Initial version of 2.15.4 release notes

Change-Id: Iaac42c952e7a47b989c8b23d58782fbb5cf8b9f8
diff --git a/pages/site/releases/2.15.md b/pages/site/releases/2.15.md
index 1a0f2d5..56bb859 100644
--- a/pages/site/releases/2.15.md
+++ b/pages/site/releases/2.15.md
@@ -361,7 +361,7 @@
 
 * Update Apache Mina SSHD to 1.6.0
 
-* Update AutoValue to 1.4.1
+* Update AutoValue to 1.4.1 (updated to 1.6.2 in 2.15.4)
 
 * Update Blame Cache to 0.2-5
 
@@ -389,6 +389,129 @@
 
 * Update Soy to 2017-04-23
 
+### 2.15.4 (in development)
+
+* [Issue 7053](https://bugs.chromium.org/p/gerrit/issues/detail?id=7053):
+Modify search autocompletion to include only email.
+
+* [Issue 8859](https://bugs.chromium.org/p/gerrit/issues/detail?id=8859):
+Skip plugin capability check for administrators.
+
+* [Issue 7896](https://bugs.chromium.org/p/gerrit/issues/detail?id=7896) and
+[Issue 9674](https://bugs.chromium.org/p/gerrit/issues/detail?id=9674):
+Fix compatibility with MS Edge.
+
+* [Issue 9642](https://bugs.chromium.org/p/gerrit/issues/detail?id=9642):
+Fix rendering of 'Ready' and 'Start Review' buttons.
+
+* [Issue 8472](https://bugs.chromium.org/p/gerrit/issues/detail?id=8472):
+Count unresolved message threads within thread groups rather than by leaves.
+
+* [Issue 7911](https://bugs.chromium.org/p/gerrit/issues/detail?id=7911)
+and [Issue 9506](https://bugs.chromium.org/p/gerrit/issues/detail?id=9506):
+Fix text overflow.
+
+* [Issue 8202](https://bugs.chromium.org/p/gerrit/issues/detail?id=8202):
+Add current patch set to `wip-state-changed` and `private-state-changed`
+events.
+
+* [Issue 9483](https://bugs.chromium.org/p/gerrit/issues/detail?id=9483):
+Perform fonts preloads in "anonymous" cross-origin mode.
+
+* [Issue 8582](https://bugs.chromium.org/p/gerrit/issues/detail?id=8582):
+Turn off autoReindexIfStale by default.
+
+* [Issue 7750](https://bugs.chromium.org/p/gerrit/issues/detail?id=7750):
+Signed pushes do not seem to be enforced.
+
+* Remove unused font files.
+
+* [Issue 9670](https://bugs.chromium.org/p/gerrit/issues/detail?id=9670):
+Add support for Elasticsearch 6.4.0.
+* [Issue 9711](https://bugs.chromium.org/p/gerrit/issues/detail?id=9711):
+Add a change deleted event.
+
+  Since 2.14 it is possible to delete changes, however there was no specific
+  event emitted. A new change deleted event is added, which is notified to
+  `stream-events` clients. The hooks plugin is updated to support a `change-deleted`
+  hook.
+* [Issue 9689](https://bugs.chromium.org/p/gerrit/issues/detail?id=9689):
+Fix visibility of tag creation form on the project screen (GWT).
+
+  The tag creation form was shown when the user had "Create Reference" permission
+  on `refs/*` or `refs/heads/*` (but not `refs/tags/*`).
+* [Issue 9528](https://bugs.chromium.org/p/gerrit/issues/detail?id=9528):
+Allow project-level
+[`receive.maxObjectSizeLimit`](http://gerrit-documentation.storage.googleapis.com/Documentation/2.14.12/config-project-config.html#receive.maxObjectSizeLimit)
+to be inherited from parent project.
+
+  It is possible to set the limit per project in the `project.config` on
+  `refs/meta/config`, and at global level in `$site/etc/gerrit.config`. The
+  project setting may override the global setting if it is lower. Changing
+  the global setting requires a server restart.
+
+  A limitation of this implementation is that we cannot set the limit at a
+  project level and have it inherited to its child projects; it is necessary
+  to explicitly set the limit on each child project.
+
+  A new global option
+  [`receive.inheritProjectMaxObjectSizeLimit`](http://gerrit-documentation.storage.googleapis.com/Documentation/2.14.12/config-gerrit.html#receive.inheritProjectMaxObjectSizeLimit)
+  is added, and when this is enabled the project-level setting is inherited
+  from the parent. This new setting is disabled by default to keep backwards
+  compatibility with the original behavior.
+* Allow more email RFC characters in the username.
+
+  It was possible to set a username with an email-address-like string, but
+  only as far as the fact that the `@` character was allowed. Most of the
+  other characters allowed by [the RFC](https://www.mailboxvalidator.com/resources/articles/acceptable-email-address-syntax-rfc/)
+  were not allowed.
+* Ensure user authentication in `AllRequestFilter` filters.
+
+  The order of filters made request authentication only work when the HTTP
+  request was issued from the Gerrit UI, but not work when REST API was used.
+* commit-message-length-validation plugin: Use "warning" prefix to allow
+colorization of remote output.
+
+  From version 2.19 of git, the "warning" keyword will be highlighted
+  in the remote output when `color.remote` is enabled in the git config.
+* Fix display of "Delete Changes" permission in access screen on GWT UI.
+* Fix permission check when deleting a single branch with the "Delete Branches"
+REST endpoint.
+* Include cause in exception when failing to save config in the "Set Config"
+REST endpoint.
+* [Issue 9482](https://bugs.chromium.org/p/gerrit/issues/detail?id=9482):
+Fix staleness checker for URL-encoded project names.
+* Validate connections when sending a request to the database.
+
+  In some cases it was possible to attempt to reuse an already closed
+  connection, which resulted in an internal server exception.
+* Upgrade JGit to 4.9.5.201809180939-r.
+
+  * [Issue 9153](https://bugs.chromium.org/p/gerrit/issues/detail?id=9153):
+  Fix querying for filenames with special characters.
+  * [Issue 9667](https://bugs.chromium.org/p/gerrit/issues/detail?id=9667):
+  Fix handling of output stream in LFS server.
+
+  * Fix errors during cleanup after deleting refs.
+
+  * Fix errors during cleanup after running garbage collection.
+
+  * Fix atomic lock file creation on NFS.
+
+  * [Honor trustFolderStats also when reading packed-refs](https://git.eclipse.org/r/#/c/112015/).
+
+    Users should note that for repositories with a high number of references
+    (for example in excess of 300K refs) and in a server with high traffic,
+    this solution may not scale well and should be tested carefully.
+
+* Upgrade guice to 4.2.0.
+  Guice [version 4.2.0](https://github.com/google/guice/wiki/Guice42)
+  includes performance improvements.
+* Upgrade elasticsearch-rest-client to 6.4.1.
+* Upgrade Dropwizard Metrics to 4.0.3.
+* Upgrade auto-value to 1.6.2.
+* Upgrade PostgreSQL connector to 42.2.4.
+
 ### 2.15.3
 
 * [Issue 8915](https://bugs.chromium.org/p/gerrit/issues/detail?id=8915):