Release notes for Gerrit 2.13.6

Change-Id: I26dd46c4a6f319347632131ad0064faea16da326

releases/2.13.md

diff --git a/releases/2.13.md b/releases/2.13.md
index d723b0c..b3a3c78 100644
--- a/releases/2.13.md
+++ b/releases/2.13.md
@@ -460,6 +460,46 @@
 
 ## Bugfix Releases
 
+### 2.13.6 {#2.13.6}
+
+* Allow Git LFS to authenticate via SSH.
+
+  LFS plugins can now provide an implementation of `git-lfs-authenticate`
+  which allows the Git LFS client to use the SSH protocol to either obtain
+  the LFS endpoint URL or authorize the following LFS upload/download
+  operation
+
+* Add a [passwd program](https://gerrit-documentation.storage.googleapis.com/Documentation/2.13.6/pgm-passwd.html)
+to set values in the `secure.config` file when a secure store implementation
+is used.
+
+* Allow HTTP password when using LDAP and basic authentication.
+
+  It was not possible to use HTTP password to validate git over
+  HTTP and REST API requests if LDAP was used along with HTTP basic
+  authentication.
+
+* [Issue 5206](https://bugs.chromium.org/p/gerrit/issues/detail?id=5206):
+Fix display of username in `show-queue` output for git over HTTP tasks.
+
+* [Issue 5237](https://bugs.chromium.org/p/gerrit/issues/detail?id=5237):
+Don't truncate long lines in diff screens.
+
+* Fix naming and prompt message for password entry in init steps.
+
+* Fix Gitweb review link generation.
+
+* Submodule fixes
+
+    * Don't use fast-forward to update submodule subscription when superproject
+    has a merge submit strategy.
+
+    * Fix sorting of subscribed branches in submodule update.
+
+    * Fix handling of submdule config entries.
+
+    * Fix ordering of projects in submodule update.
+
 ### 2.13.5 {#2.13.5}
 
 * [Issue 5200](https://bugs.chromium.org/p/gerrit/issues/detail?id=5200):