diff --git a/.buildkite/hooks/pre-exit b/.buildkite/hooks/pre-exit
deleted file mode 100644
index 0d6d60d4b7a..00000000000
--- a/.buildkite/hooks/pre-exit
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-unset_secrets () {
-  for var in $(printenv | sed 's;=.*;;' | sort); do
-    if [[ "$var" == *_SECRET || "$var" == *_TOKEN ]]; then
-      unset "$var"
-    fi
-  done
-}
-
-cleanup() {
-  if [[ "$BUILDKITE_COMMAND" != *"buildkite-agent pipeline upload"* ]]; then
-  echo "Deleting temporary files..."
-    if [[ -n "${BIN:-}" ]]; then
-      rm -rf "${BIN}"
-    fi
-  echo "Done."
-  fi
-}
-
-unset_secrets
-cleanup
-
diff --git a/.buildkite/pipeline.yml b/.buildkite/pipeline.yml
index 1d8260eb69c..6c92fe98a92 100644
--- a/.buildkite/pipeline.yml
+++ b/.buildkite/pipeline.yml
@@ -111,6 +111,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - filebeat/
                 - x-pack/filebeat/
                 - x-pack/libbeat/
                 - .buildkite/x-pack/pipeline.xpack.filebeat.yml
@@ -215,6 +216,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - metricbeat/
                 - x-pack/metricbeat/
                 - x-pack/libbeat/common/aws
                 - .buildkite/x-pack/pipeline.xpack.metricbeat.yml
@@ -288,6 +290,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - winlogbeat/
                 - x-pack/winlogbeat/
                 - .buildkite/x-pack/pipeline.xpack.winlogbeat.yml
                 - .buildkite/scripts
@@ -385,6 +388,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - libbeat/
                 - x-pack/libbeat/
                 - .buildkite/x-pack/pipeline.xpack.libbeat.yml
                 - .buildkite/scripts
@@ -419,6 +423,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - auditbeat/
                 - x-pack/auditbeat/
                 - .buildkite/x-pack/pipeline.xpack.auditbeat.yml
                 - .buildkite/scripts/
@@ -454,6 +459,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - heartbeat/
                 - x-pack/heartbeat/
                 - .buildkite/x-pack/pipeline.xpack.heartbeat.yml
                 - .buildkite/scripts/
@@ -489,6 +495,7 @@ steps:
           diff: "git diff --name-only origin/${GITHUB_PR_TARGET_BRANCH}...HEAD"
           watch:
             - path:
+                - packetbeat/
                 - x-pack/packetbeat/
                 - .buildkite/x-pack/pipeline.xpack.packetbeat.yml
                 - .buildkite/scripts/
diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index 6d12414d6e2..03c6861d150 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -3,6 +3,72 @@
 :issue: https://github.com/elastic/beats/issues/
 :pull: https://github.com/elastic/beats/pull/
 
+[[release-notes-8.14.3]]
+=== Beats version 8.14.3
+https://github.com/elastic/beats/compare/v8.14.2\...v8.14.3[View commits]
+
+==== Bugfixes
+
+*Filebeat*
+- Fix handling of deeply nested numeric values in HTTP Endpoint CEL programs. {pull}40115[40115]
+
+*Metricbeat*
+
+- Fix `namespace` filter option on metricset `state_namespace` enricher. {pull}39934[39934]
+- Fix `namespace` filter option at Kubernetes provider level. {pull}39881[39881]
+- Fix handling of access errors when reading process metrics. {pull}39627[39627]
+- Fix behavior of cgroups path discovery when monitoring the host system from within a container. {pull}39627[39627]
+- Fix issue where Beats may report incorrect metrics for its own process when running inside a container. {pull}39627[39627]
+- Fix for MySQL/Performance - Query failure for MySQL versions below v8.0.1, for performance metric `quantile_95`. {pull}38710[38710]
+- Fix Prometheus helper text parser to store each metric family type. {pull}39743[39743]
+- Normalize AWS RDS CPU utilization values before making the metadata API call. {pull}39664[39664]
+- Fix behavior of `pagetypeinfo` metrics. {pull}39985[39985]
+- Fix query logic for temp and non-temp tablespaces in Oracle module. {issue}38051[38051] {pull}39787[39787]
+- Fix missing metrics from CloudWatch when include_linked_accounts set to false. {issue}40071[40071] {pull}40135[40135]
+
+==== Added
+
+*Affecting all Beats*
+
+- Update Go version to 1.21.12. {pull}40114[40114]
+
+
+[[release-notes-8.14.2]]
+=== Beats version 8.14.2
+https://github.com/elastic/beats/compare/v8.14.1\...v8.14.2[View commits]
+
+==== Breaking changes
+
+*Filebeat*
+
+- Fix high I/O and handling of a corrupted registry log file. {pull}35893[35893]
+
+==== Bugfixes
+
+*Filebeat*
+- Fix request trace filename handling in `http_endpoint` input. {pull}39410[39410]
+- Fix filestream not correctly tracking the offset of a file when using the `include_message` parser. {pull}39873[39873] {issue}39653[39653]
+- Upgrade `github.com/hashicorp/go-retryablehttp` to mitigate CVE-2024-6104. {pull}40036[40036]
+
+==== Added
+
+*Affecting all Beats*
+
+- Update Go version to 1.21.11. {pull}39851[39851]
+
+*Filebeat*
+
+- Fix handling of infinite rate values in CEL rate limit handling logic. {pull}39940[39940]
+
+*Heartbeat*
+
+- Upgrade Node version to the latest LTS v18.20.3. {pull}40038[40038]
+
+*Winlogbeat*
+
+- Add ERROR_INVALID_PARAMETER to the list of recoverable errors. {pull}39781[39781]
+
+
 [[release-notes-8.14.1]]
 === Beats version 8.14.1
 https://github.com/elastic/beats/compare/v8.14.0\...v8.14.1[View commits]
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index bb4e520b5fe..5212ae2c698 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -391,3 +391,9 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 
 ==== Known Issues
 
+
+
+
+
+
+
diff --git a/libbeat/docs/release.asciidoc b/libbeat/docs/release.asciidoc
index 3dc94738d12..6f56fdc6ff6 100644
--- a/libbeat/docs/release.asciidoc
+++ b/libbeat/docs/release.asciidoc
@@ -8,6 +8,8 @@ This section summarizes the changes in each release. Also read
 <<breaking-changes>> for more detail about changes that affect
 upgrade.
 
+* <<release-notes-8.14.3>>
+* <<release-notes-8.14.2>>
 * <<release-notes-8.14.1>>
 * <<release-notes-8.14.0>>
 * <<release-notes-8.13.4>>
diff --git a/testing/environments/snapshot.yml b/testing/environments/snapshot.yml
index 5760f04ea67..fa7e9097f0a 100644
--- a/testing/environments/snapshot.yml
+++ b/testing/environments/snapshot.yml
@@ -3,7 +3,7 @@
 version: '2.3'
 services:
   elasticsearch:
-    image: docker.elastic.co/elasticsearch/elasticsearch:8.16.0-a9f3d4e7-SNAPSHOT
+    image: docker.elastic.co/elasticsearch/elasticsearch:8.16.0-8e262a3b-SNAPSHOT
     # When extend is used it merges healthcheck.tests, see:
     # https://github.com/docker/compose/issues/8962
     # healthcheck:
@@ -31,7 +31,7 @@ services:
     - "./docker/elasticsearch/users_roles:/usr/share/elasticsearch/config/users_roles"
 
   logstash:
-    image: docker.elastic.co/logstash/logstash:8.16.0-a9f3d4e7-SNAPSHOT
+    image: docker.elastic.co/logstash/logstash:8.16.0-8e262a3b-SNAPSHOT
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:9600/_node/stats"]
       retries: 600
@@ -44,7 +44,7 @@ services:
       - 5055:5055
 
   kibana:
-    image: docker.elastic.co/kibana/kibana:8.16.0-a9f3d4e7-SNAPSHOT
+    image: docker.elastic.co/kibana/kibana:8.16.0-8e262a3b-SNAPSHOT
     environment:
     - "ELASTICSEARCH_USERNAME=kibana_system_user"
     - "ELASTICSEARCH_PASSWORD=testing"