[github-actions]

Bump elastic-stack to latest snapshot version

Update snapshot.yml

1 file(s) updated with "$1=9.6.0-5fa42f6c-SNAPSHOT": * dev-tools/integration/.env

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

[Copilot]

🟢 Approval recommended

The Elasticsearch integration-test snapshot pin update has no active review issues.

No open issues 🎉

What changed in this PR

Updates Fleet Server’s integration-test Elasticsearch snapshot pin through Updatecli.

Changes:

• Bumps ELASTICSEARCH_VERSION from 9.6.0-95aba36c-SNAPSHOT to 9.6.0-5fa42f6c-SNAPSHOT.

File	Description
dev-tools/​integration/​.env	Updates the Elasticsearch image version used for integration testing.

_{Review effort: Balanced}

[mergify]

This pull request does not currently match the merge queue conditions, so it cannot be queued from here. The box comes back if it matches again.

[elastic-vault-github-plugin-prod]

Dependency Update Analysis

Summary: This PR updates the Elasticsearch snapshot tag used by integration/dev tooling (9.6.0-95aba36c-SNAPSHOT → 9.6.0-5fa42f6c-SNAPSHOT); overall risk is low.

Elasticsearch snapshot image tag 9.6.0-95aba36c-SNAPSHOT → 9.6.0-5fa42f6c-SNAPSHOT

Ecosystem: CI / container / snapshot image pin

Check	Result
Breaking changes	✅ None found
Testable in PR	✅ Yes

Changelog highlights (old → new)

• Upstream release-note body is unavailable for this snapshot tag after GitHub release lookup attempts (9.6.0-5fa42f6c-SNAPSHOT and v9.6.0-5fa42f6c-SNAPSHOT both 404 in elastic/elasticsearch).
• Local metadata confirms this is a snapshot hash refresh only in dev-tools/integration/.env.
• CVE/security note: no explicit CVE/GHSA entries were available in upstream notes for this snapshot identifier; this PR itself only changes the test image tag and does not alter authz/authn, parsing, crypto, or network handling code in this repository.

Usage in this repository

• Updated value is in dev-tools/integration/.env.
• Consumed by integration stack images in dev-tools/integration/docker-compose.yml (Elasticsearch setup, primary, and remote services).
• Read by build/test tooling paths, including:
  • .buildkite/scripts/integration_test.sh → mage test:integration
  • magefile.go (CustomAgentImage, stackImageTagFromEnv)
  • dev-tools/cloud/terraform/main.tf regex extraction for stack version
  • testing/e2e/agent_download.go environment-based artifact selection
• Buildkite pipeline includes integration/e2e test steps in .buildkite/pipeline.yml.

Compatibility assessment

• The bump keeps the same semantic base (9.6.0) and updates only the snapshot commit suffix.
• Repository usage expects a valid ELASTICSEARCH_VERSION tag string; format remains compatible with existing parsing/templating (env substitution + Terraform regex).
• No API/input contract changes were introduced in repo code; impact is scoped to CI/dev/test runtime image selection.

Labels Applied

• oblt-aw/ai/merge-ready — applied (low-risk, compatible, CI/dev-scoped dependency pin update).

---

What is this? | From workflow: Observability Agentic Workflow — Pull Request

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

[github-actions]

Automerge skipped

Automerge skipped this pull request because the changed files do not match any configured dependency collection.

If this update should be automerged, ask a maintainer to add or adjust a collection, or merge the pull request manually.

See Opt in or opt out for how to enable or disable Automerge collections on the Control Plane Dashboard.

Collections currently enabled for automerge: github-actions, pre-commit, vm-images

Changed files considered:

• dev-tools/integration/.env