## elastic/elastic-agent — v9.5.1…v9.5.2

_49 commits._

### Features
- **Add Heartbeat process-runtime parity guards (#16131) (#16199)** (9ab1091)
- **Add staging packaging test (#16111) (#16146)** (967ff30)
- **Add Elastic Agent 9.5.1 release notes (#16082)** (1fc44f1)
- **[mage] Add docker instance provisioner for integration tests (#15909) (#16133)** (42bca7c)
- **Add ESS e2e for OTel heartbeat private-location monitors (#15977) (#16115)** (dadac52)

### Fixes
- **fix(test): retry agent ID lookup in k8sStepForEachAgentID after pod restart (#16032) (#16043)** (ec370ee)
- **fix(windows): trust current Agent process user SID in HasStrictExecPerms (#16173) (#16175)** (41c8797)
- **fix(windows): local privilege escalation via binary tampering on unprivileged installs (#16058) (#16153)** (b2d9b20)
- **fix(deps): update tooling-test (9.5) (#16061)** (c070123)
- **fix(deps): update golang-x (9.5) (#16128)** (1b9fc46)
- **Fix Windows FIPS upgrade failure caused by mismatched directory name (#16065) (#16086)** (ec84dcd)
- **Fix flaky TestAuditdCorrectBinaries (#16052) (#16090)** (76ed545)
- **fix glob to exclude elastic-agent-metrics.ndjson ingestion (#15992) (#16084)** (7cf292e)
- **bump github.com/kardianos/service v1.2.4 -> v1.3.0 and fix systemd template (#15976) (#16046)** (231ffe8)
- **fix(test): remove redundant embedded field selectors in k8s standalone tests (#16033) (#16041)** (ebaadc2)
- **Fix getting current user failing on Windows when no profile directory is present (#15628) (#16005)** (8ea7f45)

### Backend
- **[9.5][Automation] Update elastic/beats to 8f4fe1e5dec0 (#16228)** (abae0c4)
- **Update golang-x (9.5) (#16220)** (92fc15c)
- **Adjust the parameters of elasticsearch output in otel/translate to work best with slabqueue and elasticsearchexporter (#15923) (#16204)** (e915aaa)
- **[9.5][Automation] Update elastic/beats to 98fba7791314 (#16216)** (02aa947)
- **[9.5][Automation] Bump VM Image version to 1786755708 (#16211)** (c156a59)
- **[Automation] Bump Golang version to 1.26.6 (#16203) (#16205)** (58051fb)
- **[9.5][Automation] Update elastic/beats to dc6b95c03756 (#16196)** (2b5f298)
- **[mage] Load .package-version by default only for select targets (#16169) (#16185)** (4615549)
- **[9.5][Automation] Update elastic/beats to 3880356e9273 (#16181)** (b1d525f)
- **[9.5][Automation] Update versions 9.5.1-33282ac6 (#16184)** (d23b012)
- **Verify provisioning ESS variables to buildkite agents (#16166) (#16170)** (02f617b)
- **[beatreceiver] Fallback to process runtime if kafka + kerberos is enabled (#16165)** (1d3c468)
- **[9.5][Automation] Update versions 9.5.1-33282ac6 (#16162)** (5276355)
- **[9.5][Automation] Update elastic/beats to 77136f9aa3ee (#16157)** (75b360f)
- **Update golang-x (#16150)** (c91c64d)
- **revert: OTel as a default runtime for heartbeat (#16132) (#16139)** (4bc24a7)
- **[Release] Update version to 9.5.2 (#16081)** (f702d71)
- **update docs version 9.5.1 (#16080)** (d632467)
- **[9.5][Automation] Update elastic/beats to 982b90a09665 (#16123)** (2a08ddd)
- **[9.5][Automation] Update versions 9.5.1-598033eb (#16126)** (f72ae31)
- **[9.5] (backport #15767) refactor: use `beats/pkg/autodiscover` instead of `elastic-agent-autodiscover` (#15776)** (4bdd47e)
- **[9.5] (backport #15987) Stop Fleet Server containers from re-enrolling on every restart (#16020)** (8cfbb36)
- **[9.5][Automation] Bump VM Image version to 1785546083 (#15936)** (a19f000)
- **[9.5] Replace post-dependabot.yml with post-dependency-update.yml from main (#16100)** (842f96e)
- **[9.5][Automation] Update versions 9.5.0-ee7f4bda (#16012)** (60159be)
- **Drop replace for otel collector core packages (#16053) (#16057)** (73b55a1)
- **[9.5][Automation] Update elastic/beats to a320f1aa0045 (#16069)** (a9d6a1f)
- **Disable reading from .package-version for Helm Chart release builds (#16051) (#16101)** (2ad1828)
- **[9.5] (backport #15924) [ci] Prevent Agent version leaking when triggering serverless Beats tests (#15972)** (21a5cda)
- **Update Beats to match Otel dependency version (#16056)** (718856b)
- **[9.5] (backport #15874) chore: update OTel Collector dependencies to v0.157.0/v1.63.0 (#16024)** (e90efd6)

### Chore
- **chore(synthetics): bump nodejs to 22.23.2 and npm to 12.0.2 (#16072) (#16077)** (9ea522b)
- **chore(deps): update module golang.org/x/tools to v0.48.0 (9.5) (#15997)** (0640357)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/elastic/elastic-agent?utm_source=github-action)._