Update CHANGELOG.md for 9.3.6

[ci skip]

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 9.3.6 (2017-07-12)
+
+- Fix API Scoping. !12300
+- Username and password are no longer stripped from import url on mirror update. !12725
+- Fix issues with non-UTF8 filenames by always fixing the encoding of tree and blob paths.
+- Fixed GFM references not being included when updating issues inline.
+
 ## 9.3.5 (2017-07-05)
 
 - Remove "Remove from board" button from backlog and closed list. !12430

changelogs/unreleased/33580-fix-api-scoping.yml

----
-title: Fix API Scoping
-merge_request: 12300
-author:

changelogs/unreleased/dm-encode-tree-and-blob-paths.yml

----
-title: Fix issues with non-UTF8 filenames by always fixing the encoding of tree and
-  blob paths
-merge_request:
-author:

changelogs/unreleased/issue-description-gfm.yml

----
-title: Fixed GFM references not being included when updating issues inline
-merge_request:
-author:

changelogs/unreleased/username-password-stripped-from-import-url-fix.yml

----
-title: Username and password are no longer stripped from import url on mirror update
-merge_request: 12725
-author: