Merge branch '8.19' into mergify/bp/8.19/pr-9257

Author: khushijain21

NOTICE-fips.txt

@@ -787,11 +787,11 @@ Contents of probable licence file $GOMODCACHE/github.com/dolmen-go/contextio@v0.
 
 --------------------------------------------------------------------------------
 Dependency : github.com/elastic/beats/v7
-Version: v7.0.0-alpha2.0.20250922203517-22d1b3849547
+Version: v7.0.0-alpha2.0.20250924195230-645118494585
 Licence type (autodetected): Elastic
 --------------------------------------------------------------------------------
 
-Contents of probable licence file $GOMODCACHE/github.com/elastic/beats/v7@v7.0.0-alpha2.0.20250922203517-22d1b3849547/LICENSE.txt:
+Contents of probable licence file $GOMODCACHE/github.com/elastic/beats/v7@v7.0.0-alpha2.0.20250924195230-645118494585/LICENSE.txt:
 
 Source code in this repository is variously licensed under the Apache License
 Version 2.0, an Apache compatible license, or the Elastic License. Outside of

NOTICE.txt

@@ -787,11 +787,11 @@ Contents of probable licence file $GOMODCACHE/github.com/dolmen-go/contextio@v0.
 
 --------------------------------------------------------------------------------
 Dependency : github.com/elastic/beats/v7
-Version: v7.0.0-alpha2.0.20250922203517-22d1b3849547
+Version: v7.0.0-alpha2.0.20250924195230-645118494585
 Licence type (autodetected): Elastic
 --------------------------------------------------------------------------------
 
-Contents of probable licence file $GOMODCACHE/github.com/elastic/beats/v7@v7.0.0-alpha2.0.20250922203517-22d1b3849547/LICENSE.txt:
+Contents of probable licence file $GOMODCACHE/github.com/elastic/beats/v7@v7.0.0-alpha2.0.20250924195230-645118494585/LICENSE.txt:
 
 Source code in this repository is variously licensed under the Apache License
 Version 2.0, an Apache compatible license, or the Elastic License. Outside of

changelog/8.19.4.yaml

@@ -0,0 +1,118 @@
+version: 8.19.4
+entries:
+    - kind: bug-fix
+      summary: Retry service start command upon failure with 30-second delay.
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9313
+      issue: []
+      timestamp: 1755283748
+      file:
+        name: 1755283748-service-retry-install.yaml
+        checksum: 886d72511d47a5cae4f6cfbe361058fc784c1ed2
+    - kind: enhancement
+      summary: Bump kube-stack Helm Chart to 0.9.1 and enable the cluster collector
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9535
+      issue: []
+      timestamp: 1755873563
+      file:
+        name: 1755873563-bump_kube_stack.yaml
+        checksum: 426353e1b9973af91cbc457becf854ad8326f9a7
+    - kind: security
+      summary: redact secrets from pre-config, computed-config, components-expected, and components-actual files in diagnostics archive
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9560
+      issue: []
+      timestamp: 1756122869
+      file:
+        name: 1756122869-update-secret-redaction-in-diagnostics.yaml
+        checksum: 3fe28334e7831c7910a2161097c1643797fc6ef7
+    - kind: bug-fix
+      summary: fix reporting of scheduled upgrade details across restarts and cancels
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9562
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/8778
+      timestamp: 1756218044
+      file:
+        name: 1756218044-fix-upgrade-details-state.yaml
+        checksum: 9677e35d59df7dfef2ff540d19d9f05d7017ede1
+    - kind: bug-fix
+      summary: enable root user to re-enroll unprivileged agent for mac and linux
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9603
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/8544
+      timestamp: 1756313785
+      file:
+        name: 1756313785-enable-root-user-to-re-enroll-unprivileged-agent-for-mac-and-linux.yaml
+        checksum: 0f9fb2207e09b12416a5e661dde758f8d432b13f
+    - kind: bug-fix
+      summary: Fix missing liveness healthcheck during container enrollment
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9612
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/9611
+      timestamp: 1756325090
+      file:
+        name: 1756325090-Fix-missing-liveness-healthcheck-during-container-enrollment.yaml
+        checksum: de9a5a42d9b6603cba3b3bf19596eb3213e892f6
+    - kind: bug-fix
+      summary: enable admin user to re-enroll unprivileged agent for windows
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9623
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/8544
+      timestamp: 1756433743
+      file:
+        name: 1756433743-enable-root-user-to-re-enroll-unprivileged-agent-for-windows.yaml
+        checksum: 65a96ffe81178578e80d9e800ebc31cf74a26d82
+    - kind: enhancement
+      summary: Enhanced loggers for easier debugging of upgrade related issues.
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9689
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/9536
+      timestamp: 1756833043
+      file:
+        name: 1756833043-enhance-upgrade-action-loggers.yaml
+        checksum: 14a08bc69878adbea5e5b81bdd507edb34c9d096
+    - kind: bug-fix
+      summary: Treat exit code 284 from Endpoint binary as non-fatal
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9687
+      issue: []
+      timestamp: 1756921212
+      file:
+        name: 1756921212-endpoint-284-non-fatal.yaml
+        checksum: 958a1547c78ab758322016e0a672f726eecb0a80
+    - kind: bug-fix
+      summary: ensure failed upgrade actions are removed from queue and details are set
+      description: ""
+      component: elastic-agent
+      pr:
+        - https://github.com/elastic/elastic-agent/pull/9634
+      issue:
+        - https://github.com/elastic/elastic-agent/issues/9629
+      timestamp: 1757079091
+      file:
+        name: 1757079091-fix-stale-upgrade-actions.yaml
+        checksum: b79516aaa48bcf3e06e746295c4f23b32df1b1b2

changelog/8.19.4/breaking.md

@@ -0,0 +1,3 @@
+## 8.19.4 [-8.19.4-breaking-changes]
+
+_No breaking changes._

changelog/8.19.4/deprecations.md

@@ -0,0 +1,3 @@
+## 8.19.4 [-8.19.4-deprecations]
+
+_No deprecations._

changelog/8.19.4/index.md

@@ -0,0 +1,20 @@
+## 8.19.4 [-release-notes-8.19.4]
+
+
+### Features and enhancements [-8.19.4-features-enhancements]
+
+* Bump kube-stack Helm Chart to 0.9.1 and enable the cluster collector. [#9535](https://github.com/elastic/elastic-agent/pull/9535) 
+* Enhanced loggers for easier debugging of upgrade related issues. [#9689](https://github.com/elastic/elastic-agent/pull/9689) [#9536](https://github.com/elastic/elastic-agent/issues/9536)
+
+
+### Fixes [-8.19.4-fixes]
+
+* Redact secrets from pre-config, computed-config, components-expected, and components-actual files in diagnostics archive. [#9560](https://github.com/elastic/elastic-agent/pull/9560) 
+* Retry service start command upon failure with 30-second delay. [#9313](https://github.com/elastic/elastic-agent/pull/9313) 
+* Fix reporting of scheduled upgrade details across restarts and cancels. [#9562](https://github.com/elastic/elastic-agent/pull/9562) [#8778](https://github.com/elastic/elastic-agent/issues/8778)
+* Enable root user to re-enroll unprivileged agent for mac and linux. [#9603](https://github.com/elastic/elastic-agent/pull/9603) [#8544](https://github.com/elastic/elastic-agent/issues/8544)
+* Fix missing liveness healthcheck during container enrollment. [#9612](https://github.com/elastic/elastic-agent/pull/9612) [#9611](https://github.com/elastic/elastic-agent/issues/9611)
+* Enable admin user to re-enroll unprivileged agent for windows. [#9623](https://github.com/elastic/elastic-agent/pull/9623) [#8544](https://github.com/elastic/elastic-agent/issues/8544)
+* Treat exit code 284 from Endpoint binary as non-fatal. [#9687](https://github.com/elastic/elastic-agent/pull/9687) 
+* Ensure failed upgrade actions are removed from queue and details are set. [#9634](https://github.com/elastic/elastic-agent/pull/9634) [#9629](https://github.com/elastic/elastic-agent/issues/9629)
+

changelog/fragments/1756433743-enable-root-user-to-re-enroll-unprivileged-agent-for-windows.yaml renamed to changelog/fragments/1755268130-cleanup-downloads-directory-and-the-new-versioned-home-if-upgrade-fails.yaml

@@ -8,10 +8,10 @@
 # - security: impacts on the security of a product or a user’s deployment.
 # - upgrade: important information for someone upgrading from a prior version
 # - other: does not fit into any of the other categories
-kind: bug-fix
+kind: enhancement
 
 # Change summary; a 80ish characters long description of the change.
-summary: enable admin user to re-enroll unprivileged agent for windows
+summary: agent cleans up downloads directory and the new versioned home if upgrade fails
 
 # Long description; in case the summary is not enough to describe the change
 # this field accommodate a description without length limits.
@@ -25,8 +25,8 @@ component: "elastic-agent"
 # If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added.
 # NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number.
 # Please provide it if you are adding a fragment for a different PR.
-pr: https://github.com/elastic/elastic-agent/pull/9623
+pr: https://github.com/elastic/elastic-agent/pull/9386
 
 # Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of).
 # If not present is automatically filled by the tooling with the issue linked to the PR number.
-issue: https://github.com/elastic/elastic-agent/issues/8544
+issue: https://github.com/elastic/elastic-agent/issues/5235