[pull] master from DataDog:master

.codecov.yml

@@ -766,6 +766,10 @@ coverage:
         target: 75
         flags:
         - cert_manager
+      checkpoint_harmony_endpoint:
+        target: 75
+        flags:
+        - checkpoint_harmony_endpoint
       datadog_csi_driver:
         target: 75
         flags:
@@ -937,6 +941,11 @@ flags:
     paths:
     - cert_manager/datadog_checks/cert_manager
     - cert_manager/tests
+  checkpoint_harmony_endpoint:
+    carryforward: true
+    paths:
+    - checkpoint_harmony_endpoint/datadog_checks/checkpoint_harmony_endpoint
+    - checkpoint_harmony_endpoint/tests
   cilium:
     carryforward: true
     paths:

.github/CODEOWNERS

@@ -620,6 +620,16 @@ plaid/assets/logs/                                                  @DataDog/saa
 /beyondtrust_password_safe/manifest.json                             @DataDog/saas-integrations @DataDog/agent-integrations @DataDog/documentation
 /beyondtrust_password_safe/assets/logs/                              @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-integrations-reviewers
 
+/cloudgen_firewall/                                                  @DataDog/agent-integrations
+/cloudgen_firewall/*.md                                              @DataDog/agent-integrations @DataDog/documentation
+/cloudgen_firewall/manifest.json                                     @DataDog/agent-integrations @DataDog/documentation
+/cloudgen_firewall/assets/logs/                                      @DataDog/agent-integrations @DataDog/documentation @DataDog/logs-backend @DataDog/logs-core
+
+/checkpoint_harmony_endpoint/                                        @DataDog/agent-integrations
+/checkpoint_harmony_endpoint/*.md                                    @DataDog/agent-integrations @DataDog/documentation
+/checkpoint_harmony_endpoint/manifest.json                           @DataDog/agent-integrations @DataDog/documentation
+/checkpoint_harmony_endpoint/assets/logs/                            @DataDog/agent-integrations @DataDog/documentation @DataDog/logs-backend @DataDog/logs-core
+
 # To keep Security up-to-date with changes to the signing tool.
 /datadog_checks_dev/datadog_checks/dev/tooling/signing.py             @DataDog/agent-integrations
 # As well as the secure downloader.

.github/workflows/config/labeler.yml

@@ -125,6 +125,8 @@ integration/cert_manager:
 - cert_manager/**/*
 integration/checkpoint_harmony_email_and_collaboration:
 - checkpoint_harmony_email_and_collaboration/**/*
+integration/checkpoint_harmony_endpoint:
+- checkpoint_harmony_endpoint/**/*
 integration/checkpoint_quantum_firewall:
 - checkpoint_quantum_firewall/**/*
 integration/cilium:

active_directory/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 4.3.0 / 2025-09-05
+
+***Added***:
+
+* Update dependencies ([#21217](https://github.com/DataDog/integrations-core/pull/21217))
+
 ## 4.2.0 / 2025-04-09 / Agent 7.66.0
 
 ***Added***:

active_directory/datadog_checks/active_directory/__about__.py

@@ -2,4 +2,4 @@
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
 
-__version__ = '4.2.0'
+__version__ = '4.3.0'

amazon_msk/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 7.1.0 / 2025-09-05
+
+***Added***:
+
+* Update dependencies ([#21217](https://github.com/DataDog/integrations-core/pull/21217))
+
 ## 7.0.1 / 2025-08-07 / Agent 7.70.0
 
 ***Fixed***:

amazon_msk/datadog_checks/amazon_msk/__about__.py

@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2019-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '7.0.1'
+__version__ = '7.1.0'

aspdotnet/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 4.3.0 / 2025-09-05
+
+***Added***:
+
+* Update dependencies ([#21217](https://github.com/DataDog/integrations-core/pull/21217))
+
 ## 4.2.0 / 2025-04-17 / Agent 7.66.0
 
 ***Added***:

aspdotnet/datadog_checks/aspdotnet/__about__.py

@@ -2,4 +2,4 @@
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
 
-__version__ = '4.2.0'
+__version__ = '4.3.0'

bentoml/CHANGELOG.md

@@ -2,3 +2,8 @@
 
 <!-- towncrier release notes start -->
 
+## 1.0.0 / 2025-09-05
+
+***Added***:
+
+* Add BentoML integration ([#21232](https://github.com/DataDog/integrations-core/pull/21232))

bentoml/datadog_checks/bentoml/__about__.py

@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2025-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '0.0.1'
+__version__ = '1.0.0'

cacti/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 4.1.0 / 2025-09-05
+
+***Added***:
+
+* Update dependencies ([#21217](https://github.com/DataDog/integrations-core/pull/21217))
+
 ## 4.0.0 / 2024-10-04 / Agent 7.59.0
 
 ***Removed***:

cacti/datadog_checks/cacti/__about__.py

@@ -2,4 +2,4 @@
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
 
-__version__ = '4.0.0'
+__version__ = '4.1.0'

checkpoint_harmony_endpoint/CHANGELOG.md

@@ -0,0 +1,4 @@
+# CHANGELOG - Checkpoint Harmony Endpoint
+
+<!-- towncrier release notes start -->
+

checkpoint_harmony_endpoint/README.md

@@ -0,0 +1,98 @@
+# Agent Check: Checkpoint Harmony Endpoint
+
+## Overview
+
+Checkpoint Harmony Endpoint is a next-generation endpoint security solution designed to prevent, detect, and respond to threats on user devices, such as desktops, laptops, and servers. This integration monitors [Checkpoint Harmony Endpoint][1].
+
+## Setup
+1. Collecting logs is disabled by default in the Datadog Agent. Enable it in the `datadog.yaml` file with:
+
+    ```yaml
+      logs_enabled: true
+    ```
+2. Add this configuration block to your `checkpoint_harmony_endpoint.d/conf.yaml` file to start collecting your checkpoint_harmony_endpoint logs:
+
+    ```yaml
+      logs:
+        - type: file
+          path:  /var/log/checkpoint.log
+          source: checkpoint_harmony_endpoint
+          service: <SERVICE_NAME>
+    ```
+
+    Change the `path` and `service` parameter values for your environment.
+
+3. [Restart the Agent][4].
+
+### Installation
+
+The checkpoint harmony endpoint check is included in the [Datadog Agent][2] package.
+
+### Prerequisites
+
+- Administrative access to Checkpoint Harmony Endpoint - Gaia installed on your server.
+- The Datadog Agent installed and running (on a server or container that can receive syslog messages).
+- Network Access between the endpoint and the Datadog Agent, over port 514, unless you're using a custom port value. Enable log exporter in the Smart Console for log streaming.
+- Syslog support enabled in the Datadog Agent (with a TCP or UDP  listener configured).
+
+### Validation
+
+1. Confirm the Datadog Agent is listening on the correct port (`514` in the following examples)
+   ```sh
+   sudo netstat -tunlp | grep 514
+   ```
+
+   If using TCP and UDP listeners, use the following command:
+   ```sh
+   sudo lsof -i :514
+   ```
+2. Confirm logs are reaching the Agent from the correct log source.
+   ```sh
+   tail -f /var/log/datadog/syslog.log
+   ```
+**Note**: If the file doesn't exist, verify that syslog logs are being written by your configuration.
+
+3. Use the tcpdump command to confirm network traffic. On the Datadog Agent host:
+   ```sh
+   sudo tcpdump -i any port 514
+   ```
+   After running this command, you should see traffic from the Checkpoint endpoint client's IP address. If you don't see any such traffic, check the firewall rules between Checkpoint Endpoint and the Datadog Agent. Confirm the correct protocol (UDP or TCP) is being used on both sides.
+
+4. Check the Datadog [Live Tail][7] in Datadog for logs from the source and service you defined in the `conf.yaml` file.
+5. Create a test log on the harmony client by triggering an event.
+6. Check for tags or facets to use for better filtering based on the required data.
+
+### Metrics
+
+The Checkpoint Harmony Endpoint integration does not include any metrics.
+
+### Log collection
+## Data Collected
+To help monitor endpoint data collected by Datadog, the Checkpoint Harmony Endpoint logs contain key information of the endpoint client, such as:
+- event timestamp
+- detected_by
+- client IPs and ports
+- the protocol used
+- firewall actions (allow/deny)
+- matched rule name
+- user identity (if available)
+- log type (for example, forensic or malware)
+- action used
+- device name
+- status of the operation
+
+### Events
+
+The checkpoint harmony endpoint integration includes log events such as attacks and malware hits.
+
+## Troubleshooting
+
+Need help? Contact [Datadog support][3].
+
+[1]: https://www.checkpoint.com/harmony/endpoint/
+[2]: https://app.datadoghq.com/account/settings/agent/latest
+[3]: https://docs.datadoghq.com/help/
+[4]: https://docs.datadoghq.com/agent/guide/agent-commands/#start-stop-and-restart-the-agent
+[5]: https://app.datadoghq.com/integrations?search=checkpoint_harmony_endpoint
+[6]: https://github.com/DataDog/integrations-core/blob/master/checkpoint_harmony_endpoint/assets/service_checks.json
+[7]: https://app.datadoghq.com/logs/livetail

checkpoint_harmony_endpoint/assets/configuration/spec.yaml

@@ -0,0 +1,10 @@
+name: Checkpoint Harmony Endpoint
+files:
+- name: checkpoint_harmony_endpoint.yaml
+  options:
+  - template: init_config
+    options:
+    - template: init_config/default
+  - template: instances
+    options:
+    - template: instances/default