Update NEWS for 1.3.0

NEWS

@@ -1,3 +1,40 @@
+Changes in 1.3.0
+================
+
+This is the start of a new unstable series, targeting stable release
+as 1.4.0.
+
+Major changes:
+
+ * Support systems with multiple nvidia devices
+ * Checks are update output are green again
+ * Fix support for systems like gentoo where /var/run is a symlink.
+ * Initial support for sandboxed dconf support.
+ * build-update-repo: New options --no-update-[summary,appstream] and
+   --static-delta-ignore-ref=PATTERN.
+ * Generating the appstream branch is now much faster for large
+   repositories.
+
+
+
+Changes in 1.2.3
+================
+
+The CVE-2019-5736 runc vulnerability is about using /proc/self/exe
+to modify the host side binary from the sandbox. This mostly does not
+affect flatpak since the flatpak sandbox is not run with root permissions.
+However, there is one case (running the apply_extra script for system
+installs) where this happens, so this release contains a fix for that.
+
+ * Don't expose /proc in apply_extra script sandbox.
+
+Changes in 1.2.2
+================
+
+ * Reverted green checkbox as they caused table alignment issues
+ * Fix a division by zero if the terminal reports a zero terminal
+   width (which happens in the flathub build environment).
+
 Changes in 1.2.1
 ================