[AUTO] Add release notes for 3.7.0

[opensearch-ci-bot]

Add release notes for 3.7.0

Borderline Calls

• Fix singleton stack-corruption NPE in DatetimeUdtNormalizeRule #5458: Placed in Enhancements — labeled "enhancement" but is effectively a bug fix for a concurrency NPE. Chose Enhancements because the label explicitly says "enhancement" and the fix improves thread safety of the rule infrastructure.
• Normalize datetime types for unified query API #5408: Placed in Bug Fixes — labeled "bugFix" and "PPL". It normalizes datetime types which fixes incorrect behavior, though it also adds new extension points.
• [BugFix] Scope SQL cursor continuation to original query indices under FGAC #5399: Placed in Bug Fixes — labeled "bug", "enhancement", and "SQL". The core change is a security bug fix (403 on cursor continuation), so Bug Fixes takes priority.
• Initial implementation of report-builder interface #5266: Placed in Enhancements — labeled "enhancement" and "error-experience". It adds new error reporting infrastructure which improves existing error messages rather than fixing a specific bug.
• [Enhancement] Fix error messages for invalid index mapping #5370: Placed in Enhancements — labeled "enhancement". Improves error message formatting which is an enhancement to existing behavior.
• Add tiebreaker to stats sort-on-measure IT queries #5435: Placed in Infrastructure — no labels, but the change is purely about test determinism across engines, making it infrastructure/test work.
• fix(prometheus): handle /api/v1/metadata responses without data field #5437: Placed in Bug Fixes — no labels, but it fixes a crash (JSONException) in production when using Cortex-backed Prometheus datasources.
• Use ObjectInputFilter for deserialization #5469: Placed in Bug Fixes — labeled "bug". Adds security hardening for deserialization which addresses a vulnerability.
• Fix SemanticCheckException not thrown #5239: Placed in Bug Fixes — labeled "infrastructure" and "ci-failure" but the actual change fixes a semantic check exception not being thrown, which is a bug fix.
• Land analytics-engine PPL integration into main #5430: Placed in Infrastructure — labeled "infrastructure" and "maintenance". It's a large integration landing that is primarily infrastructure/plumbing work.
• top and head: allow limit keywords #4249: Placed in Enhancements — labeled "enhancement" and "stalled". Adds syntactic sugar for existing commands.

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests

🔒 No security concerns identified

✅ No TODO sections

🔀 No multiple PR themes

⚡ No major issues detected