April 2026 | Key features and security improvements delivered for elastic/elasticsearch. Focused on enabling bulk management operations and strengthening the security baseline while maintaining system stability.

Month 2026-03 monthly summary for elastic/elasticsearch: Implemented a critical security correctness fix by enforcing a restriction on queries against ESQL views with DLS/FLS, preventing misapplication of DLS/FLS and reducing user confusion. Commit f7e446185399de46ea51948b717de652ee45b5e6 (Don't allow querying views with DLS or FLS) delivered the change.

December 2025 monthly summary: SAML enhancements across Elasticsearch and its specification to improve traceability, security, and reliability, with a focus on client-facing error clarity and deterministic tests. Delivered in_response_to support in SAML responses, enhanced error handling for ID mismatch, stabilized SAML test suite by resolving threading and caching flakiness, and aligned spec with the implemented behavior. Result: improved client trust, easier debugging, and more reliable deployments.

For 2025-10, elastic/elasticsearch-specification delivered a targeted API improvement: added available_processors (ap) to the CAT Nodes API node details, with TypeScript aliasing and spec updates to reflect the new field. Core commit: 7cce59c367edf03797b96276b7aad2ef5d2fb377 ("available_processors field in CAT Nodes (#5450)"). Major bugs fixed: none reported this month in this repository. Impact: improves per-node CPU visibility for capacity planning and automation; reduces manual checks; enhances consistency across API, TypeScript types, and docs.