All pull requests

Pull requests

• [AlertZero] Record Attack Discovery Impact on the Investigation

  backport:versionrelease_note:skipTeam:One WorkflowTeam: SecuritySolutionv9.6.0
  #295283·andrew-goldstein opened Oct 3, 2026Contributor·

  ·
  4

  

• Update dependency lru-cache to v11.5.3 (main)

  backport:all-openrelease_note:skipTeam:Core
  #295282·elastic-renovate-prod[bot] opened Oct 3, 2026Bot·1 task·

  ·
  3

• [Workflows Management] Keep the AI sidebar closed in the step-scroll spec

  flaky-fix-check:skippedflaky-test-fixerrelease_note:skip
  #295280·kibanamachine opened Oct 3, 2026Contributor·

  ·
  1

  3

• [Custom content] Scope the Refine with chat tool UI events suite to local test targets

  backport:skipflaky-fix-check:skippedflaky-test-fixerrelease_note:skip
  #295279·kibanamachine opened Oct 3, 2026Contributor·

  ·
  1

  3

• [Lens] Wait for the reference field selection to commit

  backport:skipflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #295278·kibanamachine opened Oct 2, 2026Contributor·

  ·
  1

  7

• [ci] Move off legacy vault

  #295272·jbudz opened Oct 2, 2026Contributor·

  ·
  1

• [Entity Store] Add a server-side entity definition registry

  #295271·tommyers-elastic opened Oct 2, 2026Contributor·

  ·
  1

• [Dashboards] Remove underline from titles in edit mode

  backport:skipdesign-onlyrelease_note:skipv9.6.0
  #295270·andreadelrio opened Oct 2, 2026Contributor·2 of 8 tasks·

  ·
  2

• [Discover] Make URL state Scout suite single-role to avoid mid-test session race

  backport:skipflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #295269·kibanamachine opened Oct 2, 2026Contributor·

  ·
  1

  7

• [Nightshift] Replay the investigator's round to the reinforcement agent as tool messages

  backport:skiprelease_note:skipTeam:One Workflow
  #295268·vermapratyush opened Oct 2, 2026Contributor·1 of 8 tasks·

  ·
  4

• [Entity Analytics] Ignore alert index not available error on risk score calculation

  backport:versionrelease_note:skipTeam:Entity Analyticsv9.4.9v9.5.6
  #295266·tcalopes opened Oct 2, 2026Contributor·

  ·
  1

  3

  

• [Entity Analytics] Add sailpoint supervises maintainer

  backport:skiprelease_note:skipTeam:Cloud SecurityTeam:Entity Analytics
  #295263·alexreal1314 opened Oct 2, 2026Contributor·1 of 8 tasks·

  ·
  5

  

• [Chrome Navigation] Stop sidenav clickLink from trapping itself under the More mask

  flaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #295262·kibanamachine opened Oct 2, 2026Contributor·

  ·
  1

  7

• [Entity Analytics] Send how data view instead of just ID

  backport:versionrelease_note:fixTeam:Entity Analyticsv9.5.6
  #295261·tcalopes opened Oct 2, 2026Contributor·

  ·
  1

  4

  

• [Discover] Hold ES|QL fetches until the data source is resolved

  #295260·kertal opened Oct 2, 2026Member·

  ·
  1

• [Discover] Show ES|QL histogram while documents are loading

  #295256·kertal opened Oct 2, 2026Member·

  ·
  1

• [Chrome Next] Stop the sidenav "More" fallback from masking the link it clicks

  backport:skipflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #295255·kibanamachine opened Oct 2, 2026Contributor·

  ·
  1

  9

• [Cases][Workflows] Add cases.attachmentsDeleted workflow trigger

  backport:skiprelease_note:enhancementTeam:CasesTeam:One WorkflowTeam:Security Investigationsv9.6.0
  #295254·kelvtanv opened Oct 2, 2026Contributor·

  ·
  5

• [Security Investigations] Add action source to the cases activity analytics index

  backport:skiprelease_note:skipTeam:Security Investigationsv9.6.0
  #295253·christineweng opened Oct 2, 2026Contributor·3 of 8 tasks·

  ·
  2

  

• Update mime-types to v3 (main)

  backport:all-openrelease_note:skipTeam:Core
  #295252·elastic-renovate-prod[bot] opened Oct 2, 2026Bot·1 task·

  ·
  4

• [Lens] Verify the reference sub-function and field selections commit in FTR tests

  backport:skipflaky-fix-check:passedflaky-test-fixerrelease_note:skip
  #295251·kibanamachine opened Oct 2, 2026Contributor·

  ·
  1

  11

• [Security Solution][Endpoint] Add file.name field and Match (wildcard) operator to Blocklist

  backport:versionci:cloud-deployrelease_note:skipTeam:Defend Workflowsv9.6.0
  #295247·paul-tavares opened Oct 2, 2026Contributor·2 tasks done·

  ·
  3

  

• [Service Accounts] Support deleting service accounts

  backport:skipci:draft-checksFeature:Security/Authenticationrelease_note:skipTeam:Securityv9.6.0
  #295246·legrego opened Oct 2, 2026Member·

  ·
  2

• [dashboard] fix create visualization shows 'save and return' instead of save

  #295245·nreese opened Oct 2, 2026Contributor·

  ·
  1

  5

• [Metrics][Discover] Metrics session state scout tests

  backport:versionrelease_note:skipTeam:obs-signals-metricsv9.6.0
  #295244·justinkambic opened Oct 2, 2026Contributor·

  ·
  1

  3