Where the file lives
At the repo root, named CHANGELOG.md, newest release first. Anyone who opens the repo to check what version they are on should not have to search a wiki or a release page.
What not to write
Do not write 'improved performance' without a number, and do not write internal names that consumers cannot grep. Every line should be checkable against the code a user has.