From 7396cd3894b1643ac6f4160adc8c2b3d27b9aed9 Mon Sep 17 00:00:00 2001 From: ebeahan Date: Sat, 25 Jul 2026 10:26:12 -0500 Subject: [PATCH 1/5] Docs: release notes for 9.5.0 --- changelog/9.5.0.yaml | 79 +++++++++++++++++++ ...nceUid-flag-with-agent_identification.yaml | 32 -------- changelog/fragments/1776277335-pr-6835.yaml | 45 ----------- ...778540235-fix-artifact-access-control.yaml | 32 -------- ...1781177613-Improve-bulker-performance.yaml | 32 -------- ...se-gos-FIPS-module-for-fips-artifacts.yaml | 35 -------- ...783099722-file-delivery-support-range.yaml | 32 -------- .../_snippets/9.5.0/breaking-changes.md | 3 + .../_snippets/9.5.0/deprecations.md | 3 + docs/release-notes/_snippets/9.5.0/index.md | 24 ++++++ .../_snippets/breaking-changes.md | 3 + .../_snippets/breaking-changes/9.5.md | 3 + docs/release-notes/_snippets/deprecations.md | 3 + .../_snippets/deprecations/9.5.md | 3 + docs/release-notes/_snippets/index.md | 3 + docs/release-notes/_snippets/index/9.5.md | 3 + 16 files changed, 127 insertions(+), 208 deletions(-) create mode 100644 changelog/9.5.0.yaml delete mode 100644 changelog/fragments/1776191256-Respond-to-OpAMP-RequestInstanceUid-flag-with-agent_identification.yaml delete mode 100644 changelog/fragments/1776277335-pr-6835.yaml delete mode 100644 changelog/fragments/1778540235-fix-artifact-access-control.yaml delete mode 100644 changelog/fragments/1781177613-Improve-bulker-performance.yaml delete mode 100644 changelog/fragments/1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml delete mode 100644 changelog/fragments/1783099722-file-delivery-support-range.yaml create mode 100644 docs/release-notes/_snippets/9.5.0/breaking-changes.md create mode 100644 docs/release-notes/_snippets/9.5.0/deprecations.md create mode 100644 docs/release-notes/_snippets/9.5.0/index.md create mode 100644 docs/release-notes/_snippets/breaking-changes/9.5.md create mode 100644 docs/release-notes/_snippets/deprecations/9.5.md create mode 100644 docs/release-notes/_snippets/index/9.5.md diff --git a/changelog/9.5.0.yaml b/changelog/9.5.0.yaml new file mode 100644 index 0000000000..6b6b025ed7 --- /dev/null +++ b/changelog/9.5.0.yaml @@ -0,0 +1,79 @@ +version: 9.5.0 +entries: + - kind: enhancement + summary: OpAMP RequestInstanceUid flag always forces enrollment + description: "" + component: fleet-server + pr: [] + issue: + - https://github.com/elastic/fleet-server/issues/6789 + impact: "" + action: "" + timestamp: 1776191256 + file: + name: 1776191256-Respond-to-OpAMP-RequestInstanceUid-flag-with-agent_identification.yaml + checksum: 5a6849db638ac04cbade233798409ba151b8ce09 + - kind: feature + summary: Allow Fleet Server to reload TLS certificates without restarting + description: "" + component: fleet-server + pr: [] + issue: [] + impact: "" + action: "" + timestamp: 1776277335 + file: + name: 1776277335-pr-6835.yaml + checksum: d172ca27934608c05aa218f7938b563e6aa1d67f + - kind: security + summary: Enforce policy-based access control on artifact downloads + description: "" + component: fleet-server + pr: [] + issue: [] + impact: "" + action: "" + timestamp: 1778540235 + file: + name: 1778540235-fix-artifact-access-control.yaml + checksum: edad22f9232befcd82915193120bb892a3fc4c6c + - kind: enhancement + summary: Improve bulker performance + description: "" + component: fleet-server + pr: [] + issue: [] + impact: "" + action: "" + timestamp: 1781177613 + file: + name: 1781177613-Improve-bulker-performance.yaml + checksum: 15806b7b0441c41aea5c6df5859258591706ff1a + - kind: enhancement + summary: Use go's FIPS module for fips artifacts + description: | + Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. + Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables + FIPS mode but does not force it. + component: fleet-server + pr: [] + issue: [] + impact: "" + action: "" + timestamp: 1781550341 + file: + name: 1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml + checksum: 8cd2361f2ce7b1eb4df6aefb0cdd9a4a0fc77481 + - kind: enhancement + summary: Support HTTP Range in File Delivery + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/7319 + issue: [] + impact: "" + action: "" + timestamp: 1783099722 + file: + name: 1783099722-file-delivery-support-range.yaml + checksum: 6d94c580d4c4d47376ae2661e09b1d52207f98ea diff --git a/changelog/fragments/1776191256-Respond-to-OpAMP-RequestInstanceUid-flag-with-agent_identification.yaml b/changelog/fragments/1776191256-Respond-to-OpAMP-RequestInstanceUid-flag-with-agent_identification.yaml deleted file mode 100644 index f2e39f0edf..0000000000 --- a/changelog/fragments/1776191256-Respond-to-OpAMP-RequestInstanceUid-flag-with-agent_identification.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: OpAMP RequestInstanceUid flag always forces enrollment - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -issue: https://github.com/elastic/fleet-server/issues/6789 diff --git a/changelog/fragments/1776277335-pr-6835.yaml b/changelog/fragments/1776277335-pr-6835.yaml deleted file mode 100644 index 1ef5b7cbd5..0000000000 --- a/changelog/fragments/1776277335-pr-6835.yaml +++ /dev/null @@ -1,45 +0,0 @@ -# REQUIRED -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: feature - -# REQUIRED for all kinds -# Change summary; a 80ish characters long description of the change. -summary: Allow Fleet Server to reload TLS certificates without restarting - -# REQUIRED for breaking-change, deprecation, known-issue -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# description: - -# REQUIRED for breaking-change, deprecation, known-issue -# impact: - -# REQUIRED for breaking-change, deprecation, known-issue -# action: - -# REQUIRED for all kinds -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# AUTOMATED -# OPTIONAL to manually add other PR URLs -# PR URL: A link the PR that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -# pr: https://github.com/owner/repo/1234 - -# AUTOMATED -# OPTIONAL to manually add other issue URLs -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -# issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1778540235-fix-artifact-access-control.yaml b/changelog/fragments/1778540235-fix-artifact-access-control.yaml deleted file mode 100644 index f6ef4aeb60..0000000000 --- a/changelog/fragments/1778540235-fix-artifact-access-control.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: security - -# Change summary; a 80ish characters long description of the change. -summary: Enforce policy-based access control on artifact downloads - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1781177613-Improve-bulker-performance.yaml b/changelog/fragments/1781177613-Improve-bulker-performance.yaml deleted file mode 100644 index 1611f0ad18..0000000000 --- a/changelog/fragments/1781177613-Improve-bulker-performance.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: Improve bulker performance - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml b/changelog/fragments/1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml deleted file mode 100644 index 579321b564..0000000000 --- a/changelog/fragments/1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml +++ /dev/null @@ -1,35 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: Use go's FIPS module for fips artifacts - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -description: | - Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. - Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables - FIPS mode but does not force it. - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1783099722-file-delivery-support-range.yaml b/changelog/fragments/1783099722-file-delivery-support-range.yaml deleted file mode 100644 index 2f9f2fffb5..0000000000 --- a/changelog/fragments/1783099722-file-delivery-support-range.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: Support HTTP Range in File Delivery - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; a word indicating the component this changeset affects. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -pr: https://github.com/elastic/fleet-server/pull/7319 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/docs/release-notes/_snippets/9.5.0/breaking-changes.md b/docs/release-notes/_snippets/9.5.0/breaking-changes.md new file mode 100644 index 0000000000..a23f67743b --- /dev/null +++ b/docs/release-notes/_snippets/9.5.0/breaking-changes.md @@ -0,0 +1,3 @@ +## 9.5.0 [fleet-server-9.5.0-breaking-changes] + +_No breaking changes._ diff --git a/docs/release-notes/_snippets/9.5.0/deprecations.md b/docs/release-notes/_snippets/9.5.0/deprecations.md new file mode 100644 index 0000000000..7dd5cfc5d4 --- /dev/null +++ b/docs/release-notes/_snippets/9.5.0/deprecations.md @@ -0,0 +1,3 @@ +## 9.5.0 [fleet-server-9.5.0-deprecations] + +_No deprecations._ diff --git a/docs/release-notes/_snippets/9.5.0/index.md b/docs/release-notes/_snippets/9.5.0/index.md new file mode 100644 index 0000000000..bc75e037e5 --- /dev/null +++ b/docs/release-notes/_snippets/9.5.0/index.md @@ -0,0 +1,24 @@ +## 9.5.0 [fleet-server-release-notes-9.5.0] + + + +### Features and enhancements [fleet-server-9.5.0-features-enhancements] + + +* Allow Fleet Server to reload TLS certificates without restarting. +* OpAMP RequestInstanceUid flag always forces enrollment. [#6789](https://github.com/elastic/fleet-server/issues/6789) +* Improve bulker performance. +* Use go's FIPS module for fips artifacts. + + Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. + Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables + FIPS mode but does not force it. + +* Support HTTP Range in File Delivery. [#7319](https://github.com/elastic/fleet-server/pull/7319) + + +### Fixes [fleet-server-9.5.0-fixes] + + +* Enforce policy-based access control on artifact downloads. + diff --git a/docs/release-notes/_snippets/breaking-changes.md b/docs/release-notes/_snippets/breaking-changes.md index d2890e59ae..f0f3711ff8 100644 --- a/docs/release-notes/_snippets/breaking-changes.md +++ b/docs/release-notes/_snippets/breaking-changes.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/breaking-changes/9.5.md +::: + :::{include} /release-notes/_snippets/breaking-changes/9.4.md ::: diff --git a/docs/release-notes/_snippets/breaking-changes/9.5.md b/docs/release-notes/_snippets/breaking-changes/9.5.md new file mode 100644 index 0000000000..cb8e0deea4 --- /dev/null +++ b/docs/release-notes/_snippets/breaking-changes/9.5.md @@ -0,0 +1,3 @@ +:::{include} /release-notes/_snippets/9.5.0/breaking-changes.md +::: + diff --git a/docs/release-notes/_snippets/deprecations.md b/docs/release-notes/_snippets/deprecations.md index 7c8697f438..d1e2acd4f2 100644 --- a/docs/release-notes/_snippets/deprecations.md +++ b/docs/release-notes/_snippets/deprecations.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/deprecations/9.5.md +::: + :::{include} /release-notes/_snippets/deprecations/9.4.md ::: diff --git a/docs/release-notes/_snippets/deprecations/9.5.md b/docs/release-notes/_snippets/deprecations/9.5.md new file mode 100644 index 0000000000..107d32fdb6 --- /dev/null +++ b/docs/release-notes/_snippets/deprecations/9.5.md @@ -0,0 +1,3 @@ +:::{include} /release-notes/_snippets/9.5.0/deprecations.md +::: + diff --git a/docs/release-notes/_snippets/index.md b/docs/release-notes/_snippets/index.md index e65662a295..5915745de2 100644 --- a/docs/release-notes/_snippets/index.md +++ b/docs/release-notes/_snippets/index.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/index/9.5.md +::: + :::{include} /release-notes/_snippets/index/9.4.md ::: diff --git a/docs/release-notes/_snippets/index/9.5.md b/docs/release-notes/_snippets/index/9.5.md new file mode 100644 index 0000000000..8f6194614f --- /dev/null +++ b/docs/release-notes/_snippets/index/9.5.md @@ -0,0 +1,3 @@ +:::{include} /release-notes/_snippets/9.5.0/index.md +::: + From 0c63133e36cbd290a22a03a132e945b8ea438b60 Mon Sep 17 00:00:00 2001 From: ebeahan Date: Mon, 27 Jul 2026 08:49:44 -0500 Subject: [PATCH 2/5] Fix PR refs --- changelog/9.5.0.yaml | 18 ++++++++++++------ docs/release-notes/_snippets/9.5.0/index.md | 10 +++++----- 2 files changed, 17 insertions(+), 11 deletions(-) diff --git a/changelog/9.5.0.yaml b/changelog/9.5.0.yaml index 6b6b025ed7..4762f908ad 100644 --- a/changelog/9.5.0.yaml +++ b/changelog/9.5.0.yaml @@ -4,7 +4,8 @@ entries: summary: OpAMP RequestInstanceUid flag always forces enrollment description: "" component: fleet-server - pr: [] + pr: + - https://github.com/elastic/fleet-server/pull/6834 issue: - https://github.com/elastic/fleet-server/issues/6789 impact: "" @@ -17,8 +18,10 @@ entries: summary: Allow Fleet Server to reload TLS certificates without restarting description: "" component: fleet-server - pr: [] - issue: [] + pr: + - https://github.com/elastic/fleet-server/pull/6838 + issue: + - https://github.com/elastic/fleet-server/issues/6433 impact: "" action: "" timestamp: 1776277335 @@ -29,7 +32,8 @@ entries: summary: Enforce policy-based access control on artifact downloads description: "" component: fleet-server - pr: [] + pr: + - https://github.com/elastic/fleet-server/pull/7009 issue: [] impact: "" action: "" @@ -41,7 +45,8 @@ entries: summary: Improve bulker performance description: "" component: fleet-server - pr: [] + pr: + - https://github.com/elastic/fleet-server/pull/7190 issue: [] impact: "" action: "" @@ -56,7 +61,8 @@ entries: Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables FIPS mode but does not force it. component: fleet-server - pr: [] + pr: + - https://github.com/elastic/fleet-server/pull/7219 issue: [] impact: "" action: "" diff --git a/docs/release-notes/_snippets/9.5.0/index.md b/docs/release-notes/_snippets/9.5.0/index.md index bc75e037e5..52db967e23 100644 --- a/docs/release-notes/_snippets/9.5.0/index.md +++ b/docs/release-notes/_snippets/9.5.0/index.md @@ -5,10 +5,10 @@ ### Features and enhancements [fleet-server-9.5.0-features-enhancements] -* Allow Fleet Server to reload TLS certificates without restarting. -* OpAMP RequestInstanceUid flag always forces enrollment. [#6789](https://github.com/elastic/fleet-server/issues/6789) -* Improve bulker performance. -* Use go's FIPS module for fips artifacts. +* Allow Fleet Server to reload TLS certificates without restarting. [#6838](https://github.com/elastic/fleet-server/pull/6838) [#6433](https://github.com/elastic/fleet-server/issues/6433) +* OpAMP RequestInstanceUid flag always forces enrollment. [#6834](https://github.com/elastic/fleet-server/pull/6834) [#6789](https://github.com/elastic/fleet-server/issues/6789) +* Improve bulker performance. [#7190](https://github.com/elastic/fleet-server/pull/7190) +* Use go's FIPS module for fips artifacts. [#7219](https://github.com/elastic/fleet-server/pull/7219) Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables @@ -20,5 +20,5 @@ ### Fixes [fleet-server-9.5.0-fixes] -* Enforce policy-based access control on artifact downloads. +* Enforce policy-based access control on artifact downloads. [#7009](https://github.com/elastic/fleet-server/pull/7009) From ee02baaff6047f6284fd59b1a4a7c2c9d126a90c Mon Sep 17 00:00:00 2001 From: ebeahan Date: Mon, 27 Jul 2026 08:52:30 -0500 Subject: [PATCH 3/5] Address review feedback --- changelog/9.5.0.yaml | 9 +++------ docs/release-notes/_snippets/9.5.0/index.md | 9 ++------- 2 files changed, 5 insertions(+), 13 deletions(-) diff --git a/changelog/9.5.0.yaml b/changelog/9.5.0.yaml index 4762f908ad..239392ddd9 100644 --- a/changelog/9.5.0.yaml +++ b/changelog/9.5.0.yaml @@ -1,7 +1,7 @@ version: 9.5.0 entries: - kind: enhancement - summary: OpAMP RequestInstanceUid flag always forces enrollment + summary: OpAMP `RequestInstanceUid` flag always forces enrollment description: "" component: fleet-server pr: @@ -56,10 +56,7 @@ entries: checksum: 15806b7b0441c41aea5c6df5859258591706ff1a - kind: enhancement summary: Use go's FIPS module for fips artifacts - description: | - Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. - Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables - FIPS mode but does not force it. + description: "" component: fleet-server pr: - https://github.com/elastic/fleet-server/pull/7219 @@ -71,7 +68,7 @@ entries: name: 1781550341-Use-gos-FIPS-module-for-fips-artifacts.yaml checksum: 8cd2361f2ce7b1eb4df6aefb0cdd9a4a0fc77481 - kind: enhancement - summary: Support HTTP Range in File Delivery + summary: Support HTTP range in file delivery description: "" component: fleet-server pr: diff --git a/docs/release-notes/_snippets/9.5.0/index.md b/docs/release-notes/_snippets/9.5.0/index.md index 52db967e23..fffee4a375 100644 --- a/docs/release-notes/_snippets/9.5.0/index.md +++ b/docs/release-notes/_snippets/9.5.0/index.md @@ -6,15 +6,10 @@ * Allow Fleet Server to reload TLS certificates without restarting. [#6838](https://github.com/elastic/fleet-server/pull/6838) [#6433](https://github.com/elastic/fleet-server/issues/6433) -* OpAMP RequestInstanceUid flag always forces enrollment. [#6834](https://github.com/elastic/fleet-server/pull/6834) [#6789](https://github.com/elastic/fleet-server/issues/6789) +* OpAMP `RequestInstanceUid` flag always forces enrollment. [#6834](https://github.com/elastic/fleet-server/pull/6834) [#6789](https://github.com/elastic/fleet-server/issues/6789) * Improve bulker performance. [#7190](https://github.com/elastic/fleet-server/pull/7190) * Use go's FIPS module for fips artifacts. [#7219](https://github.com/elastic/fleet-server/pull/7219) - - Use go's FIPS module instead of microsoft/go for creating FIPS artifacts. - Mechanically it sets GOFIPS140=v1.0.0 at compile time which enables - FIPS mode but does not force it. - -* Support HTTP Range in File Delivery. [#7319](https://github.com/elastic/fleet-server/pull/7319) +* Support HTTP range in file delivery. [#7319](https://github.com/elastic/fleet-server/pull/7319) ### Fixes [fleet-server-9.5.0-fixes] From 96dda002885ad34d9c5d9ef94147e17c082d49c2 Mon Sep 17 00:00:00 2001 From: ebeahan Date: Thu, 30 Jul 2026 13:12:21 -0500 Subject: [PATCH 4/5] add new entries for BC6 --- changelog/9.5.0.yaml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/changelog/9.5.0.yaml b/changelog/9.5.0.yaml index 239392ddd9..822f62bc97 100644 --- a/changelog/9.5.0.yaml +++ b/changelog/9.5.0.yaml @@ -80,3 +80,29 @@ entries: file: name: 1783099722-file-delivery-support-range.yaml checksum: 6d94c580d4c4d47376ae2661e09b1d52207f98ea + - kind: feature + summary: Write policy_base_id field at agent enrollment + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/7422 + issue: [] + impact: "" + action: "" + timestamp: 1784718180 + file: + name: 1784718180-write-policy-base-id-on-enrollment.yaml + checksum: b458474bb606768757617be5f257438eaae1bb1a + - kind: bug-fix + summary: Fix agent enrollment failures caused by 409 version conflicts during `.fleet-agents` primary shard relocation + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/7446 + issue: [] + impact: "" + action: "" + timestamp: 1785185160 + file: + name: 1785185160-enrollment-version-conflict.yaml + checksum: dfa448208740beda8ed226ca97043992763f791e \ No newline at end of file From 4c581df0febd22536a25383b62883e500b66ae7b Mon Sep 17 00:00:00 2001 From: ebeahan Date: Thu, 30 Jul 2026 13:13:49 -0500 Subject: [PATCH 5/5] render and cleanup with additional bc6 entries --- ...t-libs-for-FIPS-peer-cert-enforcement.yaml | 36 ------------------- ...80-write-policy-base-id-on-enrollment.yaml | 7 ---- ...785185160-enrollment-version-conflict.yaml | 7 ---- docs/release-notes/_snippets/9.5.0/index.md | 2 ++ 4 files changed, 2 insertions(+), 50 deletions(-) delete mode 100644 changelog/fragments/1783518046-Bump-elastic-agent-libs-for-FIPS-peer-cert-enforcement.yaml delete mode 100644 changelog/fragments/1784718180-write-policy-base-id-on-enrollment.yaml delete mode 100644 changelog/fragments/1785185160-enrollment-version-conflict.yaml diff --git a/changelog/fragments/1783518046-Bump-elastic-agent-libs-for-FIPS-peer-cert-enforcement.yaml b/changelog/fragments/1783518046-Bump-elastic-agent-libs-for-FIPS-peer-cert-enforcement.yaml deleted file mode 100644 index 730f80364d..0000000000 --- a/changelog/fragments/1783518046-Bump-elastic-agent-libs-for-FIPS-peer-cert-enforcement.yaml +++ /dev/null @@ -1,36 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: Bump elastic-agent-libs to v0.46.0 for FIPS 140-3 peer cert key-type enforcement - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -description: | - Bump elastic-agent-libs to v0.46.0 which enforces FIPS 140-3 compliant peer - certificate key types across all TLS verification modes. Also set the - fips140=on GODEBUG default in the FIPS binary so it enforces FIPS mode at - runtime, and verify this in the binary FIPS marker check. - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1784718180-write-policy-base-id-on-enrollment.yaml b/changelog/fragments/1784718180-write-policy-base-id-on-enrollment.yaml deleted file mode 100644 index e219675133..0000000000 --- a/changelog/fragments/1784718180-write-policy-base-id-on-enrollment.yaml +++ /dev/null @@ -1,7 +0,0 @@ -kind: feature - -summary: Write policy_base_id field at agent enrollment - -component: fleet-server - -pr: https://github.com/elastic/fleet-server/pull/7422 diff --git a/changelog/fragments/1785185160-enrollment-version-conflict.yaml b/changelog/fragments/1785185160-enrollment-version-conflict.yaml deleted file mode 100644 index 04f6831665..0000000000 --- a/changelog/fragments/1785185160-enrollment-version-conflict.yaml +++ /dev/null @@ -1,7 +0,0 @@ -kind: bug-fix - -summary: Fix agent enrollment failures caused by 409 version conflicts during `.fleet-agents` primary shard relocation - -component: fleet-server - -pr: https://github.com/elastic/fleet-server/pull/7446 diff --git a/docs/release-notes/_snippets/9.5.0/index.md b/docs/release-notes/_snippets/9.5.0/index.md index fffee4a375..9026a5f033 100644 --- a/docs/release-notes/_snippets/9.5.0/index.md +++ b/docs/release-notes/_snippets/9.5.0/index.md @@ -6,6 +6,7 @@ * Allow Fleet Server to reload TLS certificates without restarting. [#6838](https://github.com/elastic/fleet-server/pull/6838) [#6433](https://github.com/elastic/fleet-server/issues/6433) +* Write policy_base_id field at agent enrollment. [#7422](https://github.com/elastic/fleet-server/pull/7422) * OpAMP `RequestInstanceUid` flag always forces enrollment. [#6834](https://github.com/elastic/fleet-server/pull/6834) [#6789](https://github.com/elastic/fleet-server/issues/6789) * Improve bulker performance. [#7190](https://github.com/elastic/fleet-server/pull/7190) * Use go's FIPS module for fips artifacts. [#7219](https://github.com/elastic/fleet-server/pull/7219) @@ -16,4 +17,5 @@ * Enforce policy-based access control on artifact downloads. [#7009](https://github.com/elastic/fleet-server/pull/7009) +* Fix agent enrollment failures caused by 409 version conflicts during `.fleet-agents` primary shard relocation. [#7446](https://github.com/elastic/fleet-server/pull/7446)