chore: release v0.2.3 (#41)

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>

Author: elastic-vault-github-plugin-prod[bot]

.claude-plugin/marketplace.json

@@ -1,31 +1,31 @@
 {
   "plugins": [
     {
-      "version": "0.2.2",
+      "version": "0.2.3",
       "name": "elastic-elasticsearch",
       "source": "./plugins/elasticsearch",
       "description": "Elasticsearch skills — ES|QL queries, data ingestion, security (authn, authz, audit), and troubleshooting"
     },
     {
-      "version": "0.2.2",
+      "version": "0.2.3",
       "name": "elastic-kibana",
       "source": "./plugins/kibana",
       "description": "Kibana skills — dashboards, alerting rules, connectors, Vega visualizations, Agent Builder, streams, and audit logging"
     },
     {
-      "version": "0.2.2",
+      "version": "0.2.3",
       "name": "elastic-observability",
       "source": "./plugins/observability",
       "description": "Elastic Observability skills — OpenTelemetry instrumentation and migration (.NET, Java, Python), LLM observability, log search, SLOs, and service health"
     },
     {
-      "version": "0.2.2",
+      "version": "0.2.3",
       "name": "elastic-security",
       "source": "./plugins/security",
       "description": "Elastic Security skills — alert triage, case management, detection rule management, and sample data generation"
     },
     {
-      "version": "0.2.2",
+      "version": "0.2.3",
       "name": "elastic-cloud",
       "source": "./plugins/cloud",
       "description": "Elastic Cloud skills — project setup, access management, network security, and Serverless project lifecycle"

.github/.release-manifest.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "source_repo": "elastic/agent-skills",
-  "sandbox_sha": "7773a02cf0dc0fba2793c809c4888ba249066ee4",
+  "sandbox_sha": "d43db6b94b2fb5613b5ca9d224ce0441a70f5e0a",
   "skills": {
     "skills/cloud/access-management": {
       "name": "cloud-access-management",
@@ -69,7 +69,7 @@
     },
     "skills/kibana/kibana-dashboards": {
       "name": "kibana-dashboards",
-      "version": "0.1.0"
+      "version": "0.1.1"
     },
     "skills/kibana/kibana-vega": {
       "name": "kibana-vega",

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## v0.2.3
+
+### Updated Skills
+
+- `skills/elasticsearch/elasticsearch-esql` (v0.1.1)
+- `skills/elasticsearch/elasticsearch-onboarding` (v0.1.0)
+- `skills/kibana/kibana-dashboards` (v0.1.0 → v0.1.1)
+
+### Generated Artifacts
+
+- Regenerated README skill table
+
 ## v0.2.2
 
 ### Fixes

README.md

@@ -75,7 +75,7 @@ Skills in this repository focus on:
 | [kibana-alerting-rules](skills/kibana/kibana-alerting-rules/SKILL.md) | Create and manage Kibana alerting rules via REST API or Terraform. Use when creating, updating, or managing rule lifecycle (enable, disable, mute, snooze) or rules-as-code workflows. | 0.1.0 | elastic |
 | [kibana-audit](skills/kibana/kibana-audit/SKILL.md) | Enable and configure Kibana audit logging for saved object access, logins, and space operations. Use when setting up Kibana audit, filtering events, or correlating Kibana and ES audit logs. | 0.1.0 | elastic |
 | [kibana-connectors](skills/kibana/kibana-connectors/SKILL.md) | Create and manage Kibana connectors for Slack, PagerDuty, Jira, webhooks, and more via REST API or Terraform. Use when configuring third-party integrations or managing connectors as code. | 0.1.1 | elastic |
-| [kibana-dashboards](skills/kibana/kibana-dashboards/SKILL.md) | Create and manage Kibana Dashboards and Lens visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automate their deployment. | 0.1.0 | elastic |
+| [kibana-dashboards](skills/kibana/kibana-dashboards/SKILL.md) | Create and manage Kibana Dashboards and visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automate their deployment. | 0.1.1 | elastic |
 | [kibana-vega](skills/kibana/kibana-vega/SKILL.md) | Create Vega and Vega-Lite visualizations with ES\|QL data sources in Kibana. Use when building custom charts, dashboards, or programmatic panel layouts beyond standard Lens charts. | 0.1.0 | elastic |
 | [kibana-streams](skills/kibana/streams/SKILL.md) | List, inspect, enable, disable, and resync Kibana Streams via the REST API. Use when the user needs stream details, ingest/query settings, queries, significant events, or attachments. | 0.1.0 | elastic |
 

plugins/cloud/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "name": "elastic-cloud",
   "description": "Elastic Cloud skills - project setup, access management, network security, and Serverless project lifecycle",
   "author": {

plugins/elasticsearch/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "name": "elastic-elasticsearch",
   "description": "Elasticsearch skills - ES|QL queries, data ingestion, security (authn, authz, audit), and troubleshooting",
   "author": {

plugins/kibana/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "name": "elastic-kibana",
   "description": "Kibana skills - dashboards, alerting rules, connectors, Vega visualizations, Agent Builder, streams, and audit logging",
   "author": {

plugins/observability/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "name": "elastic-observability",
   "description": "Elastic Observability skills - OpenTelemetry instrumentation and migration (.NET, Java, Python), LLM observability, log search, SLOs, and service health",
   "author": {

plugins/security/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.2.2",
+  "version": "0.2.3",
   "name": "elastic-security",
   "description": "Elastic Security skills - alert triage, case management, detection rule management, and sample data generation",
   "author": {

skills/elasticsearch/elasticsearch-esql/SKILL.md

@@ -35,8 +35,10 @@ ES|QL uses pipes (`|`) to chain commands:
 >
 > **Cluster Detection:** Use the `GET /` response to determine the cluster type and version:
 >
-> - `build_flavor: "serverless"` — Elastic Cloud Serverless. Reports version `8.11.0` but supports all latest ES|QL
->   features. Ignore the version number and assume all GA and preview features are available.
+> - `build_flavor: "serverless"` — Elastic Cloud Serverless. `version.number` tracks the stack line under active
+>   development (next minor from main), so clients that only semver-compare may treat Serverless as “latest.” **Do not**
+>   use `version.number` to gate features: if `build_flavor` is `"serverless"`, assume all GA and preview ES|QL features
+>   are available.
 > - `build_flavor: "default"` — Self-managed or Elastic Cloud Hosted. Use `version.number` for feature availability.
 > - **Snapshot builds** have `version.number` like `9.4.0-SNAPSHOT`. Strip the `-SNAPSHOT` suffix and use the
 >   major.minor for version checks. Snapshot builds include all features from that version plus potentially unreleased