Update release notes

Author: cowtowncoder

release-notes/CREDITS-2.x

@@ -1765,3 +1765,9 @@ Kyrylo Merzlikin (kirmerzlikin@github)
 Miguel Mendes Ruiz (migmruiz@github)
  * Reported #4428: `ByteBuddy` scope went beyond `test` in version 2.17.0
   (2.17.1)
+
+Oddbjørn Kvalsund (oddbjornkvalsund@github)
+ * Reported, contributed fix for #4430: Use `ReentrantLock` instead of `synchronized`
+   in `DeserializerCache` to avoid deadlock on pinning
+  (2.17.1)
+

release-notes/VERSION-2.x

@@ -13,6 +13,9 @@ Project: jackson-databind
 #4428: `ByteBuddy` scope went beyond `test` in version 2.17.0
  (reported by Miguel M-R)
  (fix by Joo-Hyuk K)
+#4430: Use `ReentrantLock` instead of `synchronized` in `DeserializerCache`
+  to avoid deadlock on pinning
+ (reported, fix contributed by Oddbjørn K)
 #4435: Cannot deserialize value of type `java.math.BigDecimal` from
   String ".05": not a valid representation
  (reported by @EAlf91)