fixup! add v0.36.0 release notes

release notes/v0.36.0.md

@@ -107,9 +107,22 @@ GODEBUG=http2client=0 k6 run testscript.js
 
 **Nota Bene**: the usage of the `GODEBUG` variable is considered temporary, and expected to change in the future. If you start using this feature, keep an eye out for potential future changes.
 
+## Breaking changes
+
+### Restricting file opening to init context
+
+Opening files is now restricted to the init context. While it was somewhat possible, yet [unreliably](https://github.com/grafana/k6/issues/1771), to open files during other stages of the test in the past: [#2314](https://github.com/grafana/k6/pull/2314) ensures that k6 would now throw an error in a similar scenario.
+
+Statements such as the following, will now throw an error.
+```javascript
+if (__VU >0) {
+  JSON.parse(open("./arr.json"));
+}
+```
+
 ## Bugs Fixed!
 
-* We had a long-standing issue ([#1771](https://github.com/grafana/k6/issues/1771)) making opening large files in the context of a k6 script somewhat unreliable under specific conditions in the past. This has now been addressed by [#2314](https://github.com/grafana/k6/pull/2314).
+
 * We addressed an issue uncovered by [our community](https://community.k6.io/t/v0-35-0-grpc-server-reflection-error/2383), which kept our users from using GRPC with multiple services definition in a single *proto* file. This issue was solved in [#2265](https://github.com/grafana/k6/pull/2265).
 * Thanks to the contribution of [@Resousse](https://github.com/Resousse), we've now updated k6's [`go-ntlmssp`](https://github.com/Azure/go-ntlmssp) dependency. The updating PR [#2290](https://github.com/grafana/k6/pull/2290) indeed fixes issues with NTLM Authentication backends returning two authorization headers. 
 
@@ -119,5 +132,5 @@ GODEBUG=http2client=0 k6 run testscript.js
 - We have refactored our implementation of the RampingVU executor, for better clarity and maintainability. See [#2155](https://github.com/grafana/k6/pull/2155).
 - [#2316](https://github.com/grafana/k6/pull/2316) relaxed quite a few of the code linting rules we applied to k6's code.
 - [#2304](https://github.com/grafana/k6/pull/2304) prepared the removal external of dependencies from k6's JSONAPI compliant Rest API, and deprecated the `api.v1`'s `client.Call` method in favor of its newer `client.CallAPI` counterpart. It allows us to both reduce our reliance on external dependencies and improve its maintainability.
-- We have updated our Goja dependency, our JS interpreter, to its latest available version. We are, unfortunately, not ready to integrate some of the new features it supports just yet. See [#2317](https://github.com/grafana/k6/pull/2317) and [#2238](https://github.com/grafana/k6/pull/2238)
+- We have updated our Goja dependency, our JS interpreter, to its latest available version. We are, unfortunately, not ready to integrate some of the new features it supports just yet. Namely, Goja now supports the [optional chaining](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Optional_chaining) syntax, but the Babel version we use at the moment does not. See [#2317](https://github.com/grafana/k6/pull/2317) and [#2238](https://github.com/grafana/k6/pull/2238)
 - [#2312](https://github.com/grafana/k6/pull/2312) upgraded `loadimpact/k6` docker image base to Alpine *3.15*.