Update CHANGELOG for 1.9.3

CHANGELOG.md

@@ -1,4 +1,38 @@
-## 1.9.3 (Upcoming)
+## 1.9.3 (August 17, 2023)
+
+### NOTES:
+* **New Docker Image**: As part of the bundled plugin removal effort, a new
+     Docker target called `release-full` has been added to the Packer release
+     artifacts. The release-full image includes Packer and all the official
+     plugins pre-installed in its environment. This image is being offered as an
+     alternative option for those users who may still be relying on the plugin
+     versions bundled into the Packer binary.
+     [GH-12532](https://github.com/hashicorp/packer/pull/12532)
+
+### IMPROVEMENTS:
+* core/docs: Clarify the expected usage of the `packer init` command for HCL2
+     template builds.[GH-12535](https://github.com/hashicorp/packer/pull/12535)
+* core/hcp: Add support for project-level service principals. A user connecting
+     with a project level service principals must provide a valid HCP_PROJECT_ID
+     in order to connect.
+     [GH-12520](https://github.com/hashicorp/packer/pull/12520)
+     [GH-12576](https://github.com/hashicorp/packer/pull/12576)
+* core: A new Docker image `packer:release-full` has been added for all
+     supported architectures. The release-full image includes Packer and all the
+     official plugins pre-installed in its environment.
+     [GH-12532](https://github.com/hashicorp/packer/pull/12532)
+* core: Add enhanced support to Packer telemetry for bundle plugins usage.
+     [GH-12536](https://github.com/hashicorp/packer/pull/12536)
+
+### BUG FIXES:
+
+* core: Bump golang.org/x/net to v0.13.0 to address CVE GO-2023-1988. Packer
+     itself is not vulnerable to the CVE as we don't render web pages, but
+     security checks do point it as an issue that needs to be addressed.
+     [GH-12561](https://github.com/hashicorp/packer/pull/12561)
+* core: Fix custom plugin loading in current working directory regression.
+     [GH-12544](https://github.com/hashicorp/packer/pull/12544)
+
 
 ## 1.9.2 (July 19, 2023)