chore(release): sync changelog for v2.3.3 backports (#4147)

Updates CHANGELOG.md and removes news files for backports:
- #4007
- #4119
- #4135

Work towards #4121
Release-Tracking-Issue: #4121

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Richard Levasseur <richardlev@gmail.com>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 54de7cc..abcd5ba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -29,6 +29,23 @@
 directory, or view the [latest generated
 changelog](https://rules-python.readthedocs.io/en/latest/changelog.html).
 
+{#v2-3-3}
+## [2.3.3] - 2026-09-04
+
+[2.3.3]: https://github.com/bazel-contrib/rules_python/releases/tag/2.3.3
+
+{#v2-3-3-changed}
+### Changed
+* (publish): The twine packages are now configured for three major platforms.
+
+{#v2-3-3-fixed}
+### Fixed
+* (gazelle) Fixed a regression from version 1.8.0 which broke module map
+  generation for old-style namespace packages.
+  ([#4135](https://github.com/bazel-contrib/rules_python/pull/4135)).
+* (zipapp) Fixed handling of {obj}`PyRuntimeInfo` with `files = None` so creating
+  zipapp archives does not error.
+
 {#v2-3-2}
 ## [2.3.2] - 2026-08-22
 
diff --git a/news/4007.changed.md b/news/4007.changed.md
deleted file mode 100644
index c779304..0000000
--- a/news/4007.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-(publish): The twine packages are now configured for three major platforms.
diff --git a/news/4135.fixed.md b/news/4135.fixed.md
deleted file mode 100644
index f0be693..0000000
--- a/news/4135.fixed.md
+++ /dev/null
@@ -1,3 +0,0 @@
-(gazelle) Fixed a regression from version 1.8.0 which broke module map
-generation for old-style namespace packages.
-([#4135](https://github.com/bazel-contrib/rules_python/pull/4135)).
diff --git a/news/py_zipapp_runtime_files.fixed.md b/news/py_zipapp_runtime_files.fixed.md
deleted file mode 100644
index bc1343c..0000000
--- a/news/py_zipapp_runtime_files.fixed.md
+++ /dev/null
@@ -1,2 +0,0 @@
-(zipapp) Fixed handling of {obj}`PyRuntimeInfo` with `files = None` so creating
-zipapp archives does not error.