[pull] master from DataDog:master

.builders/images/linux-aarch64/Dockerfile

@@ -36,11 +36,11 @@ RUN yum install -y perl-IPC-Cmd perl-CPANPLUS perl-core && \
  ldconfig
 
 # Compile and install Python 3
-ENV PYTHON3_VERSION=3.13.11
+ENV PYTHON3_VERSION=3.13.12
 RUN yum install -y libffi-devel && \
  DOWNLOAD_URL="https://python.org/ftp/python/{{version}}/Python-{{version}}.tgz" \
  VERSION="${PYTHON3_VERSION}" \
- SHA256="03cfedbe06ce21bc44ce09245e091a77f2fee9ec9be5c52069048a181300b202" \
+ SHA256="12e7cb170ad2d1a69aee96a1cc7fc8de5b1e97a2bdac51683a3db016ec9a2996" \
  RELATIVE_PATH="Python-{{version}}" \
  bash install-from-source.sh \
  --prefix=/opt/python/${PYTHON3_VERSION} \

.builders/images/linux-x86_64/Dockerfile

@@ -35,11 +35,11 @@ RUN yum install -y perl-IPC-Cmd perl-CPANPLUS perl-core && \
  ldconfig
 
 # Compile and install Python 3
-ENV PYTHON3_VERSION=3.13.11
+ENV PYTHON3_VERSION=3.13.12
 RUN yum install -y libffi-devel && \
  DOWNLOAD_URL="https://python.org/ftp/python/{{version}}/Python-{{version}}.tgz" \
  VERSION="${PYTHON3_VERSION}" \
- SHA256="03cfedbe06ce21bc44ce09245e091a77f2fee9ec9be5c52069048a181300b202" \
+ SHA256="12e7cb170ad2d1a69aee96a1cc7fc8de5b1e97a2bdac51683a3db016ec9a2996" \
  RELATIVE_PATH="Python-{{version}}" \
  bash install-from-source.sh --prefix=/opt/python/${PYTHON3_VERSION} --with-ensurepip=yes --enable-ipv6 --with-dbmliborder=
 ENV PATH="/opt/python/${PYTHON3_VERSION}/bin:${PATH}"

.builders/images/windows-x86_64/Dockerfile

@@ -85,11 +85,11 @@ RUN Get-RemoteFile `
     Approve-File -Path $($Env:USERPROFILE + '\.cargo\bin\rustc.exe') -Hash $Env:RUSTC_HASH
 
 # Install Python 3
-ENV PYTHON_VERSION="3.13.11"
+ENV PYTHON_VERSION="3.13.12"
 RUN Get-RemoteFile `
       -Uri https://www.python.org/ftp/python/$Env:PYTHON_VERSION/python-$Env:PYTHON_VERSION-amd64.exe `
       -Path python-$Env:PYTHON_VERSION-amd64.exe `
-      -Hash '30d4654b3eac7ddfdf2682db4c8dcb490f3055f4f33c6906d6b828f680152101'; `
+      -Hash '96159fcb523ae404b707186a75b4104ee23851e476a5e838e14584cf1e03f981'; `
     Start-Process -Wait python-$Env:PYTHON_VERSION-amd64.exe -ArgumentList '/quiet', 'InstallAllUsers=1'; `
     Remove-Item python-$Env:PYTHON_VERSION-amd64.exe; `
     & 'C:\Program Files\Python313\python.exe' -m pip install --no-warn-script-location --upgrade pip; `

.github/workflows/resolve-build-deps.yaml

@@ -209,10 +209,10 @@ jobs:
       # Use PBS as suggested by: https://github.com/DataDog/integrations-core/pull/21692#pullrequestreview-3358660684
       # PBS stands for "Python Build Standalone": https://astral.sh/blog/python-build-standalone
       env:
-        PYTHON_PATCH: 11
-        PBS_RELEASE: 20251217
-        PBS_SHA256__aarch64: 324b24ebd50c16cf3a88360fc0e85ced38b04abcf580bc73cf95def4852e0c29
-        PBS_SHA256__x86_64: 70f76d40609999213b44a37e947dc0fe0b975f48d206f8931992892870bd4026
+        PYTHON_PATCH: 12
+        PBS_RELEASE: 20260203
+        PBS_SHA256__aarch64: 146d011e9246790659d86c729a9bb37dc423545d0ed8e542ba1dfe93700aa0f2
+        PBS_SHA256__x86_64: 5fb24d5a82f248e985bdc01f504f40d4150e321809b0bbeee7441cedd6dac227
       run: |
         set -u
         curl -fsSL -o pbs.tgz "https://github.com/astral-sh/python-build-standalone/releases/download/$PBS_RELEASE/cpython-$PYTHON_VERSION.$PYTHON_PATCH+$PBS_RELEASE-${{ matrix.job.arch }}-apple-darwin-install_only_stripped.tar.gz"

active_directory/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Active Directory
+fleet_configurable: true
 files:
 - name: active_directory.yaml
   options:

aerospike/assets/configuration/spec.yaml

@@ -1,11 +1,13 @@
 name: Aerospike
+fleet_configurable: true
 files:
 - name: aerospike.yaml
   options:
   - template: init_config
     options:
     - template: init_config/openmetrics
     - name: mappings
+      fleet_configurable: true
       hidden: true
       legacy: true
       description: |
@@ -371,20 +373,23 @@ files:
         openmetrics_endpoint.required: false
         openmetrics_endpoint.value.example: http://127.0.0.1:9145/metrics
     - name: host
+      fleet_configurable: true
       hidden: true
       legacy: true
       description: Aerospike host to connect to.
       value:
         type: string
         example: localhost
     - name: port
+      fleet_configurable: true
       hidden: true
       legacy: true
       description: Aerospike port to connect to.
       value:
         type: integer
         example: 3000
     - name: tls_name
+      fleet_configurable: true
       hidden: true
       legacy: true
       value:
@@ -432,6 +437,7 @@ files:
           - migrate_rx_objs
           - migrate_tx_objs
     - name: namespaces
+      fleet_configurable: true
       hidden: true
       legacy: true
       description: All namespaces are collected by default. If you want to collect specific namespaces specify them here.
@@ -443,6 +449,7 @@ files:
           - example_namespace
           - another_example_namespace
     - name: datacenters
+      fleet_configurable: true
       hidden: true
       legacy: true
       description: |

ambari/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Ambari
+fleet_configurable: true
 files:
 - name: ambari.yaml
   options:
@@ -19,6 +20,7 @@ files:
   - template: instances
     options:
     - name: url
+      fleet_configurable: true
       required: true
       description: The URL of the Ambari Server, include http:// or https://
       value:

appgate_sdp/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Appgate SDP
+fleet_configurable: true
 files:
 - name: appgate_sdp.yaml
   options:

arangodb/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: ArangoDB
+fleet_configurable: true
 files:
 - name: arangodb.yaml
   options:

argo_rollouts/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Argo Rollouts
+fleet_configurable: true
 files:
 - name: argo_rollouts.yaml
   options:

aspdotnet/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: ASP.NET
+fleet_configurable: true
 files:
 - name: aspdotnet.yaml
   options:

avi_vantage/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Avi Vantage
+fleet_configurable: true
 
 files:
 - name: avi_vantage.yaml
@@ -9,12 +10,14 @@ files:
   - template: instances
     options:
     - name: avi_controller_url
+      fleet_configurable: true
       required: true
       description: The Controller base API URL
       value:
         example: https://<AVI_CONTROLLER_HOSTNAME>/
         type: string
     - name: entities
+      fleet_configurable: true
       required: false
       description: |
         List of entity types to collect metrics from. Valid options are
@@ -32,6 +35,7 @@ files:
           type: string
           enum: *avi_entities
     - name: tenants
+      fleet_configurable: true
       required: false
       description: |
         A list of tenant names to collect metrics for. If empty, it defaults to the admin tenant.

aws_neuron/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: AWS Neuron
+fleet_configurable: true
 files:
 - name: aws_neuron.yaml
   options:

azure_iot_edge/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Azure IoT Edge
+fleet_configurable: true
 files:
   - name: azure_iot_edge.yaml
     options:
@@ -10,13 +11,15 @@ files:
           - name: edge_hub_prometheus_url
             description: |
               The URL where Edge Hub metrics are exposed via Prometheus.
+            fleet_configurable: true
             required: true
             value:
               type: string
               example: http://edgeHub:9600/metrics
           - name: edge_agent_prometheus_url
             description: |
               The URL where Edge Agent metrics are exposed via Prometheus.
+            fleet_configurable: true
             required: true
             value:
               type: string

barracuda_secure_edge/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: barracuda_secure_edge
+fleet_configurable: true
 files:
 - name: barracuda_secure_edge.yaml
   options:

bentoml/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: BentoML
+fleet_configurable: true
 files:
 - name: bentoml.yaml
   options:

beyondtrust_password_safe/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: BeyondTrust Password Safe
+fleet_configurable: true
 files:
 - name: beyondtrust_password_safe.yaml
   options:

boundary/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Boundary
+fleet_configurable: true
 files:
 - name: boundary.yaml
   options:
@@ -8,6 +9,7 @@ files:
   - template: instances
     options:
     - name: health_endpoint
+      fleet_configurable: true
       required: true
       description: |
         The Boundary controller's health endpoint.

btrfs/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Btrfs
+fleet_configurable: true
 files:
   - name: btrfs.yaml
     options:

cacti/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Cacti
+fleet_configurable: true
 files:
   - name: cacti.yaml
     options:
@@ -8,6 +9,7 @@ files:
       - template: instances
         options:
           - name: mysql_host
+            fleet_configurable: true
             required: true
             description: URL of your MySQL database
             value:
@@ -19,12 +21,14 @@ files:
               example: 3306
               type: integer
           - name: mysql_user
+            fleet_configurable: true
             required: true
             description: User to use to connect to MySQL in order to gather metrics.
             value:
               type: string
           - name: mysql_password
             description: Password to use to connect to MySQL in order to gather metrics.
+            fleet_configurable: true
             secret: true
             value:
               type: string
@@ -34,6 +38,7 @@ files:
               example: cacti
               type: string
           - name: rrd_path
+            fleet_configurable: true
             required: true
             description: |
               The Cacti checks requires access to the Cacti DB in MySQL and to the RRD

calico/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Calico
+fleet_configurable: true
 files:
   - name: calico.yaml
     options:

celery/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Celery
+fleet_configurable: true
 files:
 - name: celery.yaml
   options:

ceph/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Ceph
+fleet_configurable: true
 files:
   - name: ceph.yaml
     options:
@@ -9,11 +10,13 @@ files:
         options:
           - name: ceph_cmd
             description: Ceph command to use.
+            fleet_configurable: true
             value:
               example: /usr/bin/ceph
               type: string
           - name: ceph_cluster
             description: Cluster ceph to query.
+            fleet_configurable: true
             value:
               example: ceph
               type: string
@@ -24,6 +27,7 @@ files:
               dd-agent ALL=(ALL) NOPASSWD:/usr/bin/ceph
 
               to your sudoers file, and uncomment the option below:
+            fleet_configurable: true
             value:
               type: boolean
               example: false
@@ -33,6 +37,7 @@ files:
               It collects by default the health check listed below.
               The list of health checks is available here: http://docs.ceph.com/docs/master/rados/operations/health-checks/
               The health checks are only available if you're running ceph luminous or later
+            fleet_configurable: true
             value:
               type: array
               items:

checkpoint_harmony_endpoint/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: Checkpoint Harmony Endpoint
+fleet_configurable: true
 files:
 - name: checkpoint_harmony_endpoint.yaml
   options:

checkpoint_quantum_firewall/assets/configuration/spec.yaml

@@ -1,4 +1,5 @@
 name: checkpoint-quantum-firewall
+fleet_configurable: true
 files:
   - name: checkpoint_quantum_firewall.yaml
     options: