ssi: lower format_version to the minimum supporting necessary features

brijesh-elastic · web-flow · commit 34a7ece515bf · 2025-10-10T10:14:05.000+05:30
Many integrations use the package-spec `format_version: 3.4.0`. However, as mentioned in the Elastic Package Guide[1], they will not be available in Kibana 9.0.x. Therefore, these integrations have been downgraded to a 3.X.X version, except for those that require functionality available in package-spec 3.4.0 [1] https://github.com/elastic/elastic-package/blob/main/docs/howto/format_version.md
diff --git a/packages/abnormal_security/changelog.yml b/packages/abnormal_security/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.11.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.11.0"
   changes:
     - description: Improve documentation to align with new guidelines.
diff --git a/packages/abnormal_security/manifest.yml b/packages/abnormal_security/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: abnormal_security
 title: Abnormal AI
-version: "1.11.0"
+version: "1.11.1"
 description: Collect logs from Abnormal AI with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/armis/changelog.yml b/packages/armis/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.4.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "0.4.0"
   changes:
     - description: Improve documentation to align with new guidelines.
diff --git a/packages/armis/manifest.yml b/packages/armis/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: armis
 title: Armis
-version: "0.4.0"
+version: "0.4.1"
 description: Collect logs from Armis with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/authentik/changelog.yml b/packages/authentik/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.6.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.6.0"
   changes:
     - description: Improve documentation to align with new guidelines.
diff --git a/packages/authentik/manifest.yml b/packages/authentik/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: authentik
 title: authentik
-version: "1.6.0"
+version: "1.6.1"
 description: Collect logs from authentik with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/beyondinsight_password_safe/changelog.yml b/packages/beyondinsight_password_safe/changelog.yml
@@ -1,3 +1,8 @@
+- version: "0.12.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "0.12.0"
   changes:
     - description: Enhanced documentation with API information, use cases, and improved data stream descriptions for better user understanding.
diff --git a/packages/beyondinsight_password_safe/manifest.yml b/packages/beyondinsight_password_safe/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: beyondinsight_password_safe
 title: BeyondInsight and Password Safe
-version: "0.12.0"
+version: "0.12.1"
 source:
   license: "Elastic-2.0"
 description: Ingest privileged access management (PAM) data from BeyondTrust's BeyondInsight PAM Reporting Platform and Password Safe, using Elastic Agent.
diff --git a/packages/beyondtrust_pra/changelog.yml b/packages/beyondtrust_pra/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.3.2"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "0.3.1"
   changes:
     - description: Fixed the API request format by updating the `start_time` query parameter to use Unix epoch time in seconds.
diff --git a/packages/beyondtrust_pra/manifest.yml b/packages/beyondtrust_pra/manifest.yml
@@ -1,9 +1,9 @@
 name: beyondtrust_pra
 title: "BeyondTrust PRA"
-version: 0.3.1
+version: 0.3.2
 description: "Collect logs from BeyondTrust PRA with Elastic Agent."
 type: integration
-format_version: 3.4.0
+format_version: 3.3.2
 categories:
   - security
   # Added iam category as BeyondTrust PRA provides privileged access management functionality
diff --git a/packages/claroty_ctd/changelog.yml b/packages/claroty_ctd/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.1.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.1.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/claroty_ctd/manifest.yml b/packages/claroty_ctd/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: claroty_ctd
 title: Claroty CTD
-version: "1.1.0"
+version: "1.1.1"
 description: Collect logs from Claroty CTD using Elastic Agent.
 type: integration
 categories:
diff --git a/packages/claroty_xdome/changelog.yml b/packages/claroty_xdome/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.0.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.0.0"
   changes:
     - description: Release package as GA.
diff --git a/packages/claroty_xdome/manifest.yml b/packages/claroty_xdome/manifest.yml
@@ -1,9 +1,9 @@
 name: claroty_xdome
 title: "Claroty xDome"
-version: 1.0.0
+version: 1.0.1
 description: "Collect logs from Claroty xDome with Elastic Agent."
 type: integration
-format_version: 3.4.0
+format_version: 3.3.2
 categories:
   - security
   - vulnerability_management
diff --git a/packages/cyberark_epm/changelog.yml b/packages/cyberark_epm/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.2"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.2.1"
   changes:
     - description: 'Enhanced error handling in the CEL program for API calls to prevent "no such key: version" errors by ensuring proper propagation of the `version` configuration during failures.'
diff --git a/packages/cyberark_epm/manifest.yml b/packages/cyberark_epm/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: cyberark_epm
 title: CyberArk EPM
-version: "1.2.1"
+version: "1.2.2"
 description: Collect logs from CyberArk EPM with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/extrahop/changelog.yml b/packages/extrahop/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.2.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: '0.2.0'
   changes:
     - description: Add Investigation data-stream.
diff --git a/packages/extrahop/manifest.yml b/packages/extrahop/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: extrahop
 title: ExtraHop
-version: 0.2.0
+version: 0.2.1
 description: Collect logs from ExtraHop RevealX 360 with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/first_epss/changelog.yml b/packages/first_epss/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.1.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.1.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/first_epss/manifest.yml b/packages/first_epss/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: first_epss
 title: First EPSS
-version: "1.1.0"
+version: "1.1.1"
 description: Collect exploit prediction score data from the First EPSS API with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/google_secops/changelog.yml b/packages/google_secops/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.2"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.2.1"
   changes:
     - description: Generalize install instructions and fix typo.
diff --git a/packages/google_secops/manifest.yml b/packages/google_secops/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: google_secops
 title: Google SecOps
-version: 1.2.1
+version: 1.2.2
 description: Collect alerts from Google SecOps with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/imperva_cloud_waf/changelog.yml b/packages/imperva_cloud_waf/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.13.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.13.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/imperva_cloud_waf/manifest.yml b/packages/imperva_cloud_waf/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: imperva_cloud_waf
 title: Imperva Cloud WAF
-version: "1.13.0"
+version: "1.13.1"
 description: Collect logs from Imperva Cloud WAF with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/microsoft_sentinel/changelog.yml b/packages/microsoft_sentinel/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.2"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.2.1"
   changes:
     - description: Generalize install instructions.
diff --git a/packages/microsoft_sentinel/manifest.yml b/packages/microsoft_sentinel/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: microsoft_sentinel
 title: Microsoft Sentinel
-version: "1.2.1"
+version: "1.2.2"
 description: Collect logs from Microsoft Sentinel with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/nozomi_networks/changelog.yml b/packages/nozomi_networks/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.2.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "0.2.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/nozomi_networks/manifest.yml b/packages/nozomi_networks/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: nozomi_networks
 title: Nozomi Networks
-version: 0.2.0
+version: 0.2.1
 description: Collect logs from Nozomi Networks with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/proofpoint_itm/changelog.yml b/packages/proofpoint_itm/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.0.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.0.0"
   changes:
     - description: Release package as GA.
diff --git a/packages/proofpoint_itm/manifest.yml b/packages/proofpoint_itm/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: proofpoint_itm
 title: Proofpoint ITM
-version: "1.0.0"
+version: "1.0.1"
 description: Collect logs from Proofpoint ITM using Elastic Agent.
 type: integration
 categories:
diff --git a/packages/qualys_gav/changelog.yml b/packages/qualys_gav/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.2.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: 0.2.0
   changes:
     - description: Fix mapping for cloud_provider field.
diff --git a/packages/qualys_gav/manifest.yml b/packages/qualys_gav/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: qualys_gav
 title: Qualys Global AssetView
-version: 0.2.0
+version: 0.2.1
 description: Collect logs from Qualys Global AssetView with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/servicenow/changelog.yml b/packages/servicenow/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.1.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.1.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/servicenow/manifest.yml b/packages/servicenow/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: servicenow
 title: "ServiceNow"
-version: "1.1.0"
+version: "1.1.1"
 description: "Collect logs from ServiceNow with Elastic Agent."
 type: integration
 categories:
diff --git a/packages/splunk/changelog.yml b/packages/splunk/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.0.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.0.0"
   changes:
     - description: Release package as GA.
diff --git a/packages/splunk/manifest.yml b/packages/splunk/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: splunk
 title: Splunk
-version: "1.0.0"
+version: "1.0.1"
 source:
   license: "Elastic-2.0"
 description: Collect logs from Splunk with Elastic Agent.
diff --git a/packages/spycloud/changelog.yml b/packages/spycloud/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.5.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.5.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/spycloud/manifest.yml b/packages/spycloud/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 3.4.0
+format_version: 3.3.2
 name: spycloud
 title: SpyCloud Enterprise Protection
-version: "1.5.0"
+version: "1.5.1"
 description: Collect data from SpyCloud Enterprise Protection with Elastic Agent.
 type: integration
 categories:
diff --git a/packages/sublime_security/changelog.yml b/packages/sublime_security/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.11.1"
+  changes:
+    - description: Downgrade the `format_version` to the minimum version that supports all the necessary features for the package.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15602
 - version: "1.11.0"
   changes:
     - description: Use `terminate` processor instead of `fail` processor to handle agent errors.
diff --git a/packages/sublime_security/manifest.yml b/packages/sublime_security/manifest.yml
diff --git a/packages/ti_custom/changelog.yml b/packages/ti_custom/changelog.yml
diff --git a/packages/ti_custom/manifest.yml b/packages/ti_custom/manifest.yml
diff --git a/packages/ti_domaintools/changelog.yml b/packages/ti_domaintools/changelog.yml
diff --git a/packages/ti_domaintools/manifest.yml b/packages/ti_domaintools/manifest.yml
diff --git a/packages/ti_google_threat_intelligence/changelog.yml b/packages/ti_google_threat_intelligence/changelog.yml
diff --git a/packages/ti_google_threat_intelligence/manifest.yml b/packages/ti_google_threat_intelligence/manifest.yml
diff --git a/packages/ti_greynoise/changelog.yml b/packages/ti_greynoise/changelog.yml
diff --git a/packages/ti_greynoise/manifest.yml b/packages/ti_greynoise/manifest.yml
diff --git a/packages/ti_recordedfuture/changelog.yml b/packages/ti_recordedfuture/changelog.yml
diff --git a/packages/ti_recordedfuture/manifest.yml b/packages/ti_recordedfuture/manifest.yml
diff --git a/packages/vectra_rux/changelog.yml b/packages/vectra_rux/changelog.yml
diff --git a/packages/vectra_rux/manifest.yml b/packages/vectra_rux/manifest.yml
diff --git a/packages/wiz/changelog.yml b/packages/wiz/changelog.yml
diff --git a/packages/wiz/manifest.yml b/packages/wiz/manifest.yml
