From 99d5d58e20f4b7a4e14b0502fcdfe609dd9b10ae Mon Sep 17 00:00:00 2001
From: Adrian Chaves <adrian@zyte.com>
Date: Mon, 19 Jan 2026 19:19:02 +0100
Subject: [PATCH] Add a release notes entry

---
 docs/news.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/docs/news.rst b/docs/news.rst
index bab2e5ff9..b844389e4 100644
--- a/docs/news.rst
+++ b/docs/news.rst
@@ -3,6 +3,19 @@
 Release notes
 =============
 
+.. _release-2.14.2:
+
+Scrapy 2.14.2 (unreleased)
+--------------------------
+
+Security bug fixes
+~~~~~~~~~~~~~~~~~~
+
+-   Cross-origin 307/308 redirects now remove the request body. See the 
+    7j88-353p-36rg_ security advisory for details.
+
+    .. _7j88-353p-36rg: https://github.com/scrapy/scrapy/security/advisories/GHSA-7j88-353p-36rg
+
 .. _release-2.14.1:
 
 Scrapy 2.14.1 (2026-01-12)