Update 2.13.7 release notes

Change-Id: I8c1dfe28b0891d8043304591393d0633d04dd62e
diff --git a/releases/2.13.md b/releases/2.13.md
index b4e51a6..adaaf27 100644
--- a/releases/2.13.md
+++ b/releases/2.13.md
@@ -514,6 +514,36 @@
   Allowing users delegated to maintain the server to find non-visible
   changes in the CLI allows them to perform ad-hoc indexing.
 
+* Fix deletion of the last file from config branch.
+
+  If the last file was deleted from the config branch, the file was not
+  actually deleted and the original content was kept. For example this
+  occurred when deleting all project watches when the `watch.config` file
+  was the only file on the branch.
+
+* Support at-sign (`@`) in usernames.
+
+  Some federated identity systems, such as [Shibboleth](https://shibboleth.net/),
+  use login names including the at-sign.
+
+* Enable systemd socket activation.
+
+  By setting
+  [`httpd.inheritChannel`](https://gerrit-documentation.storage.googleapis.com/Documentation/2.13/config-gerrit.html#httpd.inheritchannel)
+  to true, the server can be socket activated by `systemd` or `xinetd`.
+
+* Be more consistent about object ids used in ref operation validation.
+
+  In some cases the new and old Ids were not set, which could cause null
+  pointer exceptions in ref operation validations listeners trying to
+  dereference them.
+
+* Upgrade JGit to 4.5.1.201703201650-r.
+
+  Among other bug fixes, this version includes a fix for packfile list
+  inconsistency in memory due to temporary lack of system resources during
+  read, which caused transient "file not found" errors.
+
 ### 2.13.6 {#2.13.6}
 
 * Allow Git LFS to authenticate via SSH.