Start release notes for 2.16.3

Change-Id: Ifbb9b3345459f458201f885305f92087fc1aa34c
diff --git a/pages/site/releases/2.16.md b/pages/site/releases/2.16.md
index be120c5..f0e3c8c 100644
--- a/pages/site/releases/2.16.md
+++ b/pages/site/releases/2.16.md
@@ -390,7 +390,7 @@
 
 * Update Dropwizard metrics-core to 3.2.5
 
-* Update Elasticsearch to 6.4.3 (Updated to 6.5.3 in 2.16.2)
+* Update Elasticsearch to 6.4.3 (Updated to 6.5.4 in 2.16.3)
 
 * Add dependency to flexmark-java 0.34.18
 
@@ -486,6 +486,79 @@
 
 ## Bugfix Releases
 
+### 2.16.3
+
+* [Issue 10082](https://bugs.chromium.org/p/gerrit/issues/detail?id=10082):
+Decouple online reindex activation from index module.
+
+  Plugins were not loaded before online indexing was triggered, resulting
+  in plugin-contributed submit rules not being evaluated during indexing.
+
+  Online reindex activation is now decoupled from the index module and
+  thus postpones the triggering of online reindexing until after loading
+  of the plugins.
+
+* [Issue 10210](https://bugs.chromium.org/p/gerrit/issues/detail?id=10210):
+Fix ordering of the project list in PolyGerrit.
+
+  The ordering of the project list in PolyGerrit was inconsistent with the
+  ordering in GWT.
+
+* Evict group caches on group creation.
+
+  If a group was created after a previous cache miss for its name, Id,
+  or UUID, the cache also did not return the group if it is called
+  immediately after the group was created.
+
+* [Issue 10240](https://bugs.chromium.org/p/gerrit/issues/detail?id=10240):
+Fix internal server error when cloning a repository from Gerrit slave.
+
+* Improve error handling if comment note is too large during schema migration.
+
+  During migration to schema 169, comments in NoteDb are migrated to json.
+  If loading the blob for a comment note failed due to being too large (in
+  excess of a hard-coded 25MB limit), the migration would fail.
+
+  The hard-coded limit is now removed. It is still possible that the migration
+  can fail if the blob is excessively large, but the logging of such a
+  failure is improved so that the change that failed can be tracked down.
+
+* [Issue 9410](https://bugs.chromium.org/p/gerrit/issues/detail?id=9410):
+Add the GWT hash separator to the GWT url.
+
+* Merge top menu items contributed by plugins.
+
+  Each plugin contributes a list single of menus, which are expected
+  to be merged in existing top menu entries if they already exist. This
+  was implemented in the GWT UI, but not in PolyGerrit.
+
+* Add support for several more MIME types in syntax highlighting.
+
+  Support is added for: powershell, xquery, cmake, coffeescript, crystal, diff,
+  django, dockerfile, ebnf, elm, erlang, fortran, groovy, haml, haxe, ini, julia,
+  latex, less, mathematica, nginx, nsis, postgresql, q, scss, scheme, excel, tcl,
+  twig, vb, vbscript.
+
+* Upgrade jackson-core to 2.9.8.
+
+  [Version 2.9.8](https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8)
+  includes several bug fixes, including security fixes.
+
+* Upgrade elasticsearch-rest-client to 6.5.4.
+
+* [Issue 10263](https://bugs.chromium.org/p/gerrit/issues/detail?id=10263):
+Include edit ref in `EditInfo` element returned by the edit API.
+
+  It was not possible for users of the Java API to get the edit ref.
+
+* Export the project indexer in the plugin API.
+
+* Add a new method on the account API to set the account name.
+
+* Add new methods on the project API to get/set the project's `HEAD`.
+
+* Add a new method on the commit API to get "included in" information.
+
 ### 2.16.2
 
 * __SECURITY__ [Issue 10201](https://bugs.chromium.org/p/gerrit/issues/detail?id=10201):