2.19.3 release notes (#4001)

Signed-off-by: Jing Zhang <jngz@amazon.com>

Author: jngz-es

release-notes/opensearch-ml-common.release-notes-2.19.3.0.md

@@ -0,0 +1,14 @@
+## Version 2.19.3.0 Release Notes
+
+Compatible with OpenSearch 2.19.3
+
+### Maintenance
+* Force commons-beanutils to 1.11.0 ([#4000](https://github.com/opensearch-project/ml-commons/pull/4000))
+* Force runtime class path commons-beanutils:commons-beanutils:1.11.0 to avoid transitive dependency ([#3935](https://github.com/opensearch-project/ml-commons/pull/3935))
+* Fix commons-beanutils ([#3996](https://github.com/opensearch-project/ml-commons/pull/3996))
+* Exclude commons-beanutils ([#3991](https://github.com/opensearch-project/ml-commons/pull/3991))
+* Fix CVE-2025-48734 ([#3986](https://github.com/opensearch-project/ml-commons/pull/3986))
+* Fix CVE-2025-48924 ([#3985](https://github.com/opensearch-project/ml-commons/pull/3985))
+* Fix CVE-2025-27820 ([#3984](https://github.com/opensearch-project/ml-commons/pull/3984))
+* Update the maven snapshot publish endpoint and credential ([#3955](https://github.com/opensearch-project/ml-commons/pull/3955))
+* Adds Json Parsing to nested object during update Query step in ML Inference Request processor ([#3868](https://github.com/opensearch-project/ml-commons/pull/3868))