chore(deps): update elastic (9.5)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/elastic/elastic-agent-libs	require	patch	v0.46.2 → v0.46.3
github.com/elastic/elastic-agent-system-metrics	require	patch	v0.14.4 → v0.14.5
github.com/elastic/go-elasticsearch/v8	require	patch	v8.19.6 → v8.19.7
github.com/elastic/go-json-schema-generate	indirect	digest	ec19b88 → c708d18
github.com/elastic/go-ucfg	require	patch	v0.9.1 → v0.9.2
go.elastic.co/go-licence-detector	indirect	minor	v0.7.0 → v0.10.0

---

Release Notes

elastic/elastic-agent-libs (github.com/elastic/elastic-agent-libs)

v0.46.3

Compare Source

What's Changed

• Allow to configure golangci-lint version with dotfile by @​belimawr in #​439

Full Changelog: elastic/elastic-agent-libs@v0.46.2...v0.46.3

elastic/elastic-agent-system-metrics (github.com/elastic/elastic-agent-system-metrics)

v0.14.5

Compare Source

What's Changed

• chore: align Go and linter with Beats repository by @​andrzej-stencel in #​295
• security: add permissions block to workflows by @​elastic-vault-github-plugin-prod[bot] in #​296
• Rename ingest-fp team reference to Streams by @​jlind23 in #​298
• [metrics/system/process] on linux prevent duplicate pids by @​leehinman in #​300

New Contributors

• @​andrzej-stencel made their first contribution in #​295
• @​elastic-vault-github-plugin-prod[bot] made their first contribution in #​296

Full Changelog: elastic/elastic-agent-system-metrics@v0.14.4...v0.14.5

elastic/go-elasticsearch (github.com/elastic/go-elasticsearch/v8)

v8.19.7

Compare Source

Features

• Typed API: Update 8.19 client to spec c799312 (#​1530) (8f2cb5e)

elastic/go-ucfg (github.com/elastic/go-ucfg)

v0.9.2

Compare Source

What's Changed

• Bump the github-actions group across 2 directories with 1 update by @​dependabot[bot] in #​228
• Bump the github-actions group across 2 directories with 1 update by @​dependabot[bot] in #​230
• Fix panic with empty name and negative index by @​lorienhu in #​232
• Update CHANGELOG.md for v0.9.2 release by @​lorienhu in #​233

New Contributors

• @​lorienhu made their first contribution in #​232

Full Changelog: elastic/go-ucfg@v0.9.1...v0.9.2

elastic/go-licence-detector (go.elastic.co/go-licence-detector)

v0.10.0

Compare Source

v0.9.1

Compare Source

v0.9.0

Compare Source

v0.8.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elastic-renovate-prod]

ℹ️ Artifact update notice

File name: dev-tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
github.com/cyphar/filepath-securejoin	v0.2.5 -> v0.4.1
github.com/google/licenseclassifier	v0.0.0-20200402202327-879cb1424de0 -> v0.0.0-20250213175939-b5d1a3369749
github.com/sergi/go-diff	v1.1.0 -> v1.4.0
golang.org/x/mod	v0.24.0 -> v0.29.0
golang.org/x/sync	v0.14.0 -> v0.17.0
golang.org/x/tools	v0.33.0 -> v0.37.0

File name: testing/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/elastic/go-ucfg	v0.9.1 -> v0.9.2

[github-actions]

TL;DR

check:ci is failing due to a code-generation/tooling dependency regression: generated model timestamp fields are becoming time.Time, but internal/pkg/model/ext.go still treats them as RFC3339 strings. Immediate action: revert or isolate the go-json-schema-generate upgrade in this PR (or update generated-model handling and commit the required code changes together).

Remediation

• Remove (or pin back) the github.com/elastic/go-json-schema-generate update in dev-tools/go.mod for this PR, then re-run CI.
• If keeping that upgrade, regenerate models and update internal/pkg/model/ext.go to match the new generated timestamp types, then run mage check:ci.

Investigation details

Root Cause

check:ci runs Generate before Check.Fix (magefile.go:625-628), and generation uses the schema tool from dev-tools/go.mod (main.go:5). In this PR, that tool dependency was upgraded in dev-tools/go.mod (from github.com/elastic/go-json-schema-generate ... ec19b88... to ... c708d18...).

The failing compile errors show PolicyLeader/Server.Timestamp as time.Time, but helper methods in internal/pkg/model/ext.go still assume string:

• internal/pkg/model/ext.go:15,25 call time.Parse(..., m.Timestamp) (expects string)
• internal/pkg/model/ext.go:20,30 assign t.Format(...) (string) into m.Timestamp
• internal/pkg/model/ext.go:57,70 initialize RetiredAt with "" where generated type is now time.Time

This is consistent with a generator output/type-shape change introduced by the tooling dependency bump.

Evidence

• Build: https://buildkite.com/elastic/fleet-server/builds/16349
• Job/step: :white_check_mark: Run check-ci (.buildkite/scripts/check_ci.sh → mage check:ci)
• Key log excerpt:

internal/pkg/model/ext.go:15:38: cannot use m.Timestamp (variable of struct type time.Time) as string value in argument to time.Parse
internal/pkg/model/ext.go:20:16: cannot use t.Format(time.RFC3339Nano) (value of type string) as time.Time value in assignment
internal/pkg/model/ext.go:57:15: cannot use "" (untyped string constant) as time.Time value in struct literal
Error: running "go fix ./..." failed with exit code 1

Verification

• Flaky-test issue check: no matching flaky-test issue found for this failure signature.

Follow-up

If dependency grouping is desired, consider splitting generator/toolchain updates into their own Renovate PR so schema/type-shape changes are reviewed with required code updates together.

---

What is this? | From workflow: PR Buildkite Detective

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

[elastic-renovate-prod]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.