diff --git a/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md b/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md
new file mode 100644
index 00000000000..b04c6594445
--- /dev/null
+++ b/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Regular expression checks via annotation with `@javax.validation.constraints.Pattern` are now recognized as sanitizers for `java/path-injection`.