--- 9.17.1 released ---
 
 	5383.	[func]		Add a quota attach function with a callback and clean up
@@ -4211,6 +4303,8 @@ Changes prior to 9.20.0
 
 	5367.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.17.0 released ---
 
 	5366.	[bug]		Fix a race condition with the keymgr when the same
@@ -4304,6 +4398,8 @@ Changes prior to 9.20.0
 	5348.	[bug]		dnssec-settime -Psync was not being honoured.
 				Thanks to Tony Finch. [GL !2893]
 
+.. code-block:: none
+
 		--- 9.15.8 released ---
 
 	5347.	[bug]		Fixed a bug that could cause an intermittent crash
@@ -4343,6 +4439,8 @@ Changes prior to 9.20.0
 	5337.	[func]		'named -V' now reports maxminddb and protobuf-c
 				versions. [GL !2686]
 
+.. code-block:: none
+
 		--- 9.15.7 released ---
 
 	5336.	[bug]		The TCP high-water statistic could report an
@@ -4398,6 +4496,8 @@ Changes prior to 9.20.0
 
 	5320.	[cleanup]	Silence TSAN on header->count. [GL #1344]
 
+.. code-block:: none
+
 		--- 9.15.6 released ---
 
 	5319.	[func]		Trust anchors can now be configured using DS
@@ -4488,6 +4588,8 @@ Changes prior to 9.20.0
 				readability and allow correct parsing of YAML
 				output. [GL #1226]
 
+.. code-block:: none
+
 		--- 9.15.5 released ---
 
 	5299.	[security]	A flaw in DNSSEC verification when transferring
@@ -4518,6 +4620,8 @@ Changes prior to 9.20.0
 	5292.	[bug]		Queue 'rndc nsec3param' requests while signing inline
 				zone changes. [GL #1205]
 
+.. code-block:: none
+
 		--- 9.15.4 released ---
 
 	5291.	[placeholder]
@@ -4563,6 +4667,8 @@ Changes prior to 9.20.0
 	5278.	[func]		Add YAML output formats for dig, mdig and delv;
 				use the "+yaml" option to enable. [GL #1145]
 
+.. code-block:: none
+
 		--- 9.15.3 released ---
 
 	5277.	[bug]		Cache DB statistics could underflow when serve-stale
@@ -4618,6 +4724,8 @@ Changes prior to 9.20.0
 				to BIND 9, and the old HMAC-SHA DNS Cookie algorithms
 				have been removed. [GL #605]
 
+.. code-block:: none
+
 		--- 9.15.2 released ---
 
 	5263.	[cleanup]	Use atomics and isc_refcount_t wherever possible.
@@ -4675,6 +4783,8 @@ Changes prior to 9.20.0
 				statistics when hitting recursive clients
 				soft quota. [GL #1067]
 
+.. code-block:: none
+
 		--- 9.15.1 released ---
 
 	5248.	[func]		To clarify the configuration of DNSSEC keys,
@@ -4741,6 +4851,8 @@ Changes prior to 9.20.0
 	5234.	[port]		arm: just use the compiler's default support for
 				yield. [GL #981]
 
+.. code-block:: none
+
 		--- 9.15.0 released ---
 
 	5233.	[bug]		Negative trust anchors did not work with "forward only;"
@@ -5141,6 +5253,8 @@ Changes prior to 9.20.0
 
 	5109.	[cleanup]	Remove support for RSAMD5 algorithm. [GL #628]
 
+.. code-block:: none
+
 		--- 9.13.5 released ---
 
 	5108.	[bug]		Named could fail to determine bottom of zone when
@@ -5189,6 +5303,8 @@ Changes prior to 9.20.0
 	5099.	[func]		Failed mutex and conditional creations are always
 				fatal. [GL #674]
 
+.. code-block:: none
+
 		--- 9.13.4 released ---
 
 	5098.	[func]		Failed memory allocations are now fatal. [GL #674]
@@ -5427,6 +5543,8 @@ Changes prior to 9.20.0
 	5030.	[bug]		Align CMSG buffers to a 64-bit boundary, fixes crash
 				on architectures with strict alignment. [GL #521]
 
+.. code-block:: none
+
 		--- 9.13.3 released ---
 
 	5029.	[func]		Workarounds for servers that misbehave when queried
@@ -5567,6 +5685,8 @@ Changes prior to 9.20.0
 	4988.	[bug]		Don't synthesize NXDOMAIN from NSEC for records under
 				a DNAME.
 
+.. code-block:: none
+
 		--- 9.13.2 released ---
 
 	4987.	[cleanup]	dns_rdataslab_tordataset() and its related
@@ -5635,6 +5755,8 @@ Changes prior to 9.20.0
 
 	4969.	[cleanup]	Refactor zone logging functions. [GL #269]
 
+.. code-block:: none
+
 		--- 9.13.1 released ---
 
 	4968.	[bug]		If glue records are signed, attempt to validate them.
@@ -5712,6 +5834,8 @@ Changes prior to 9.20.0
 	4951.	[protocol]	Add "HOME.ARPA" to list of built in empty zones as
 				per RFC 8375. [GL #273]
 
+.. code-block:: none
+
 		--- 9.13.0 released ---
 
 	4950.	[bug]		ISC_SOCKEVENTATTR_TRUNC was not be set. [GL #238]
@@ -6087,6 +6211,8 @@ Changes prior to 9.20.0
 	4842.	[bug]		Conditionally compile opensslecdsa_link.c to avoid
 				warnings about unused function. [RT #46790]
 
+.. code-block:: none
+
 		--- 9.12.0rc1 released ---
 
 	4841.	[bug]		Address -fsanitize=undefined warnings. [RT #46786]
@@ -6196,6 +6322,8 @@ Changes prior to 9.20.0
 	4810.	[test]		The chain system test failed if the IPv6 interfaces
 				were not configured. [RT #46508]
 
+.. code-block:: none
+
 		--- 9.12.0b2 released ---
 
 	4809.	[port]		Check at configure time whether -latomic is needed
@@ -6323,6 +6451,8 @@ Changes prior to 9.20.0
 				annotated using certain macros.  Miscellaneous
 				Doxygen-related cleanups. [RT #46276]
 
+.. code-block:: none
+
 		--- 9.12.0b1 released ---
 
 	4772.	[test]		Expanded unit testing framework for libns, using
@@ -6558,6 +6688,8 @@ Changes prior to 9.20.0
 
 	4716.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.12.0a1 released ---
 
 	4715.	[bug]		TreeMemMax was mis-identified as a second HeapMemMax
@@ -7385,8 +7517,12 @@ Changes prior to 9.20.0
 				looking for the NSEC3 records proving nonexistence
 				of the answer. [RT #43247]
 
+.. code-block:: none
+
 		--- 9.11.0 released ---
 
+.. code-block:: none
+
 		--- 9.11.0rc3 released ---
 
 	4471.	[cleanup]	Render client/query logging format consistent for
@@ -7399,6 +7535,8 @@ Changes prior to 9.20.0
 
 	4469.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.11.0rc2 released ---
 
 	4468.	[bug]		Address ECS option handling issues. [RT #43191]
@@ -7423,6 +7561,8 @@ Changes prior to 9.20.0
 	4461.	[bug]		win32: not all external data was properly marked
 				as external data for windows dll. [RT #43161]
 
+.. code-block:: none
+
 		--- 9.11.0rc1 released ---
 
 	4460.	[test]		Add system test for dnstap using unix domain sockets.
@@ -7538,6 +7678,8 @@ Changes prior to 9.20.0
 	4427.	[bug]		The "query" and "response" parameters to the
 				"dnstap" option had their functions reversed.
 
+.. code-block:: none
+
 		--- 9.11.0b3 released ---
 
 	4426.	[bug]		Addressed Coverity warnings. [RT #42908]
@@ -7595,6 +7737,8 @@ Changes prior to 9.20.0
 	4413.	[bug]		GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
 				was returned. [RT #42733]
 
+.. code-block:: none
+
 		--- 9.11.0b2 released ---
 
 	4412.	[cleanup]	Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
@@ -7636,6 +7780,8 @@ Changes prior to 9.20.0
 
 	4402.	[bug]		protoc-c is now a hard requirement for --enable-dnstap.
 
+.. code-block:: none
+
 		--- 9.11.0b1 released ---
 
 	4401.	[misc]		Change LICENSE to MPL 2.0.
@@ -7698,6 +7844,8 @@ Changes prior to 9.20.0
 	4381.	[bug]		Missing "zone-directory" option in catalog zone
 				definition caused BIND to crash. [RT #42579]
 
+.. code-block:: none
+
 		--- 9.11.0a3 released ---
 
 	4380.	[experimental]	Added a "zone-directory" option to "catalog-zones"
@@ -7741,6 +7889,8 @@ Changes prior to 9.20.0
 	4370.	[bug]		Address python3 compatibility issues with RNDC module.
 				[RT #42499] [RT #42506]
 
+.. code-block:: none
+
 		--- 9.11.0a2 released ---
 
 	4369.	[bug]		Fix 'make' and 'make install' out-of-tree python
@@ -7840,6 +7990,8 @@ Changes prior to 9.20.0
 	4342.	[bug]		'rndc flushtree' could fail to clean the tree if there
 				wasn't a node at the specified name. [RT #41846]
 
+.. code-block:: none
+
 		--- 9.11.0a1 released ---
 
 	4341.	[bug]		Correct the handling of ECS options with
@@ -9023,6 +9175,8 @@ Changes prior to 9.20.0
 	4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
 				from the redirect zone. [RT #37722]
 
+.. code-block:: none
+
 	3999.	[func]		"mkeys" and "nzf" files are now named after
 				their corresponding views, unless the view name
 				contains characters that would be incompatible
@@ -9695,6 +9849,8 @@ Changes prior to 9.20.0
 	3805.	[contrib]	Added contrib/perftcpdns, a performance testing tool
 				for DNS over TCP. [RT #35710]
 
+.. code-block:: none
+
 		--- 9.10.0rc1 released ---
 
 	3804.	[bug]		Corrected a race condition in dispatch.c in which
@@ -9746,6 +9902,8 @@ Changes prior to 9.20.0
 	3788.	[bug]		dns_peer_getrequestsit was returning request_nsid by
 				mistake.
 
+.. code-block:: none
+
 		--- 9.10.0b2 released ---
 
 	3787.	[bug]		The code that checks whether "auto-dnssec" is
@@ -9860,6 +10018,8 @@ Changes prior to 9.20.0
 				check_config leading to spurious messages being
 				logged.  [RT #35443]
 
+.. code-block:: none
+
 		--- 9.10.0b1 released ---
 
 	3755.	[func]		Add stats counters for known EDNS options + others.
@@ -10007,6 +10167,8 @@ Changes prior to 9.20.0
 				cleaned up and rearranged the contrib
 				directory, and added a README.
 
+.. code-block:: none
+
 		--- 9.10.0a2 released ---
 
 	3724.	[bug]		win32: Fixed a bug that prevented dig and
@@ -10210,6 +10372,8 @@ Changes prior to 9.20.0
 				information for their extensions in the version
 				file by setting the EXTENSIONS variable.
 
+.. code-block:: none
+
 		--- 9.10.0a1 released ---
 
 	3674.	[bug]		RPZ zeroed ttls if the query type was '*'. [RT #35026]
@@ -10762,6 +10926,8 @@ Changes prior to 9.20.0
 				can be vulnerable to memory exhaustion attack
 				(CVE-2013-2266). [RT #32688]
 
+.. code-block:: none
+
 	3499.	[doc]		Corrected ARM documentation of built-in zones.
 				[RT #32694]
 
@@ -11494,6 +11660,8 @@ Changes prior to 9.20.0
 				times before giving up.  mksymtbl was using non
 				portable perl to covert 64 bit hex strings. [RT #27653]
 
+.. code-block:: none
+
 		--- 9.9.0rc2 released ---
 
 	3270.	[bug]		"rndc reload" didn't reuse existing zones correctly
@@ -11530,6 +11698,8 @@ Changes prior to 9.20.0
 	3260.	[bug]		"rrset-order cyclic" could appear not to rotate
 				for some query patterns.  [RT #27170/27185]
 
+.. code-block:: none
+
 		--- 9.9.0rc1 released ---
 
 	3259.	[bug]		named-compilezone: Suppress "dump zone to <file>"
@@ -11666,6 +11836,8 @@ Changes prior to 9.20.0
 				referencing fetch context after it's been freed.
 				[RT #26720]
 
+.. code-block:: none
+
 		--- 9.9.0b2 released ---
 
 	3220.	[bug]		Change #3186 was incomplete; dns_db_rpz_findips()
@@ -11767,6 +11939,8 @@ Changes prior to 9.20.0
 
 	3187.	[port]		win32: support for Visual Studio 2008.  [RT #26356]
 
+.. code-block:: none
+
 		--- 9.9.0b1 released ---
 
 	3186.	[bug]		Version/db mismatch in rpz code. [RT #26180]
@@ -11827,6 +12001,8 @@ Changes prior to 9.20.0
 	3171.	[bug]		Exclusively lock the task when adding a zone using
 				'rndc addzone'.  [RT #25600]
 
+.. code-block:: none
+
 		--- 9.9.0a3 released ---
 
 	3170.	[func]		RPZ update:
@@ -11889,6 +12065,8 @@ Changes prior to 9.20.0
 
 	3156.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.9.0a2 released ---
 
 	3155.	[bug]		Fixed a build failure when using contrib DLZ
@@ -11916,6 +12094,8 @@ Changes prior to 9.20.0
 
 	3147.	[func]		Initial inline signing support.  [RT #23657]
 
+.. code-block:: none
+
 		--- 9.9.0a1 released ---
 
 	3146.	[test]		Fixed gcc4.6.0 errors in ATF. [RT #25598]
@@ -12389,6 +12569,8 @@ Changes prior to 9.20.0
 	3009.	[bug]		clients-per-query code didn't work as expected with
 				particular query patterns. [RT #22972]
 
+.. code-block:: none
+
 		--- 9.8.0b1 released ---
 
 	3008.	[func]		Response policy zones (RPZ) support. [RT #21726]
@@ -12492,6 +12674,8 @@ Changes prior to 9.20.0
 
 	2983.	[bug]		Include "loadkeys" in rndc help output. [RT #22493]
 
+.. code-block:: none
+
 		--- 9.8.0a1 released ---
 
 	2982.	[bug]		Reference count dst keys.  dst_key_attach() can be used
@@ -13097,6 +13281,8 @@ Changes prior to 9.20.0
 	2807.	[bug]		Fixed a possible ASSERT when reconfiguring zone
 				keys. [RT #20720]
 
+.. code-block:: none
+
 		--- 9.7.0rc1 released ---
 
 	2806.	[bug]		"rdnc sign" could delay re-signing the DNSKEY
@@ -13170,6 +13356,8 @@ Changes prior to 9.20.0
 
 	2786.	[bug]		Additional could be promoted to answer. [RT #20663]
 
+.. code-block:: none
+
 		--- 9.7.0b3 released ---
 
 	2785.	[bug]		Revoked keys could fail to self-sign [RT #20652]
@@ -13291,6 +13479,8 @@ Changes prior to 9.20.0
 	2743.	[bug]		RRSIG could be incorrectly set in the NSEC3 record
 				for a insecure delegation.
 
+.. code-block:: none
+
 		--- 9.7.0b2 released ---
 
 	2742.	[cleanup]	Clarify some DNSSEC-related log messages in
@@ -13390,6 +13580,8 @@ Changes prior to 9.20.0
 
 	2716.	[bug]		nslookup debug mode didn't return the ttl. [RT #20414]
 
+.. code-block:: none
+
 		--- 9.7.0b1 released ---
 
 	2715.	[bug]		Require OpenSSL support to be explicitly disabled.
@@ -13551,6 +13743,8 @@ Changes prior to 9.20.0
 	2675.	[bug]		dnssec-signzone could crash if the key directory
 				did not exist. [RT #20232]
 
+.. code-block:: none
+
 		--- 9.7.0a3 released ---
 
 	2674.	[bug]		"dnssec-lookaside auto;" crashed if named was built
@@ -13654,6 +13848,8 @@ Changes prior to 9.20.0
 	2645.	[port]		"gcc -m32" didn't work on amd64 and x86_64 platforms
 				which default to 64 bits. [RT #19927]
 
+.. code-block:: none
+
 		--- 9.7.0a2 released ---
 
 	2644.	[bug]		Change #2628 caused a regression on some systems;
@@ -13764,6 +13960,8 @@ Changes prior to 9.20.0
 
 	2613.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.7.0a1 released ---
 
 	2612.	[func]		Add default values for the arguments to
@@ -14148,6 +14346,8 @@ Changes prior to 9.20.0
 	2499.	[port]		solaris: lib/lwres/getaddrinfo.c namespace clash.
 				[RT #18837]
 
+.. code-block:: none
+
 		--- 9.6.0rc1 released ---
 
 	2498.	[bug]		Removed a bogus function argument used with
@@ -14211,6 +14411,8 @@ Changes prior to 9.20.0
 	2482.	[port]		libxml2: support versions 2.7.* in addition
 				to 2.6.*. [RT #18806]
 
+.. code-block:: none
+
 		--- 9.6.0b1 released ---
 
 	2481.	[bug]		rbtdb.c:matchparams() failed to handle NSEC3 chain
@@ -14281,6 +14483,8 @@ Changes prior to 9.20.0
 
 	2461.	[port]		sunos: Change #2363 was not complete. [RT #17513]
 
+.. code-block:: none
+
 		--- 9.6.0a1 released ---
 
 	2460.	[bug]		Don't call dns_db_getnsec3parameters() on the cache.
@@ -14874,6 +15078,8 @@ Changes prior to 9.20.0
 	2268.	[bug]		0.IN-ADDR.ARPA was missing from the empty zones
 				list.
 
+.. code-block:: none
+
 		--- 9.5.0b1 released ---
 
 	2267.	[bug]		Radix tree node_num value could be set incorrectly,
@@ -14901,6 +15107,8 @@ Changes prior to 9.20.0
 
 	2259.	[placeholder]
 
+.. code-block:: none
+
 		--- 9.5.0a7 released ---
 
 	2258.	[bug]		Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
@@ -15057,6 +15265,8 @@ Changes prior to 9.20.0
 	2207.	[port]		Some implementations of getaddrinfo() fail to set
 				ai_canonname correctly. [RT #17061]
 
+.. code-block:: none
+
 		--- 9.5.0a6 released ---
 
 	2206.	[security]	"allow-query-cache" and "allow-recursion" now
@@ -15109,6 +15319,8 @@ Changes prior to 9.20.0
 
 	2194.	[bug]		Close journal before calling 'done' in xfrin.c.
 
+.. code-block:: none
+
 		--- 9.5.0a5 released ---
 
 	2193.	[port]		win32: BINDInstall.exe is now linked statically.
@@ -15180,6 +15392,8 @@ Changes prior to 9.20.0
 	2173.	[port]		win32: When compiling with MSVS 2005 SP1 we also
 				need to ship Microsoft.VC80.MFCLOC.
 
+.. code-block:: none
+
 		--- 9.5.0a4 released ---
 
 	2172.	[bug]		query_addsoa() was being called with a non zone db.
@@ -15201,6 +15415,8 @@ Changes prior to 9.20.0
 	2167.	[bug]		When re-using a automatic zone named failed to
 				attach it to the new view. [RT #16786]
 
+.. code-block:: none
+
 		--- 9.5.0a3 released ---
 
 	2166.	[bug]		When running in batch mode, dig could misinterpret
@@ -15229,6 +15445,8 @@ Changes prior to 9.20.0
 	2160.	[bug]		libisc wasn't handling NULL ifa_addr pointers returned
 				from getifaddrs(). [RT #16708]
 
+.. code-block:: none
+
 		--- 9.5.0a2 released ---
 
 	2159.	[bug]		Array bounds overrun in acache processing. [RT #16710]
@@ -15334,6 +15552,8 @@ Changes prior to 9.20.0
 	2124.	[security]	It was possible to dereference a freed fetch
 				context. [RT #16584]
 
+.. code-block:: none
+
 		--- 9.5.0a1 released ---
 
 	2123.	[func]		Use Doxygen to generate internal documentation.
@@ -16475,6 +16695,8 @@ Changes prior to 9.20.0
 	1750.	[port]		lib/bind/make/rules.in:subdirs was not bash friendly.
 				[RT #12864]
 
+.. code-block:: none
+
 	1749.	[bug]		'check-names response ignore;' failed to ignore.
 				[RT #12866]
 
@@ -17213,6 +17435,8 @@ Changes prior to 9.20.0
 	1500.	[bug]		host failed to lookup MX records.  Also look up
 				AAAA records.
 
+.. code-block:: none
+
 	1499.	[bug]		isc_random need to be seeded better if arc4random()
 				is not used.
 
@@ -17928,6 +18152,8 @@ Changes prior to 9.20.0
 	1250.	[func]		Nsupdate will report the address the update was
 				sent to.
 
+.. code-block:: none
+
 	1249.	[bug]		Missing masters clause was not handled gracefully.
 				[RT #2703]
 
@@ -18850,6 +19076,8 @@ Changes prior to 9.20.0
 				change #953. win32 .make file for rndc-confgen
 				updated to add include path for os.h header.
 
+.. code-block:: none
+
 		--- 9.2.0rc1 released ---
 
 	 955.	[bug]		When using views, the zone's class was not being
@@ -18883,6 +19111,8 @@ Changes prior to 9.20.0
 	 949.	[bug]		host was unable to print records larger than 512
 				bytes. [RT #1557]
 
+.. code-block:: none
+
 		--- 9.2.0b2 released ---
 
 	 948.	[port]		Integrated support for building on Windows NT /
@@ -18916,6 +19146,8 @@ Changes prior to 9.20.0
 
 	 940.	[bug]		Double zone locking failure on error path. [RT #1510]
 
+.. code-block:: none
+
 		--- 9.2.0b1 released ---
 
 	 939.	[port]		Add the --disable-linux-caps option to configure for
@@ -18938,6 +19170,8 @@ Changes prior to 9.20.0
 	 933.	[bug]		configure failed doing libbind on platforms not
 				supported by BIND 8. [RT #1496]
 
+.. code-block:: none
+
 		--- 9.2.0a3 released ---
 
 	 932.	[bug]		Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
@@ -19050,6 +19284,8 @@ Changes prior to 9.20.0
 				bin/tests/system/ifconfig.sh now recognize the new
 				string.
 
+.. code-block:: none
+
 		--- 9.2.0a2 released ---
 
 	 899.	[bug]		lib/dns/soa.c failed to compile on many platforms
@@ -19201,6 +19437,8 @@ Changes prior to 9.20.0
 	 851.	[cleanup]	The obsolete support-ixfr option was not properly
 				ignored.
 
+.. code-block:: none
+
 		--- 9.2.0a1 released ---
 
 	 850.	[bug]		dns_rbt_findnode() would not find nodes that were
@@ -19872,6 +20110,8 @@ Changes prior to 9.20.0
 	 642.	[bug]		Break the exit_check() race in the zone module.
 				[RT #598]
 
+.. code-block:: none
+
 		--- 9.1.0b2 released ---
 
 	 641.	[bug]		$GENERATE caused a uninitialized link to be used.
@@ -20043,6 +20283,8 @@ Changes prior to 9.20.0
 				number of days, not seconds.  This matches the
 				documentation. [RT #529]
 
+.. code-block:: none
+
 		--- 9.1.0b1 released ---
 
 	 591.	[bug]		Work around non-reentrancy in openssl by disabling
@@ -20667,6 +20909,8 @@ Changes prior to 9.20.0
 	 400.	[bug]		SIG(0) signing and verifying was done incorrectly.
 				[RT #249]
 
+.. code-block:: none
+
 	 399.	[bug]		When reloading the server with a config file
 				containing a syntax error, it could catch an
 				assertion failure trying to perform zone
@@ -21211,6 +21455,8 @@ Changes prior to 9.20.0
 	 254.	[bug]		Suppress "query denied" messages on additional data
 				lookups.
 
+.. code-block:: none
+
 		--- 9.0.0b4 released ---
 
 	 253.	[func]		resolv.conf parser now recognizes ';' and '#' as
@@ -21398,6 +21644,8 @@ Changes prior to 9.20.0
 	 201.	[cleanup]	Removed the test/sdig program, it has been
 				replaced by bin/dig/dig.
 
+.. code-block:: none
+
 		--- 9.0.0b3 released ---
 
 	 200.	[bug]		Failures in sending query responses to clients
@@ -22122,4 +22370,7 @@ Changes prior to 9.20.0
 				prevented the isc directory from being created if it
 				didn't exist.
 
+.. code-block:: none
+
 		--- 9.0.0b2 released ---
+