diff --git a/release-notes/opensearch-sql.release-notes-2.19.6.0.md b/release-notes/opensearch-sql.release-notes-2.19.6.0.md new file mode 100644 index 00000000000..fcafe1ea53b --- /dev/null +++ b/release-notes/opensearch-sql.release-notes-2.19.6.0.md @@ -0,0 +1,19 @@ +## Version 2.19.6 Release Notes + +Compatible with OpenSearch and OpenSearch Dashboards version 2.19.6 + +### Enhancements + +* Validate materialized view subqueries against SQL grammar deny list ([#5485](https://github.com/opensearch-project/sql/pull/5485)) + +### Bug Fixes + +* Add ObjectInputFilter allowlist for deserialization in PlanSerializer, DefaultExpressionSerializer, and RelJsonSerializer ([#5469](https://github.com/opensearch-project/sql/pull/5469)) + +### Infrastructure + +* Pin GitHub Actions to commit SHAs to prevent supply chain attacks ([#5573](https://github.com/opensearch-project/sql/pull/5573)) + +### Maintenance + +* Bump assertj-core from 3.9.1 to 3.27.7 to address CVE-2026-24400 ([#5294](https://github.com/opensearch-project/sql/pull/5294))