Mention Bouncy Castle upgrade in 2.14 release notes

Change-Id: I9a48778ff06938ed06d9eec739417f70968a436e

releases/2.14.md

diff --git a/releases/2.14.md b/releases/2.14.md
index f86840e..7fe075e 100644
--- a/releases/2.14.md
+++ b/releases/2.14.md
@@ -20,6 +20,14 @@
   java -jar gerrit.war init -d site_path
 ```
 
+### Bouncy Castle Libraries
+
+The [Bouncy Castle Crypto API libraries](https://www.bouncycastle.org/) are now
+distributed in the Gerrit `.war` file rather than being downloaded during site
+initialization. When upgrading from a previous version of Gerrit, previously
+downloaded Bouncy Castle `.jar` files remaining in the site's `/lib` folder will
+be disabled by appending `.disabled` to the file name.
+
 ### Email Templates
 
 This release deprecates the use of Velocity mail templates. It will soon
@@ -82,6 +90,8 @@
 
 ## Dependency Updates
 
+* Update Bouncy Castle to 1.56
+
 * Update codemirror to 5.25.0
 
 * Update SSHD to 1.4.0