Bump org.elasticsearch.client:elasticsearch-rest-client from 9.3.4 to 9.4.0 in /elasticsearch

[dependabot]

Bumps org.elasticsearch.client:elasticsearch-rest-client from 9.3.4 to 9.4.0.

Release notes

Sourced from org.elasticsearch.client:elasticsearch-rest-client's releases.

Elasticsearch 9.4.0

Downloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.4.0-release-notes

Commits

• 2e8528e ESQL: Validate unsupported grouping types earlier (#147650) (#148003)
• 3b2281d Allow kibana_system to read OTel traces/metrics indices (#146969) (#147996)
• 36101d1 ES|QL: fix _index LIKE with ? wildcard (#147462) (#147994)
• 59a3048 Address memory issue in AbstractTSDBDocValuesProducer. (#147968)
• 0ede419 ES|QL: report correct location for SET errors (#147582) (#147616)
• 75a88e8 [CI] Attribute resource leak failures to test tasks (#146495) (#147979)
• ad81f3e ESQL: Fix test (#147624) (#147917)
• 7259591 [9.4] Regenerate test certificates (#147819) (#147882)
• ece80f9 Share the same doc values producer for IdBloomFilterSupplier and TSDBSyntheti...
• 5aa4c83 [9.4] ESQL: Fix nullify under join and enrich (#147818) (#147831)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

---

Code Review

PR: Bump org.elasticsearch.client:elasticsearch-rest-client from 9.3.4 → 9.4.0

---

Code Quality

✅ No commented-out code — change is a single version string update.

✅ Meaningful variable names — N/A for a version bump.

✅ DRY principle — N/A.

❌ Potential defect — version mismatch between related dependencies
At elasticsearch/pom.xml line 73, co.elastic.clients:elasticsearch-java remains pinned at 9.3.4, while org.elasticsearch.client:elasticsearch-rest-client is now 9.4.0 (line 78). These two artifacts are part of the same Elastic release train and must be kept at the same version. A minor version mismatch (9.3.x client against a 9.4.x low-level REST client) can cause subtle runtime failures or API incompatibilities. Both should be bumped together to 9.4.0.

❌ Inconsistent indentation in pom.xml
The pom.xml mixes tabs and spaces across dependency blocks (e.g., lines 65–109 vs. lines 85–89). This is a pre-existing issue but worth noting; the new dependency block (lines 75–79) uses a different indent style than its neighbours.

---

Testing

❌ No tests added or updated — there are no visible test changes. While a dependency bump may not require new unit tests, a smoke test or integration test confirming the new REST client version works would be appropriate.

---

Documentation

❌ CHANGELOG.md not updated — CHANGELOG.md has no entry for this dependency bump. Per the project's own format (Keep a Changelog), dependency upgrades should be documented.

---

Security

✅ No hardcoded credentials.

✅ No sensitive data or license files.

✅ No .lic files or AQAAAD-prefixed content.

---

Summary

Severity	Finding
High	co.elastic.clients:elasticsearch-java (line 73) is still 9.3.4 — must be bumped to 9.4.0 to match the REST client
Low	CHANGELOG.md not updated
Low	pom.xml mixed indentation (pre-existing, but worsened by the new block)

The version mismatch between the two Elastic artifacts is the critical issue to resolve before merging.

Automated code review analyzing defects and coding standards