diff --git a/website/docs/releases/_template.md b/website/docs/releases/_template.md
index 4d32dfcfb..803222c80 100644
--- a/website/docs/releases/_template.md
+++ b/website/docs/releases/_template.md
@@ -11,7 +11,7 @@ slug: "xxxx.x"
 
 ## API Changes
 
-*Insert output of `make gen-diff` here*
+_Insert output of `make gen-diff` here_
 
 ## Upgrading
 
diff --git a/website/docs/releases/v2022.9.md b/website/docs/releases/v2022.9.md
index 76af66ecf..47bdb059e 100644
--- a/website/docs/releases/v2022.9.md
+++ b/website/docs/releases/v2022.9.md
@@ -9,36 +9,36 @@ slug: "2022.9"
 
 ## Minor changes/fixes
 
-- *: cleanup stray print calls
-- *: remove remaining default creation code in squashed migrations
-- blueprint: fix EntryInvalidError not being handled in tasks
-- blueprints: add meta model to apply blueprint within blueprint for dependencies (#3486)
-- blueprints: don't export events by default and exclude anonymous user
-- blueprints: OCI registry support (#3500)
-- blueprints: use correct log level when re-logging import validation logs
-- core: fix custom favicon not being set correctly on load
-- core: improve error template (#3521)
-- crypto: add command to import certificates
-- events: fix MonitoredTasks' save_on_success not behaving as expected
-- events: reset task info when not saving on success
-- events: save event to test notification transport
-- flows: fix incorrect diagram for policies bound to flows
-- flows: migrate FlowExecutor error handler to native challenge instead of shell
-- internal: fix outposts not logging flow execution errors correctly
-- internal: optimise outpost's flow executor to use less requests
-- providers/oauth2: add x5c (#3556)
-- providers/proxy: fix routing based on signature in traefik and caddy
-- root: make redis persistent in docker-compose
-- root: re-use custom log helper from config and cleanup duplicate functions
-- sources/ldap: start_tls before binding but without reading server info
-- sources/oauth: use GitHub's dedicated email API when no public email address is configured
-- sources/oauth: use UPN for username with azure AD source
-- stages/authenticator_duo: fix 404 when current user does not have permissions to view stage
-- stages/consent: default to expiring consent instead of always_require
-- tenants: handle all errors in default_locale
-- web/admin: enable blueprint instances by default
-- web/flows: update flow background
-- web/user: justify content on user settings page on desktop
+-   \*: cleanup stray print calls
+-   \*: remove remaining default creation code in squashed migrations
+-   blueprint: fix EntryInvalidError not being handled in tasks
+-   blueprints: add meta model to apply blueprint within blueprint for dependencies (#3486)
+-   blueprints: don't export events by default and exclude anonymous user
+-   blueprints: OCI registry support (#3500)
+-   blueprints: use correct log level when re-logging import validation logs
+-   core: fix custom favicon not being set correctly on load
+-   core: improve error template (#3521)
+-   crypto: add command to import certificates
+-   events: fix MonitoredTasks' save_on_success not behaving as expected
+-   events: reset task info when not saving on success
+-   events: save event to test notification transport
+-   flows: fix incorrect diagram for policies bound to flows
+-   flows: migrate FlowExecutor error handler to native challenge instead of shell
+-   internal: fix outposts not logging flow execution errors correctly
+-   internal: optimise outpost's flow executor to use less requests
+-   providers/oauth2: add x5c (#3556)
+-   providers/proxy: fix routing based on signature in traefik and caddy
+-   root: make redis persistent in docker-compose
+-   root: re-use custom log helper from config and cleanup duplicate functions
+-   sources/ldap: start_tls before binding but without reading server info
+-   sources/oauth: use GitHub's dedicated email API when no public email address is configured
+-   sources/oauth: use UPN for username with azure AD source
+-   stages/authenticator_duo: fix 404 when current user does not have permissions to view stage
+-   stages/consent: default to expiring consent instead of always_require
+-   tenants: handle all errors in default_locale
+-   web/admin: enable blueprint instances by default
+-   web/flows: update flow background
+-   web/user: justify content on user settings page on desktop
 
 ## Upgrading