Agent

Prelude

Released on: 2026-10-07

• Please refer to the 7.84.2 tag on integrations-core for the list of changes on the Core Checks

New Features

• Add Fleet-managed upgrades and rollback for Windows FIPS Agents.

Enhancement Notes

• Allow enabling Private Action Runner split mode during a Windows Agent installation with the DD_PRIVATE_ACTION_RUNNER_SPLIT_ENABLED MSI property.

Security Notes

• Bumped pip to 26.2.1 in the embedded Python distribution.
• Patch the embedded MIT krb5 library so NegoEx GSS token parsing rejects truncated headers and missing extension vectors instead of reading past the buffer.

Bug Fixes

• Fix Kueue pods sometimes missing the kueue_workload, kueue_workload_uid and kueue_resource_flavor tags after an Agent restart.
• Windows Fleet installer setup now rejects standard/FIPS Agent mismatches before stopping the installed Agent, with a message to use the matching installer.

Datadog Cluster Agent

Prelude

Released on: 2026-10-07 Pinned to datadog-agent v7.84.2: CHANGELOG.

Bug Fixes

• The Cluster Agent now collects namespace metadata when apm_config.instrumentation.on_demand is enabled, even if apm_config.instrumentation.enabled is false. Before this fix, Remote Configuration instrumentation policies that match on namespace labels never matched, and injected pods in namespaces that enforce the restricted Pod Security Standard were rejected because the init containers did not get a restricted security context.