Reorder release notes

doc/notes/notes-9.21.15.rst

@@ -35,10 +35,6 @@ New Features
   the default built-in configuration used by :iscman:`named`. When
   the option is used, other options are ignored. :gl:`#1326`
 
-- Add support for Extended DNS Error 24 (Invalid Data).
-
-  See :rfc:`8914` section 4.25. :gl:`#1836`
-
 - :option:`named-checkconf -e` prints the effective configuration.
 
   The new :option:`named-checkconf -e` option prints the effective
@@ -47,6 +43,10 @@ New Features
   includes all default settings, as modified by user values from the
   configuration file. :gl:`#2798`
 
+- Add support for Extended DNS Error 24 (Invalid Data).
+
+  See :rfc:`8914` section 4.25. :gl:`#1836`
+
 Removed Features
 ~~~~~~~~~~~~~~~~
 
@@ -71,6 +71,12 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- Skip unsupported algorithms when looking for a signing key.
+
+  A mix of supported and unsupported DNSSEC algorithms in the same zone
+  could cause validation failures. Unsupported algorithms are now
+  ignored when looking for signing keys. :gl:`#5622`
+
 - Report when a zone reload is already in progress.
 
   Previously, if a user attempted to manually reload a zone that was
@@ -105,12 +111,6 @@ Bug Fixes
   a server was specified before the :option:`dig -b` option. This has
   been fixed. :gl:`#5609`
 
-- Skip unsupported algorithms when looking for a signing key.
-
-  A mix of supported and unsupported DNSSEC algorithms in the same zone
-  could cause validation failures. Unsupported algorithms are now
-  ignored when looking for signing keys. :gl:`#5622`
-
 - Fix fuzzing builds.
 
   Previously, fuzzing builds were broken due to typos in meson.build.