diff --git a/calico/_includes/release-notes/v3.24.6-release-notes.md b/calico/_includes/release-notes/v3.24.6-release-notes.md
index 104a870bbf5..a5a27edc219 100644
--- a/calico/_includes/release-notes/v3.24.6-release-notes.md
+++ b/calico/_includes/release-notes/v3.24.6-release-notes.md
@@ -1,17 +1,17 @@
 12 May 2023
 
-#### Bug fixes
+### Bug fixes
 
- - Update pin to use fixed calico/bird image no fix node ST failures. [calico #7564](https://github.com/projectcalico/calico/pull/7564) (@coutinhop)
- - Fix generation of `operator-crds.yaml` manifest. [calico #7218](https://github.com/projectcalico/calico/pull/7218) (@caseydavenport)
- - Fix incorrect cleanup in the service policy index after having both ingress and egress rules that reference the same service, resulting in missed IP set updates after one rule was deactivated. [calico #7152](https://github.com/projectcalico/calico/pull/7152) (@fasaxc)
- - ebpf: CLTB resolves service when ipv4 is masked as ipv6. Commonly happens with grpc. [calico #7091](https://github.com/projectcalico/calico/pull/7091) (@tomastigera)
- - Disable VXLAN checksum offload by default for all kernels. [calico #7007](https://github.com/projectcalico/calico/pull/7007) (@pasanw)
- - Fix panic in calico-node when invalid spoofed IP range provided on a pod. [calico #7082](https://github.com/projectcalico/calico/pull/7082) (@caseydavenport)
- - Prevents Node kube-controller's internal pod cache from getting out-of-sync thus leaking memory. [calico #7540](https://github.com/projectcalico/calico/pull/7540) (@dilyevsky)
+  - Update pin to calico/bird image to fix node tests. [calico #7564](https://github.com/projectcalico/calico/pull/7564) (@coutinhop)
+  - Fix generation of `operator-crds.yaml` manifest. [calico #7218](https://github.com/projectcalico/calico/pull/7218) (@caseydavenport)
+  - Fix incorrect cleanup in the service policy index after having both ingress and egress rules that reference the same service, resulting in missed IP set updates after one rule was deactivated. [calico #7152](https://github.com/projectcalico/calico/pull/7152) (@fasaxc)
+  - eBPF: CLTB resolves service when IPv4 is masked as IPv4. Commonly happens with gRPC. [calico #7091](https://github.com/projectcalico/calico/pull/7091) (@tomastigera)
+  - Disable VXLAN checksum offload by default for all kernels. [calico #7007](https://github.com/projectcalico/calico/pull/7007) (@pasanw)
+  - Fix panic in calico-node when invalid spoofed IP range provided on a pod. [calico #7082](https://github.com/projectcalico/calico/pull/7082) (@caseydavenport)
+  - Prevents node kube-controller's internal pod cache from getting out-of-sync, thus leaking memory. [calico #7540](https://github.com/projectcalico/calico/pull/7540) (@dilyevsky)
 
-#### Other changes
+### Other changes
 
- - Remove usage of deprecated '--logtostderr' command line flag. [calico #7616](https://github.com/projectcalico/calico/pull/7616) (@coutinhop)
- - ocp.tgz now hosted on GitHub [calico #7213](https://github.com/projectcalico/calico/pull/7213) (@caseydavenport)
- - By default, skip 'nodelocaldns' interface in IP auto-detection [calico #7108](https://github.com/projectcalico/calico/pull/7108) (@caseydavenport)
+  - Remove usage of deprecated '--logtostderr' command line flag. [calico #7616](https://github.com/projectcalico/calico/pull/7616) (@coutinhop)
+  - `ocp.tgz` now hosted on GitHub. [calico #7213](https://github.com/projectcalico/calico/pull/7213) (@caseydavenport)
+  - By default, skip 'nodelocaldns' interface in IP auto-detection. [calico #7108](https://github.com/projectcalico/calico/pull/7108) (@caseydavenport)
\ No newline at end of file