[AUTO] Add release notes for 2.19.7

[opensearch-ci-bot]

Add release notes for 2.19.7

Borderline Calls

• [2.19] Remove setuptools pin from doctest requirements (CVE-2026-59890) #5843: Placed in Maintenance based on the "maintenance" label. Could also be considered Infrastructure since it only affects the doctest build environment and never ships in the plugin artifact. Chose Maintenance because the label explicitly says "maintenance" and it's a dependency security vulnerability remediation.

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests

🔒 No security concerns identified

✅ No TODO sections

🔀 No multiple PR themes

⚡ Recommended focus areas for review Future CVE Reference The release notes reference CVE-2026-59890, which is dated in the future (2026) while today's date is 2026-10-14. This appears to be a typo - likely meant to be CVE-2024-59890 or CVE-2025-59890. A future-dated CVE reference will confuse users and may indicate an incorrect CVE identifier. * Remove setuptools pin from doctest requirements to address CVE-2026-59890 ([#5843](https://github.com/opensearch-project/sql/pull/5843))

[RyanL1997]

CI failures were pre-exist and it is definitely un related to this release note change