diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index ea837d55321d..63645a30359c 100644
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -1585,6 +1585,7 @@ zeha
 Zengers
 Zengin
 zeromq
+zhaojs
 zilopbg
 zjs
 zonecryptokey
diff --git a/build-scripts/changelog-from-pr.py b/build-scripts/changelog-from-pr.py
index 039629cb1ccf..3730597d1e83 100755
--- a/build-scripts/changelog-from-pr.py
+++ b/build-scripts/changelog-from-pr.py
@@ -64,10 +64,12 @@
                 out += '    :tickets: {}\n'.format(', '.join(tickets))
         out += '\n    {}'.format(pr_info['title'][0].capitalize() + pr_info['title'][1:])
 
-    if pr_info['user']['login'].lower() not in ['ahupowerdns', 'habbie',
-                                                'pieterlexis', 'rgacogne',
-                                                'aerique', 'chbruyand',
-                                                'omoerbeek', 'fredmorcos']:
+    if pr_info['user']['login'].lower() not in ['habbie',
+                                                'rgacogne',
+                                                'aerique',
+                                                'chbruyand',
+                                                'omoerbeek',
+                                                'miodvallat']:
         try:
             if access_token:
                 user_info = requests.get(pr_info['user']['url'],
diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 87c4c387a2bb..d1c208964e5f 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024112700 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024121300 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -401,6 +401,7 @@ recursor-5.1.2.security-status                          60 IN TXT "1 OK"
 recursor-5.1.3.security-status                          60 IN TXT "1 OK"
 recursor-5.2.0-alpha1.security-status                   60 IN TXT "1 Unsupported pre-release"
 recursor-5.2.0-beta1.security-status                    60 IN TXT "1 Unsupported pre-release"
+recursor-5.2.0-rc1.security-status                      60 IN TXT "1 Unsupported pre-release"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/"
diff --git a/pdns/recursordist/docs/changelog/5.2.rst b/pdns/recursordist/docs/changelog/5.2.rst
index 7d3f1a1d5198..e347f70d97ee 100644
--- a/pdns/recursordist/docs/changelog/5.2.rst
+++ b/pdns/recursordist/docs/changelog/5.2.rst
@@ -3,6 +3,81 @@ Changelogs for 5.2.X
 
 Before upgrading, it is advised to read the :doc:`../upgrade`.
 
+.. changelog::
+  :version: 5.2.0-rc1
+  :released: 13th of December 2024
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14962
+    :tickets: 14957
+
+    Avoid local source port 4791 (zhaojs).
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14942
+
+    Log only one line per protocol for listening sockets on startup.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14941
+
+    Generate metrics files (also) where meson expects them.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14943
+
+    Skip the current zone when looking for a cut after an invalid DS denial proof
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14913
+
+    Reject hexadecimal blobs with odd number of characters.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14926
+    :tickets: 12953
+
+    Remove support for libdecaf.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14917
+    :tickets: 14915
+
+    Sync Dockerfile build options with packages
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14909
+
+    Followup to 14796: also call stop hook in 1 thread case.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 14897
+
+    Fix register QType race.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14896
+
+    Coverity fixes, all minor optimizations
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14895
+
+    Follow clippy's code improvements advice, move static lib version to 5.2.0.
+
+
+
 .. changelog::
   :version: 5.2.0-beta1
   :released: 27th of November 2024
diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst
index a346a0131994..75f211ac1678 100644
--- a/pdns/recursordist/docs/upgrade.rst
+++ b/pdns/recursordist/docs/upgrade.rst
@@ -29,6 +29,7 @@ Changed settings
 ^^^^^^^^^^^^^^^^
 
 - The :ref:`setting-yaml-incoming.max_tcp_clients` default value has been raised 1024.
+- The :ref:`setting-yaml-outgoing.udp_source_port_avoid` default value now includes port 4791.
 
 New Settings
 ^^^^^^^^^^^^