Add change note for sanitizer improvements

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: owen-mc

java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md

@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework.
+* Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava.