Bump org.elasticsearch.client:elasticsearch-rest-client from 9.2.4 to 9.3.0 in /elasticsearch

[dependabot]

Bumps org.elasticsearch.client:elasticsearch-rest-client from 9.2.4 to 9.3.0.

Release notes

Sourced from org.elasticsearch.client:elasticsearch-rest-client's releases.

Elasticsearch 9.3.0

Downloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.3.0-release-notes

Elasticsearch 9.2.5

Downloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.2.5-release-notes

Commits

• 17b451d Mute org.elasticsearch.compute.operator.topn.TopNOomRaceTests testRace {repea...
• 5d290c9 Round sinh result in spec tests (#141403) (#141465)
• b08716e Mute org.elasticsearch.xpack.inference.integration.AuthorizationTaskExecutorI...
• e5d84bf Fix yamlCompatibility for unmaintained previous major (#141390) (#141449)
• d3dfce1 [Test] Set explicit heap size in DebPreservationTests to prevent oom-killed f...
• 87fc26e This reduces the default sampling rate for traces in ES and disables reportin...
• 20ea8d6 [CI] Enforce resolving mrjar jdk toolchains when building vm images (#141351)...
• e2b841b [CI] Fix flakyness in build artifacts collecting (#141313) (#141405)
• 1184017 [9.3] Add max_batch_size setting to EIS sparse service settings (#141185) (...
• 7378e2b rest-api-spec: fix knn_search visibility (#141356) (#141378)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Code Review

PR: Bump org.elasticsearch.client:elasticsearch-rest-client from 9.2.4 → 9.3.0

---

Code Quality

✅ No commented-out code — the change is clean.

✅ DRY / Meaningful names — not applicable to a version bump.

❌ Defect — Version mismatch between paired Elasticsearch libraries

elasticsearch/pom.xml lines 78 and 82:

<!-- Line ~78 -->
<artifactId>elasticsearch-java</artifactId>
<version>9.2.4</version>   ← still on 9.2.4

<!-- Line ~82 (changed in this PR) -->
<artifactId>elasticsearch-rest-client</artifactId>
<version>9.3.0</version>   ← bumped to 9.3.0

co.elastic.clients:elasticsearch-java and org.elasticsearch.client:elasticsearch-rest-client are tightly coupled — elasticsearch-java depends on elasticsearch-rest-client internally and they are released together as part of the same Elastic client SDK. Running them at mismatched versions (9.2.4 vs 9.3.0) can cause classpath conflicts, subtle API incompatibilities, or runtime errors. Both should be bumped together to 9.3.0.

Pre-existing issue (not introduced here, but worth noting): elasticsearch/pom.xml declares maven.compiler.source=17 in <properties> (line ~9) but the maven-compiler-plugin explicitly overrides it with <source>1.8</source> / <target>1.8</target> (lines ~20–21). This conflict predates this PR.

---

Testing

❌ No tests exist in the repository — there are no unit or integration tests at all. This predates this PR, but the lack of tests means there is no automated validation that the version bump doesn't break functionality. Test coverage is effectively 0%.

---

Documentation

❌ CHANGELOG.md not updated — dependency version bumps should be recorded in the changelog. The current CHANGELOG.md only has entries up to 1.0.0 (2023-07-06). An entry should be added, e.g.:

## [Unreleased]

### Changed
- Bump `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.4 to 9.3.0

---

Security

✅ No hardcoded credentials

✅ No .lic files or AQAAAD strings detected

✅ No sensitive data

---

Summary

#	Item	Status
1	elasticsearch-java not bumped alongside elasticsearch-rest-client	❌ Bug
2	CHANGELOG.md not updated	❌
3	No tests (pre-existing)	❌
4	No security issues	✅
5	No commented-out code introduced	✅

Primary concern: The version mismatch between elasticsearch-java (9.2.4) and elasticsearch-rest-client (9.3.0) is the most critical issue. Both artifacts should be updated to 9.3.0 in the same commit to avoid potential runtime incompatibilities.

Automated code review analyzing defects and coding standards