Fleet Server release notes

Stack

Review the changes, fixes, and more in each version of Fleet Server.

To check for security updates, go to Security announcements for the Elastic Stack.

• Reset trace links on bulk items when returning to pool. #5317

• Restore connection limiter. #5372

  Restore connection level limiter to prevent OOM incidents. This limiter is used in addition to the request-level throttle so that when our in-flight requests reaches max_connections, a 429 is returned. If the total connections the server uses is over max_connections*1.1 the server drops the connection before the TLS handshake.

• Build fleet-server as fully static binary to restore OS matrix compatibility. #5392 #5262

• Fix 503 handling in enrollment. #5232 #5197
• Remove extra ES search when preparing agent policy. #5283

No new features, enhancements, or fixes.

• Fix upgrade details download_rate as string handling. #5198 #5214 #5183 #5176 #5164

• Add ability for enrollment to take an agent ID. #4290 #4226

• Add migrate-action. #4786

  Added new MIGRATE action type for moving agent to different cluster.

• Clear agent.upgrade_attempts when upgrade is complete. #4528

  The new AutomaticAgentUpgradeTask Kibana task sets the upgrade_attempts property in agents it upgrades. This property is used to track upgrade retries and should therefore be cleared when the upgrade is complete.

• Make pbkdf2 settings validation FIPS compliant. #4542

• Update Go to v1.24.3. #4891

• Add version metadata to version command output. #4820

  Add commit, buildtime, and FIPS distribution indicators to output of version command. Add fips-distribution attribute to initial startup log.

• Add rollback attribute to upgrade actions in preparation for enabling upgrade rollbacks in a future release. #4838

• Upgrade golang.org/x/net to v0.34.0 and golang.org/x/crypto to v0.32.0. #4405

• Fix host parsing in Elasticsearch output diagnostics. #4765

• Redact output in bootstrap config logs. #4775

• Mutex protection for remote bulker config. #4776

  Use existing remote bulker mutex to control access to remote bulker configs.

• Enable dead code elimination. #4784

  Add grpcnotrace build tags and ensure DCE (dead code elimination) is enabled. Reduce binary size by 34%

• Include the base error for json decode error responses. #5069

• Reset trace links on bulk items when returning to pool. #5317

• Restore connection limiter. #5372

  Restore connection level limiter to prevent OOM incidents. This limiter is used in addition to the request-level throttle so that once our in-flight requests reaches max_connections a 429 is returned, but if the total connections the server uses is over max_connections*1.1 the server drops the connection before the TLS handshake.

• Build fleet-server as fully static binary to restore OS matrix compatibility. #5392 #5262

• Fix 503 handling in enrollment. #5232 #5197
• Remove extra ES search when preparing agent policy. #5283

• Fix upgrade details download_rate as string handling. #5217 #5227 #5176 #5164

• Include the base error for JSON decode error responses. #5069

• Update Go version to v1.24.4. #5025

• Update Go version to v1.24.3. #4891

• Fix host parsing in Elasticsearch output diagnostics. #4765

• Redact output in bootstrap config logs. #4775

• Mutex protection for remote bulker config. #4776

  Use existing remote bulker mutex to control access to remote bulker configs.

• Enable dead code elimination. #4784

  Add grpcnotrace build tags and ensure DCE (dead code elimination) is enabled. Reduce binary size by 34%

• New setting allowing automatic deletion of unenrolled agents in Fleet settings. #195544
• Improves filtering and visibility of Uninstalled and Orphaned agents in Fleet, by differentiating them from Offline agents. #205815
• Introduces air-gapped configuration for bundled packages in Fleet. #202435
• Updates removed parameters of the Fleet -> Logstash output configurations. #210115
• Updates the maximum supported package version in Fleet. #196675
• Replaces the use of context.TODO and context.Background in logger function calls for most Fleet Server use cases. #4168 and #3087
• Refactor the Fleet Server API constructor to use functional opts instead of a long list of pointers. #4169 and #3823
• Removes the deprecated policy_throttle configuration setting in favour of the newer policy-limit for Fleet Server. #4288
• Removes old bundled.yaml from oas, fixed tags. #194788
• Adds the ability for Elastic Agent to enroll using a specific ID. #4290 and #4226

• Fixes a validation error that occurs on multi-text input fields in Fleet. #205768
• Adds a context timeout to the bulker flush in Fleet Server so it times out if it takes more time than the deadline. #3986
• Removes a race condition that may occur when remote Elasticsearch outputs are used in Fleet Server. #4171
• Uses the chi/middleware.Throttle package to track in-flight requests and return a 429 response when the limit is reached in Fleet Server. #4402 and #4400