Merge branch 'main' into pkar/resolve-index-force-reconn

Author: pawankartik-elastic

docs/reference/query-languages/esql/_snippets/functions/layout/first.md

@@ -2,8 +2,8 @@
 * [`AVG`](../../functions-operators/aggregation-functions/avg.md)
 * [`COUNT`](../../functions-operators/aggregation-functions/count.md)
 * [`COUNT_DISTINCT`](../../functions-operators/aggregation-functions/count_distinct.md)
-% * [`FIRST`](../../functions-operators/aggregation-functions/first.md) {applies_to}`stack: preview` {applies_to}`serverless: preview`
-% * [`LAST`](../../functions-operators/aggregation-functions/last.md) {applies_to}`stack: preview` {applies_to}`serverless: preview`
+* [`FIRST`](../../functions-operators/aggregation-functions/first.md) {applies_to}`stack: ga 9.4` {applies_to}`serverless: preview`
+* [`LAST`](../../functions-operators/aggregation-functions/last.md) {applies_to}`stack: ga 9.4` {applies_to}`serverless: preview`
 * [`MAX`](../../functions-operators/aggregation-functions/max.md)
 * [`MEDIAN`](../../functions-operators/aggregation-functions/median.md)
 * [`MEDIAN_ABSOLUTE_DEVIATION`](../../functions-operators/aggregation-functions/median_absolute_deviation.md)

docs/reference/query-languages/esql/_snippets/functions/layout/last.md

@@ -155,8 +155,8 @@ toc:
                   - file: esql/functions-operators/aggregation-functions/values.md
                   - file: esql/functions-operators/aggregation-functions/variance.md
                   - file: esql/functions-operators/aggregation-functions/weighted_avg.md
-                  - hidden: esql/functions-operators/aggregation-functions/first.md
-                  - hidden: esql/functions-operators/aggregation-functions/last.md
+                  - file: esql/functions-operators/aggregation-functions/first.md
+                  - file: esql/functions-operators/aggregation-functions/last.md
               - file: esql/functions-operators/time-series-aggregation-functions.md
                 children:
                   - file: esql/functions-operators/time-series-aggregation-functions/absent_over_time.md

docs/reference/query-languages/esql/_snippets/lists/aggregation-functions.md

@@ -12,6 +12,13 @@ If you are migrating from a version prior to version 9.0, you must first upgrade
 
 % ## Next version [elasticsearch-nextversion-breaking-changes]
 
+## 9.2.7 [elasticsearch-9.2.7-breaking-changes]
+```{applies_to}
+stack: ga 9.2.7
+```
+
+There are no breaking changes associated with this release.
+
 ## 9.3.1 [elasticsearch-9.3.1-breaking-changes]
 
 There are no breaking changes associated with this release.

docs/reference/query-languages/toc.yml

@@ -0,0 +1,104 @@
+version: 9.2.7
+released: false
+generated: 2026-03-13T00:10:48.749483263Z
+changelogs:
+  - pr: 140049
+    summary: "[JupiterOne] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third party agent indices `kibana_system`"
+    area: Authorization
+    type: enhancement
+  - pr: 140700
+    summary: "Apm-server: update monitor mappings to include new TBS metrics"
+    area: Monitoring
+    type: enhancement
+    issues: []
+  - pr: 141919
+    summary: Fix `ClassCastException` when merging `TopHits` with mixed sort field types
+    area: Aggregations
+    type: bug
+    issues:
+      - 141714
+  - pr: 141974
+    summary: Fix cancellation race in `CancellableRateLimitedFluxIterator`
+    area: Snapshot/Restore
+    type: bug
+    issues: []
+  - pr: 142150
+    summary: Add circuit breaker for query construction to prevent OOM from automaton-based queries
+    area: Search
+    type: bug
+    issues: []
+  - pr: 142386
+    summary: Fix `QlIllegalArgumentException` with non-foldable date range queries
+    area: SQL
+    type: bug
+    issues:
+      - 137365
+  - pr: 142452
+    summary: Skip checkpoint query filter when `runtime_mappings` are present
+    area: Transform
+    type: enhancement
+    issues: []
+  - pr: 142648
+    summary: "[Sentinel One] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third-party agent indices in the `Kibana system` to support the unified alert data stream."
+    area: Authorization
+    type: enhancement
+  - pr: 142848
+    summary: Disable CAE in microsoft-graph-authz plugin
+    area: Security
+    type: bug
+    issues:
+      - 142743
+  - pr: 142856
+    summary: "[ML]Fix latest transforms disregarding updates when sort and sync fields are non-monotonic"
+    area: Transform
+    type: bug
+    issues:
+      - 90643
+  - pr: 142872
+    summary: Fix Duplicate ML Model Allocations on Same Node
+    area: Machine Learning
+    type: bug
+    issues: []
+  - pr: 142925
+    summary: Add timeout support for KNN searches in the DFS phase
+    area: Search
+    type: bug
+    issues: []
+  - pr: 143077
+    summary: Fixed stats API to use correct allocation count for `required_native_memory_bytes` calculation
+    area: Machine Learning
+    type: bug
+    issues:
+      - 107831
+  - pr: 143134
+    summary: Fix use-after-free in `SearchApplicationIndexService` buffer lifecycle
+    area: Security
+    type: bug
+    issues: []
+  - pr: 143173
+    summary: "Apm-data: explicit map of `timestamp.us` to long"
+    area: Data streams
+    type: bug
+    issues: []
+  - pr: 143325
+    summary: Promptly clean up CCS exchange sinks
+    area: ES|QL
+    type: bug
+    issues: []
+  - pr: 143556
+    summary: Bump Kiota Libs
+    area: Authentication
+    type: upgrade
+    issues: []
+  - pr: 143668
+    summary: ESQL - enable zero_terms_query option in MATCH function
+    area: ES|QL
+    type: bug
+    issues:
+      - 143070
+  - pr: 143733
+    summary: Fix nested object float arrays being mapped to dense vectors when they are mapped in dynamic template mappings
+    area: Search
+    type: enhancement
+    issues:
+      - 143732

docs/release-notes/breaking-changes.md

@@ -16,6 +16,13 @@ To give you insight into what deprecated features you’re using, {{es}}:
 
 % ## Next version [elasticsearch-nextversion-deprecations]
 
+
+## 9.2.7 [elasticsearch-9.2.7-deprecations]
+```{applies_to}
+stack: ga 9.2.7
+```
+There are no deprecations associated with this release.
+
 ## 9.3.1 [elasticsearch-9.3.1-deprecations]
 
 There are no deprecations associated with this release.

docs/release-notes/changelog-bundles/9.2.7.yml

@@ -20,6 +20,63 @@ To check for security updates, go to [Security announcements for the Elastic sta
 % ### Fixes [elasticsearch-next-fixes]
 % *
 
+## 9.2.7 [elasticsearch-9.2.7-release-notes]
+```{applies_to}
+stack: ga 9.2.7
+```
+
+### Features and enhancements [elasticsearch-9.2.7-features-enhancements]
+
+Authentication:
+* Bump Kiota Libs [#143556](https://github.com/elastic/elasticsearch/pull/143556)
+
+Authorization:
+* [JupiterOne] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third party agent indices `kibana_system` [#140049](https://github.com/elastic/elasticsearch/pull/140049)
+* [Sentinel One] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third-party agent indices in the `Kibana system` to support the unified alert data stream. [#142648](https://github.com/elastic/elasticsearch/pull/142648)
+
+Monitoring:
+* Apm-server: update monitor mappings to include new TBS metrics [#140700](https://github.com/elastic/elasticsearch/pull/140700)
+
+Search:
+* Fix nested object float arrays being mapped to dense vectors when they are mapped in dynamic template mappings [#143733](https://github.com/elastic/elasticsearch/pull/143733) (issue: [#143732](https://github.com/elastic/elasticsearch/issues/143732))
+
+Transform:
+* Skip checkpoint query filter when `runtime_mappings` are present [#142452](https://github.com/elastic/elasticsearch/pull/142452)
+
+
+### Fixes [elasticsearch-9.2.7-fixes]
+
+Aggregations:
+* Fix `ClassCastException` when merging `TopHits` with mixed sort field types [#141919](https://github.com/elastic/elasticsearch/pull/141919) (issue: [#141714](https://github.com/elastic/elasticsearch/issues/141714))
+
+Data streams:
+* Apm-data: explicit map of `timestamp.us` to long [#143173](https://github.com/elastic/elasticsearch/pull/143173)
+
+ES|QL:
+* ESQL - enable zero_terms_query option in MATCH function [#143668](https://github.com/elastic/elasticsearch/pull/143668) (issue: [#143070](https://github.com/elastic/elasticsearch/issues/143070))
+* Promptly clean up CCS exchange sinks [#143325](https://github.com/elastic/elasticsearch/pull/143325)
+
+Machine Learning:
+* Fix Duplicate ML Model Allocations on Same Node [#142872](https://github.com/elastic/elasticsearch/pull/142872)
+* Fixed stats API to use correct allocation count for `required_native_memory_bytes` calculation [#143077](https://github.com/elastic/elasticsearch/pull/143077) (issue: [#107831](https://github.com/elastic/elasticsearch/issues/107831))
+
+SQL:
+* Fix `QlIllegalArgumentException` with non-foldable date range queries [#142386](https://github.com/elastic/elasticsearch/pull/142386) (issue: [#137365](https://github.com/elastic/elasticsearch/issues/137365))
+
+Search:
+* Add circuit breaker for query construction to prevent OOM from automaton-based queries [#142150](https://github.com/elastic/elasticsearch/pull/142150)
+* Add timeout support for KNN searches in the DFS phase [#142925](https://github.com/elastic/elasticsearch/pull/142925)
+
+Security:
+* Disable CAE in microsoft-graph-authz plugin [#142848](https://github.com/elastic/elasticsearch/pull/142848) (issue: [#142743](https://github.com/elastic/elasticsearch/issues/142743))
+* Fix use-after-free in `SearchApplicationIndexService` buffer lifecycle [#143134](https://github.com/elastic/elasticsearch/pull/143134)
+
+Snapshot/Restore:
+* Fix cancellation race in `CancellableRateLimitedFluxIterator` [#141974](https://github.com/elastic/elasticsearch/pull/141974)
+
+Transform:
+* [ML]Fix latest transforms disregarding updates when sort and sync fields are non-monotonic [#142856](https://github.com/elastic/elasticsearch/pull/142856) (issue: [#90643](https://github.com/elastic/elasticsearch/issues/90643))
+
 
 ## 9.3.1 [elasticsearch-9.3.1-release-notes]
 
@@ -52,14 +109,14 @@ Snapshot/Restore:
 Vector Search:
 * [GPU] Handle segments too big for MSAI segment access [#141872](https://github.com/elastic/elasticsearch/pull/141872) (issue: [#141746](https://github.com/elastic/elasticsearch/issues/141746))
 
+
 ## 9.2.6 [elasticsearch-9.2.6-release-notes]
 
 ### Features and enhancements [elasticsearch-9.2.6-features-enhancements]
 
 Packaging:
 * Updating bundled jdk version to 25.0.2+10 [#142500](https://github.com/elastic/elasticsearch/pull/142500)
 
-
 ### Fixes [elasticsearch-9.2.6-fixes]
 
 Cluster Coordination:
@@ -93,14 +150,15 @@ Mapping:
 * Allow shadowing time series metrics and dimension in non time series indexing [#141549](https://github.com/elastic/elasticsearch/pull/141549) (issue: [#140882](https://github.com/elastic/elasticsearch/issues/140882))
 
 Ranking:
-* Fixing for NPE when there is no query specified for the standard retriever [#142479](https://github.com/elastic/elasticsearch/pull/142479) (issue: [#142336](https://github.com/elastic/elasticsearch/issues/142336))
 * Implement comprehensive top N parameter handling for text similarity reranker [#142039](https://github.com/elastic/elasticsearch/pull/142039)
+* Fixing for NPE when there is no query specified for the standard retriever [#142479](https://github.com/elastic/elasticsearch/pull/142479) (issue: [#142336](https://github.com/elastic/elasticsearch/issues/142336))
 
 Search:
 * Ensure Rewriteable.rewriteAndFetch listeners are not executed on transport threads [#141904](https://github.com/elastic/elasticsearch/pull/141904)
-* Fix Top Hits Incompatible Field Types on Sort Across Indices [#142046](https://github.com/elastic/elasticsearch/pull/142046) (issue: [#141906](https://github.com/elastic/elasticsearch/issues/141906))
 * Fix handling empty collapse construct [#141973](https://github.com/elastic/elasticsearch/pull/141973) (issue: [#139299](https://github.com/elastic/elasticsearch/issues/139299))
+* Fix Top Hits Incompatible Field Types on Sort Across Indices [#142046](https://github.com/elastic/elasticsearch/pull/142046) (issue: [#141906])
 * Prevent large CancelTasksRequest descriptions by truncating nodes and actions [#141815](https://github.com/elastic/elasticsearch/pull/141815)
+(https://github.com/elastic/elasticsearch/issues/141906))
 * Reduce cancellation check interval in `CancellableBulkScorer` for better responsiveness [#141747](https://github.com/elastic/elasticsearch/pull/141747)
 
 Snapshot/Restore:

docs/release-notes/deprecations.md

@@ -133,6 +133,9 @@ setup:
           body:
             settings:
               number_of_shards: 1
+  - do:
+      indices.refresh:
+        index: test_a_unmapped
   - do:
       search:
         index: test_a_unmapped

docs/release-notes/index.md

@@ -7,6 +7,9 @@ setup:
               properties:
                 ip:
                    type: ip
+  - do:
+      indices.refresh:
+        index: test
 
 ---
 "IP range":