This release also includes: Deprecations. Features and enhancements All

• Migrate from the deprecated github.com/docker/docker module to the github.com/moby/moby split modules. #50300 Beats
• Allow TLS certificate and CA hot-reload without restarting. #50444 Metricbeat
• Add data_stream field alongside aliases in cat_shards for the Metricbeat autoops_es module. Fixes All
• Upgrade Go to v1.26.4. Beats
• Disable TLS certificate hot-reload by default on patch branches. #51104
• Fix panic in the Elastic Agent V2 manager when reloading with no output unit. Elastic agent
• Fix Beat receivers adding .0 to whole floating point numbers when encoding to JSON. #14610 Filebeat
• Fix request tracer path validation for the cel, httpjson, http_endpoint, and entityanalytics inputs when Filebeat runs as an OTel receiver. #50581
• Fix goroutine leak in filestream task group. #50839 #50824
• Fix Okta entity analytics OAuth2 jwk_json token refresh failure. #50949
• Cache Okta OAuth2 token in cel and httpjson to avoid unnecessary JWT regeneration.
• Fix WebSocket reconnect loop ignoring context cancellation with infinite retries.
• Fix filestream registry leak on file renames.
• Fix WebSocket input hanging on shutdown when server stalls and keep_alive is disabled.
• Fix handling of User-Agent header when using OAuth 2.0 authentication.
• Guard event.original rename in Azure module ingest pipelines to prevent a "field already exists" error when the field is pre-populated. #51271 Libbeat
• Fix bulk indexing failures that could occur when using the Elasticsearch output with some non-Elastic backends. #49557
• Fix a data race in the add_cloud_metadata processor when fetching metadata from multiple providers concurrently. Metricbeat
• Clamp autoops_es *_latency_in_millis metrics to the sampling interval so a single-sample latency can never exceed the wall-clock time between samples. #50688 Osquerybeat
• Respect Osquery pack query platform filters for Live Query actions. #50585 Winlogbeat
• Treat RPC_S_UNKNOWN_IF (1717) as a recoverable error so Winlogbeat reopens the event log session instead of exiting on this transient RPC error.
• Fix Winlogbeat record ID gap retries reopening from stale checkpoints.
• Fix winlog XML rendering on Windows arm64.