From 61211a267047bd2d4245cd04c5c938c122ab29ad Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 10 Mar 2026 18:49:55 +0530
Subject: [PATCH] Lock versions for releases: 8.19,9.1,9.2,9.3 (#5820)

---
 detection_rules/etc/version.lock.json | 4 ++--
 pyproject.toml                        | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/detection_rules/etc/version.lock.json b/detection_rules/etc/version.lock.json
index 4771c4eb8..e33563486 100644
--- a/detection_rules/etc/version.lock.json
+++ b/detection_rules/etc/version.lock.json
@@ -10160,9 +10160,9 @@
   },
   "e5f6a7b8-c9d0-8e1f-2a3b-4c5d6e7f8a9b": {
     "rule_name": "First Time Seen DNS Query to RMM Domain",
-    "sha256": "b09357075adc197f9663635384299a12e0b25c28bded7221f0feeee2cf5c978e",
+    "sha256": "7b3881595d49f8c46922a27a82169b94ccb18bc2d422e115d3aa868f60e25f6f",
     "type": "new_terms",
-    "version": 1
+    "version": 2
   },
   "e6c1a552-7776-44ad-ae0f-8746cc07773c": {
     "rule_name": "Bash Shell Profile Modification",
diff --git a/pyproject.toml b/pyproject.toml
index 21be30c56..29c3b0d76 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "detection_rules"
-version = "1.5.53"
+version = "1.5.54"
 description = "Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine."
 readme = "README.md"
 requires-python = ">=3.12"