Upgrade elastic-stack pack to 0.19.1

[CarlosRamirezSWO]

Upgrade elastic-stack pack to 0.19.1

[bulwark-sc-ent]

✅ CVE scan completed successfully.

Scan Summary:

• Total images scanned: 5
• Clean images: 0
• Images with CVEs: 5
• Total CVEs found: 1420

🔴 Critical CVEs: 29
🟠 High CVEs: 157
🟡 Medium CVEs: 189
🟢 Low CVEs: 1045

Images with CVEs:

• docker.elastic.co/beats/filebeat:9.4.2: 314 CVEs (Critical: 6, High: 36, Medium: 40, Low: 232)
  Critical CVEs: CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/elasticsearch/elasticsearch:9.4.2: 279 CVEs (Critical: 9, High: 27, Medium: 31, Low: 212)
  Critical CVEs: CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-45674, CVE-2026-47691, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/kibana/kibana:9.4.2: 431 CVEs (Critical: 6, High: 51, Medium: 82, Low: 292)
  Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/logstash/logstash:9.4.2: 338 CVEs (Critical: 8, High: 35, Medium: 33, Low: 262)
  Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-54906, CVE-2026-58016, CVE-2026-6653
• docker.io/curlimages/curl:8.19.0: 58 CVEs (Critical: 0, High: 8, Medium: 3, Low: 47)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

[bulwark-sc-ent]

✅ CVE scan completed successfully.

Scan Summary:

• Total images scanned: 5
• Clean images: 0
• Images with CVEs: 5
• Total CVEs found: 1420

🔴 Critical CVEs: 29
🟠 High CVEs: 159
🟡 Medium CVEs: 191
🟢 Low CVEs: 1041

Images with CVEs:

• docker.elastic.co/beats/filebeat:9.4.2: 314 CVEs (Critical: 6, High: 36, Medium: 40, Low: 232)
  Critical CVEs: CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/elasticsearch/elasticsearch:9.4.2: 279 CVEs (Critical: 9, High: 28, Medium: 33, Low: 209)
  Critical CVEs: CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-45674, CVE-2026-47691, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/kibana/kibana:9.4.2: 431 CVEs (Critical: 6, High: 51, Medium: 82, Low: 292)
  Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
• docker.elastic.co/logstash/logstash:9.4.2: 338 CVEs (Critical: 8, High: 36, Medium: 33, Low: 261)
  Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-54906, CVE-2026-58016, CVE-2026-6653
• docker.io/curlimages/curl:8.19.0: 58 CVEs (Critical: 0, High: 8, Medium: 3, Low: 47)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

[vishwanaths]

Pack review — elastic-stack-0.19.1

Packs Validation: passed (run)
source annotation: community
Pack metadata: name=elastic-stack version=0.19.1 addonType=logging layer=addon displayName=ECK Stack contributor=spectrocloud

Compared against packs/elastic-stack-0.19.0/

Summary of differences

• pack.json: bumped version 0.19.0 -> 0.19.1 (patch); charts entry retargeted to charts/eck-stack-0.19.1.tgz. annotations, cloudTypes, addonType, layer, displayName, and constraints.dependencies unchanged.
• values.yaml: image tags for kibana, elasticsearch, logstash, and filebeat bumped 9.3.0 -> 9.4.2; pack.content.charts[0].version bumped 0.19.0 -> 0.19.1. curlimages/curl:8.19.0 unchanged. No top-level keys added or removed.
• charts: chart tarball renamed eck-stack-0.19.0.tgz (49,114 B) -> eck-stack-0.19.1.tgz (48,953 B); delta -161 B (~-0.3%). Contents of the tarball itself were not inspected.
• Vendored subchart tree (charts/eck-stack/**): mirrors the tarball bump. Every subchart Chart.yaml has version 0.19.0 -> 0.19.1, the top-level eck-stack/Chart.yaml bumps all 10 dependency versions plus its own version to 0.19.1, and the sample YAMLs under each subchart's examples/ bump their appVersion reference 9.4.0 -> 9.4.2. Elasticsearch/kibana/etc. subchart values.yaml files bump their default version: from 9.4.0 to 9.4.2.
• Files added: charts/eck-stack-0.19.1.tgz (rename of the prior tarball).
• Files removed: charts/eck-stack-0.19.0.tgz (rename of the prior tarball).
• logo.png byte-identical to prior version.

pack.json diff

--- a/packs/elastic-stack-0.19.0/pack.json
+++ b/packs/elastic-stack-0.19.1/pack.json
@@ -6,7 +6,7 @@
     "contributor": "spectrocloud"
   },
   "charts": [
-    "charts/eck-stack-0.19.0.tgz"
+    "charts/eck-stack-0.19.1.tgz"
   ],
   "cloudTypes": [
     "all"
@@ -14,7 +14,7 @@
   "displayName": "ECK Stack",
   "layer": "addon",
   "name": "elastic-stack",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "constraints": {
     "dependencies": [
       {

values.yaml diff

--- a/packs/elastic-stack-0.19.0/values.yaml
+++ b/packs/elastic-stack-0.19.1/values.yaml
@@ -3,16 +3,16 @@
 pack:
   content:
     images:
-      - image: docker.elastic.co/kibana/kibana:9.3.0
-      - image: docker.elastic.co/elasticsearch/elasticsearch:9.3.0
-      - image: docker.elastic.co/logstash/logstash:9.3.0
-      - image: docker.elastic.co/beats/filebeat:9.3.0
+      - image: docker.elastic.co/kibana/kibana:9.4.2
+      - image: docker.elastic.co/elasticsearch/elasticsearch:9.4.2
+      - image: docker.elastic.co/logstash/logstash:9.4.2
+      - image: docker.elastic.co/beats/filebeat:9.4.2
       - image: docker.io/curlimages/curl:8.19.0

     charts:
     - repo: https://helm.elastic.co/
       name: eck-stack
-      version: 0.19.0
+      version: 0.19.1
   #The namespace (on the target cluster) to install this chart
   #When not found, a new namespace will be created
   namespace: "elastic-stack"

Blockers

• None.

Nits / observations

• The prebundled image tags in values.yaml (9.4.2) match the subchart default version: values (9.4.2) and lead the upstream ECK 0.19.1 default (9.4.0). Worth confirming that stack version 9.4.2 is the intended baseline for this pack revision rather than upstream's 9.4.0.
• Repo-level security-scans/syft-license check reports FAILURE against this PR head. That check lives outside the Packs Validation gate this review evaluates, but the maintainer may want to look at it before merging.

Review generated by the pack-reviewer Claude Code subagent.