ConnectionMaster · pull · Mar 19, 2026 · Mar 19, 2026 · Mar 19, 2026 · Mar 19, 2026
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -20,7 +20,7 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
+        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
         with:
             comment-summary-in-pr: on-failure
             fail-on-severity: high
diff --git a/.github/workflows/resolve-build-deps.yaml b/.github/workflows/resolve-build-deps.yaml
@@ -144,7 +144,7 @@ jobs:
       run: bash .github/actions/setup-test-target-scripts/src/ensure-docker.sh
 
     - name: Log in to GitHub Packages
-      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
       with:
         registry: ghcr.io
         username: ${{ github.actor }}

diff --git a/.github/workflows/slapr.yml b/.github/workflows/slapr.yml
@@ -17,7 +17,7 @@ jobs:
           - SLACK_CHANNEL_ID_AGENT_INTEGRATIONS_REVIEWS
           - SLACK_CHANNEL_ID_INFRA_INTEGRATIONS
     steps:
-    - uses: DataDog/slapr@f4337a20eedf6b840f6d85ee2399f1ee86f109d7 # Not versioned, latest commit in master as of 2025-05-08
+    - uses: DataDog/slapr@4b5efe2ce585e45898bb88c4fa303e226e8199e4 # Not versioned, latest commit in master as of 2025-05-08
       env:
         GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
         SLACK_CHANNEL_ID: "${{ secrets[matrix.slack_channel_variable] }}"

diff --git a/.github/workflows/test-build-devcontainer.yml b/.github/workflows/test-build-devcontainer.yml
@@ -13,13 +13,13 @@ jobs:
     steps:
       -
         name: Set up QEMU
-        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       -
         name: Build and push
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           push: false
           file: .devcontainer/Dockerfile
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
@@ -18,6 +18,7 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         fetch-depth: 0
+        persist-credentials: false
     - name: Set up Python
       uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       with:
@@ -112,24 +113,32 @@ jobs:
         actual_pr="${{ steps.cpr.outputs.pull-request-number }}"
         branch="${{ steps.cpr.outputs.pull-request-branch }}"
 
-        # Resolve the actual base branch from the PR (avoids hardcoding 'master')
         base_branch=$(gh pr view "$actual_pr" --json baseRefName -q '.baseRefName')
 
         git fetch origin "$branch" "$base_branch"
         git checkout "$branch"
 
-        git diff "origin/$base_branch"...HEAD --name-only --diff-filter=A | grep 'changelog\.d/' | while read -r file; do
+        git diff "origin/$base_branch"...HEAD --name-only --diff-filter=A \
+          | grep 'changelog\.d/' | while read -r file; do
           ext="${file##*.}"
           dir=$(dirname "$file")
           git mv "$file" "$dir/$actual_pr.$ext" 2>/dev/null || true
         done
 
-        git diff --cached --quiet && echo "renamed=false" >> "$GITHUB_OUTPUT" || echo "renamed=true" >> "$GITHUB_OUTPUT"
-    - name: Fix changelog PR numbers
+        if git diff --cached --quiet; then
+          echo "renamed=false" >> "$GITHUB_OUTPUT"
+        else
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config user.name "github-actions[bot]"
+          git commit -m "Fix changelog PR numbers"
+          echo "renamed=true" >> "$GITHUB_OUTPUT"
+          echo "commit=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+        fi
+    - name: Push changelog fix
       if: steps.rename.outputs.renamed == 'true'
-      uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+      uses: DataDog/commit-headless@05d7b7ee023e2c7d01c47832d420c2503cd416f3 # action/v2.0.3
       with:
         token: ${{ steps.token-generator.outputs.token }}
-        commit-message: Fix changelog PR numbers
         branch: ${{ steps.cpr.outputs.pull-request-branch }}
-        base: master
+        command: push
+        commits: ${{ steps.rename.outputs.commit }}
diff --git a/LICENSE-3rdparty.csv b/LICENSE-3rdparty.csv
@@ -35,7 +35,7 @@ lazy-loader,PyPI,BSD-3-Clause,"Copyright (c) 2022--2023, Scientific Python proje
 ldap3,PyPI,LGPL-3.0-only,Copyright 2013 - 2020 Giovanni Cannata
 lxml,PyPI,BSD-3-Clause,Copyright (c) 2004 Infrae. All rights reserved.
 lz4,PyPI,BSD-3-Clause,"Copyright (c) 2012-2013, Steeve Morin"
-mmh3,PyPI,CC0-1.0,Copyright (c) 2011-2025 Hajime Senuma
+mmh3,PyPI,CC0-1.0,Copyright (c) 2011-2026 Hajime Senuma
 oauthlib,PyPI,BSD-3-Clause,Copyright (c) The OAuthlib Community
 openstacksdk,PyPI,Apache-2.0,Copyright OpenStack <openstack-discuss@lists.openstack.org>
 orjson,PyPI,Apache-2.0,

diff --git a/aerospike/CHANGELOG.md b/aerospike/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 5.3.1 / 2026-03-18
+
+***Fixed***:
+
+* Collect secondary index data using sindex-list and sindex-stat because the sindex command is deprecated. ([#22510](https://github.com/DataDog/integrations-core/pull/22510))
+
 ## 5.3.0 / 2026-02-19 / Agent 7.77.0
 
 ***Added***:

diff --git a/aerospike/changelog.d/22510.fixed b/aerospike/changelog.d/22510.fixed
diff --git a/aerospike/datadog_checks/aerospike/__about__.py b/aerospike/datadog_checks/aerospike/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2019-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '5.3.0'
+__version__ = '5.3.1'
diff --git a/agent_requirements.in b/agent_requirements.in
@@ -1,13 +1,13 @@
 aerospike==7.1.1; sys_platform != 'win32' and sys_platform != 'darwin'
 aws-msk-iam-sasl-signer-python==1.0.2
 aws-requests-auth==0.4.3
-azure-identity==1.25.2
+azure-identity==1.25.3
 beautifulsoup4==4.14.3
 binary==1.0.2
-boto3==1.42.54
-botocore==1.42.54
-cachetools==7.0.1
-clickhouse-connect==0.11.0
+boto3==1.42.71
+botocore==1.42.71
+cachetools==7.0.5
+clickhouse-connect==0.14.1
 cm-client==45.0.4
 confluent-kafka==2.13.2
 cryptography==46.0.5
@@ -19,23 +19,23 @@ hazelcast-python-client==5.6.0
 in-toto==2.0.0
 jellyfish==1.2.1
 kubernetes==35.0.0
-lazy-loader==0.4
+lazy-loader==0.5
 ldap3==2.9.1
 lxml==6.0.1
 lz4==4.4.5
-mmh3==5.2.0
+mmh3==5.2.1
 oauthlib==3.3.1
 openstacksdk==4.10.0
 orjson==3.11.7
 packaging==26.0
 paramiko==4.0.0
 prometheus-client==0.24.1
-protobuf==6.33.5
+protobuf==7.34.0
 psutil==6.0.0
 psycopg[c,pool]==3.3.3
 pyasn1==0.4.8
 pydantic==2.12.5
-pyjwt==2.11.0
+pyjwt==2.12.1
 pymongo[srv]==4.8.0; python_version >= '3.9'
 pymqi==1.12.13
 pymysql==1.1.2
@@ -50,7 +50,7 @@ python3-gearman==0.1.0; sys_platform != 'win32'
 pyvmomi==8.0.3.0.1
 pywin32==311; sys_platform == 'win32'
 pyyaml==6.0.3
-redis==7.2.0
+redis==7.3.0
 requests-kerberos==0.15.0
 requests-ntlm==1.3.0
 requests-oauthlib==2.0.0
@@ -67,4 +67,4 @@ supervisor==4.3.0
 tuf==4.0.0
 urllib3==2.6.3
 vertica-python==1.4.0
-wrapt==2.1.1
+wrapt==2.1.2
diff --git a/amazon_msk/CHANGELOG.md b/amazon_msk/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 7.5.0 / 2026-03-18
+
+***Added***:
+
+* Update dependencies ([#22707](https://github.com/DataDog/integrations-core/pull/22707))
+
 ## 7.4.0 / 2026-02-19 / Agent 7.77.0
 
 ***Added***:

diff --git a/amazon_msk/changelog.d/22707.added → amazon_msk/changelog.d/22978.added b/amazon_msk/changelog.d/22707.added → amazon_msk/changelog.d/22978.added
diff --git a/amazon_msk/datadog_checks/amazon_msk/__about__.py b/amazon_msk/datadog_checks/amazon_msk/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2019-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '7.4.0'
+__version__ = '7.5.0'
diff --git a/amazon_msk/pyproject.toml b/amazon_msk/pyproject.toml
@@ -36,7 +36,7 @@ license = "BSD-3-Clause"
 
 [project.optional-dependencies]
 deps = [
-    "boto3==1.42.54",
+    "boto3==1.42.71",
 ]
 
 [project.urls]

diff --git a/apache/assets/configuration/spec.yaml b/apache/assets/configuration/spec.yaml
@@ -13,7 +13,7 @@ files:
       fleet_configurable: true
       required: true
       display_priority: 2
-      description: Status url of your Apache server.
+      description: Status URL of your Apache server.
       formats: ["url"]
       value:
         example: http://localhost/server-status?auto

diff --git a/apache/changelog.d/22967.fixed b/apache/changelog.d/22967.fixed
@@ -0,0 +1 @@
+Polish fleet-configurable spec descriptions.
diff --git a/apache/datadog_checks/apache/data/conf.yaml.example b/apache/datadog_checks/apache/data/conf.yaml.example
@@ -46,7 +46,7 @@ init_config:
 instances:
 
     ## @param apache_status_url - string - required
-    ## Status url of your Apache server.
+    ## Status URL of your Apache server.
     #
   - apache_status_url: http://localhost/server-status?auto
 

diff --git a/celery/CHANGELOG.md b/celery/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 2.4.0 / 2026-03-18
+
+***Added***:
+
+* Add logs config to Celery integration ([#22881](https://github.com/DataDog/integrations-core/pull/22881))
+
 ## 2.3.0 / 2026-02-19 / Agent 7.77.0
 
 ***Added***:

diff --git a/celery/changelog.d/22881.added b/celery/changelog.d/22881.added
diff --git a/celery/datadog_checks/celery/__about__.py b/celery/datadog_checks/celery/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2025-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '2.3.0'
+__version__ = '2.4.0'
diff --git a/ceph/assets/configuration/spec.yaml b/ceph/assets/configuration/spec.yaml
@@ -15,7 +15,7 @@ files:
               example: /usr/bin/ceph
               type: string
           - name: ceph_cluster
-            description: Cluster ceph to query.
+            description: Ceph cluster to query.
             fleet_configurable: true
             value:
               example: ceph
@@ -34,9 +34,9 @@ files:
           - name: collect_service_check_for
             description: |
               If you wish to customize the health checks sent as a service check, uncomment and edit the list below.
-              It collects by default the health check listed below.
+              It collects by default the health checks listed below.
               The list of health checks is available here: http://docs.ceph.com/docs/master/rados/operations/health-checks/
-              The health checks are only available if you're running ceph luminous or later
+              The health checks are only available if you're running Ceph Luminous or later
             fleet_configurable: true
             value:
               type: array

diff --git a/ceph/changelog.d/22967.fixed b/ceph/changelog.d/22967.fixed
@@ -0,0 +1 @@
+Polish fleet-configurable spec descriptions.
diff --git a/ceph/datadog_checks/ceph/data/conf.yaml.example b/ceph/datadog_checks/ceph/data/conf.yaml.example
@@ -20,7 +20,7 @@ instances:
     # ceph_cmd: /usr/bin/ceph
 
     ## @param ceph_cluster - string - optional - default: ceph
-    ## Cluster ceph to query.
+    ## Ceph cluster to query.
     #
     # ceph_cluster: ceph
 
@@ -35,9 +35,9 @@ instances:
 
     ## @param collect_service_check_for - list of strings - optional
     ## If you wish to customize the health checks sent as a service check, uncomment and edit the list below.
-    ## It collects by default the health check listed below.
+    ## It collects by default the health checks listed below.
     ## The list of health checks is available here: http://docs.ceph.com/docs/master/rados/operations/health-checks/
-    ## The health checks are only available if you're running ceph luminous or later
+    ## The health checks are only available if you're running Ceph Luminous or later
     #
     # collect_service_check_for:
     #   - OSD_DOWN

diff --git a/checkpoint_quantum_firewall/CHANGELOG.md b/checkpoint_quantum_firewall/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 1.3.0 / 2026-03-18
+
+***Added***:
+
+* Add ndm_syslog:true tag to log configuration to enable NDM device syslog correlation. ([#22674](https://github.com/DataDog/integrations-core/pull/22674))
+
 ## 1.2.0 / 2025-11-26 / Agent 7.74.0
 
 ***Added***:

diff --git a/checkpoint_quantum_firewall/changelog.d/22674.added b/checkpoint_quantum_firewall/changelog.d/22674.added
diff --git a/checkpoint_quantum_firewall/datadog_checks/checkpoint_quantum_firewall/__about__.py b/checkpoint_quantum_firewall/datadog_checks/checkpoint_quantum_firewall/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2024-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '1.2.0'
+__version__ = '1.3.0'
diff --git a/cisco_aci/CHANGELOG.md b/cisco_aci/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 4.13.1 / 2026-03-18
+
+***Fixed***:
+
+* Fix NDM tagging: use only device_id in device id_tags to prevent collisions when devices are unreachable, and add interface:{name} tag to interface metrics for proper metadata-to-metrics linking ([#22645](https://github.com/DataDog/integrations-core/pull/22645))
+
 ## 4.13.0 / 2026-02-19 / Agent 7.77.0
 
 ***Added***:

diff --git a/cisco_aci/changelog.d/22645.fixed b/cisco_aci/changelog.d/22645.fixed
diff --git a/cisco_aci/datadog_checks/cisco_aci/__about__.py b/cisco_aci/datadog_checks/cisco_aci/__about__.py
@@ -2,4 +2,4 @@
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
 
-__version__ = "4.13.0"
+__version__ = "4.13.1"
diff --git a/cisco_secure_firewall/CHANGELOG.md b/cisco_secure_firewall/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 <!-- towncrier release notes start -->
 
+## 1.3.0 / 2026-03-18
+
+***Added***:
+
+* Add ndm_syslog:true tag to log configuration to enable NDM device syslog correlation. ([#22674](https://github.com/DataDog/integrations-core/pull/22674))
+
 ## 1.2.0 / 2025-11-26 / Agent 7.74.0
 
 ***Added***:

diff --git a/cisco_secure_firewall/changelog.d/22674.added b/cisco_secure_firewall/changelog.d/22674.added
diff --git a/cisco_secure_firewall/datadog_checks/cisco_secure_firewall/__about__.py b/cisco_secure_firewall/datadog_checks/cisco_secure_firewall/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2024-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '1.2.0'
+__version__ = '1.3.0'
diff --git a/clickhouse/CHANGELOG.md b/clickhouse/CHANGELOG.md
@@ -2,6 +2,18 @@
 
 <!-- towncrier release notes start -->
 
+## 6.4.0 / 2026-03-18
+
+***Added***:
+
+* Add ClickHouse support for DBM with Query Metrics, Query Samples, and Query Completions ([#22341](https://github.com/DataDog/integrations-core/pull/22341))
+* Update dependencies ([#22707](https://github.com/DataDog/integrations-core/pull/22707))
+
+***Fixed***:
+
+* Fix query_signature mismatch between DBM query metrics and query samples by using raw query text instead of ClickHouse's normalizeQuery() for obfuscation ([#22831](https://github.com/DataDog/integrations-core/pull/22831))
+* Fix ClickHouse Cloud query undercounting by using per-node checkpoint tracking to prevent cross-node query_log flush races from skipping queries ([#22903](https://github.com/DataDog/integrations-core/pull/22903))
+
 ## 6.3.0 / 2026-02-19 / Agent 7.77.0
 
 ***Added***:

diff --git a/clickhouse/changelog.d/22341.added b/clickhouse/changelog.d/22341.added
diff --git a/clickhouse/changelog.d/22831.fixed b/clickhouse/changelog.d/22831.fixed
diff --git a/clickhouse/changelog.d/22903.fixed b/clickhouse/changelog.d/22903.fixed
diff --git a/clickhouse/changelog.d/22707.added → clickhouse/changelog.d/22978.added b/clickhouse/changelog.d/22707.added → clickhouse/changelog.d/22978.added
diff --git a/clickhouse/datadog_checks/clickhouse/__about__.py b/clickhouse/datadog_checks/clickhouse/__about__.py
@@ -1,4 +1,4 @@
 # (C) Datadog, Inc. 2019-present
 # All rights reserved
 # Licensed under a 3-clause BSD style license (see LICENSE)
-__version__ = '6.3.0'
+__version__ = '6.4.0'