i find this strange. usually this would appear in a new version when we are adding the new config. livnat?

as for the general request, we could go with:
- print all new keys which are new?
- print all keys which their 3.4 (latest) is different than 3.3 (last)
- not sure if we know to print all keys which value is different for 'general' items.

Why can't we add those entries in the release notes per minor version?

(In reply to Itamar Heim from comment #1)
> i find this strange. usually this would appear in a new version when we are
> adding the new config. livnat?

you are right, it should not have been the case.
When adding the anti-spoofing feature we should have added a single config value to enable or disable this for the setup, by mistake it was added per cluster version.
We have a bug with release notes where we fixed that specific config value - bug 1063711

All new features and behavior changes are supposed to be covered by RFE Bugs covered in the Errata/release notes/what's new in the admin guide.
a config key is not the only way this could come about.
(see bug 1063711 which changed this to be a 'general' level config later on in 3.4)