Merge branch 'main' into issue-262-new-lambda-dataset

Author: agithomas

.buildkite/pull-requests.json

@@ -13,7 +13,7 @@
  "always_trigger_comment_regex": "^(?:(?:buildkite\\W+)?(?:build|test)\\W+(?:this|it))|^/test$|^/test benchmark fullreport$",
  "skip_ci_labels": [],
  "skip_target_branches": [],
- "skip_ci_on_only_changed": ["^.github/workflows/", "^.github/dependabot.yml", "^.github/ISSUE_TEMPLATE/", "^docs/"],
+ "skip_ci_on_only_changed": ["^.github/workflows/", "^.github/dependabot.yml$", "^.github/ISSUE_TEMPLATE/", "^docs/", "^catalog-info.yaml$", "^.buildkite/pull-requests.json$"],
  "always_require_ci_on_changed": []
  },
  {

.buildkite/scripts/common.sh

@@ -746,7 +746,7 @@ is_pr_affected() {
  # Example:
  # https://buildkite.com/elastic/integrations/builds/25606
  # https://github.com/elastic/integrations/pull/13810
- if git diff --name-only "${commit_merge}" "${to}" | grep -E -v '^(packages/|\.github/(CODEOWNERS|ISSUE_TEMPLATE|PULL_REQUEST_TEMPLATE)|README\.md|docs/)' > /dev/null; then
+ if git diff --name-only "${commit_merge}" "${to}" | grep -E -v '^(packages/|\.github/(CODEOWNERS|ISSUE_TEMPLATE|PULL_REQUEST_TEMPLATE)|README\.md|docs/|catalog-info\.yaml|\.buildkite/pull-requests\.json)' > /dev/null; then
  echo "[${package}] PR is affected: found non-package files"
  return 0
  fi

.github/CODEOWNERS

@@ -192,6 +192,7 @@
 /packages/dga @elastic/ml-ui @elastic/sec-applied-ml
 /packages/digital_guardian @elastic/security-service-integrations
 /packages/docker @elastic/obs-ds-hosted-services
+/packages/docker_otel @elastic/obs-ds-hosted-services
 /packages/elastic_agent @elastic/elastic-agent
 /packages/elastic_connectors @elastic/search-extract-and-transform
 /packages/elastic_package_registry @elastic/ecosystem

.github/ISSUE_TEMPLATE/integration_bug.yml

@@ -131,6 +131,7 @@ body:
  - Defend for Containers [cloud_defend]
  - Digital Guardian [digital_guardian]
  - Docker [docker]
+ - Docker OpenTelemetry Assets [docker_otel]
  - Domain Generation Algorithm Detection [dga]
  - DomainTools Real Time Unified Feeds [ti_domaintools]
  - EclecticIQ [ti_eclecticiq]

.github/ISSUE_TEMPLATE/integration_feature_request.yml

@@ -131,6 +131,7 @@ body:
  - Defend for Containers [cloud_defend]
  - Digital Guardian [digital_guardian]
  - Docker [docker]
+ - Docker OpenTelemetry Assets [docker_otel]
  - Domain Generation Algorithm Detection [dga]
  - DomainTools Real Time Unified Feeds [ti_domaintools]
  - EclecticIQ [ti_eclecticiq]

go.mod

@@ -5,7 +5,7 @@ go 1.24.2
 require (
 github.com/Masterminds/semver/v3 v3.3.1
 github.com/blang/semver v3.5.1+incompatible
-github.com/cli/go-gh/v2 v2.12.0
+github.com/cli/go-gh/v2 v2.12.1
 github.com/elastic/elastic-package v0.111.0
 github.com/elastic/go-licenser v0.4.2
 github.com/elastic/go-ucfg v0.8.8

go.sum

@@ -102,8 +102,8 @@ github.com/charmbracelet/x/cellbuf v0.0.13 h1:/KBBKHuVRbq1lYx5BzEHBAFBP8VcQzJejZ
 github.com/charmbracelet/x/cellbuf v0.0.13/go.mod h1:xe0nKWGd3eJgtqZRaN9RjMtK7xUYchjzPr7q6kcvCCs=
 github.com/charmbracelet/x/term v0.2.1 h1:AQeHeLZ1OqSXhrAWpYUtZyX1T3zVxfpZuEQMIQaGIAQ=
 github.com/charmbracelet/x/term v0.2.1/go.mod h1:oQ4enTYFV7QN4m0i9mzHrViD7TQKvNEEkHUMCmsxdUg=
-github.com/cli/go-gh/v2 v2.12.0 h1:PIurZ13fXbWDbr2//6ws4g4zDbryO+iDuTpiHgiV+6k=
-github.com/cli/go-gh/v2 v2.12.0/go.mod h1:+5aXmEOJsH9fc9mBHfincDwnS02j2AIA/DsTH0Bk5uw=
+github.com/cli/go-gh/v2 v2.12.1 h1:SVt1/afj5FRAythyMV3WJKaUfDNsxXTIe7arZbwTWKA=
+github.com/cli/go-gh/v2 v2.12.1/go.mod h1:+5aXmEOJsH9fc9mBHfincDwnS02j2AIA/DsTH0Bk5uw=
 github.com/cli/safeexec v1.0.0 h1:0VngyaIyqACHdcMNWfo6+KdUYnqEr2Sg+bSP1pdF+dI=
 github.com/cli/safeexec v1.0.0/go.mod h1:Z/D4tTN8Vs5gXYHDCbaM1S/anmEDnJb1iW0+EJ5zx3Q=
 github.com/cli/shurcooL-graphql v0.0.4 h1:6MogPnQJLjKkaXPyGqPRXOI2qCsQdqNfUY1QSJu2GuY=

packages/auth0/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.22.0"
+ changes:
+ - description: Standardize user fields processing across integrations.
+ type: enhancement
+ link: https://github.com/elastic/integrations/pull/14092
 - version: "1.21.2"
  changes:
  - description: Fix `event.type` and `event.category` classification of failed authentication events.

packages/auth0/data_stream/logs/_dev/test/pipeline/test-login-failure.json-expected.json

@@ -83,7 +83,7 @@
  "os": {
  "name": "Ubuntu"
  },
- "version": "93.0."
+ "version": "93.0"
  }
  },
  {
@@ -170,7 +170,7 @@
  "os": {
  "name": "Ubuntu"
  },
- "version": "93.0."
+ "version": "93.0"
  }
  },
  {
@@ -310,6 +310,12 @@
  "network": {
  "type": "ipv4"
  },
+ "related": {
+ "user": [
+ "neo",
+ "neo@gmail.com"
+ ]
+ },
  "source": {
  "geo": {
  "city_name": "London",
@@ -326,7 +332,9 @@
  "ip": "81.2.69.143"
  },
  "user": {
- "name": "neo@gmail.com"
+ "domain": "gmail.com",
+ "email": "neo@gmail.com",
+ "name": "neo"
  },
  "user_agent": {
  "device": {
@@ -337,7 +345,7 @@
  "os": {
  "name": "Ubuntu"
  },
- "version": "93.0."
+ "version": "93.0"
  }
  },
  {
@@ -385,6 +393,13 @@
  "network": {
  "type": "ipv4"
  },
+ "related": {
+ "user": [
+ "auth0|61823277a44a21007221a59a",
+ "new",
+ "new@test.com"
+ ]
+ },
  "source": {
  "geo": {
  "city_name": "London",
@@ -401,8 +416,10 @@
  "ip": "81.2.69.143"
  },
  "user": {
+ "domain": "test.com",
+ "email": "new@test.com",
  "id": "auth0|61823277a44a21007221a59a",
- "name": "new@test.com"
+ "name": "new"
  },
  "user_agent": {
  "device": {