[[ecs-release-notes-8.5.0]]
=== 8.5.0

[[schema-changes-8.5.0]]
[float]
==== Schema changes

[[schema-added-8.5.0]]
[float]
===== Added

* Adding `risk.*` fields as experimental. {ecs_pull}1994[#1994], {ecs_pull}2010[#2010]
* Adding `process.io.*` as beta fields. {ecs_pull}1956[#1956], {ecs_pull}2031[#2031]
* Adding `process.tty.rows` and `process.tty.columns` as beta fields. {ecs_pull}2031[#2031]
* Changed `process.env_vars` field type to be an array of keywords. {ecs_pull}2038[#2038]
* `process.attested_user` and `process.attested_groups` as beta fields. {ecs_pull}2050[#2050]
* Added `risk.*` fieldset to beta. {ecs_pull}2051[#2051], {ecs_pull}2058[#2058]
* Moved Linux event model fields to GA. {ecs_pull}2082[#2082]

[[schema-improvements-8.5.0]]
[float]
===== Improvements

* Advances `threat.enrichments.indicator` to GA. {ecs_pull}1928[#1928]
* Added `ios` and `android` as valid values for `os.type` {ecs_pull}1999[#1999]

[[tooling-changes-8.5.0]]
[float]
==== Tooling and artifact changes

[[tooling-bugfixes-8.5.0]]
[float]
===== Bugfixes

* Added Deprecation Warning for `misspell` task {ecs_pull}1993[#1993]
* Fix typo in client schema {ecs_pull}2014[#2014]