From c3f9ca95cc1fd5cc4f15eb2ab71abc5c1da74073 Mon Sep 17 00:00:00 2001
From: Jeff Cantrill <jcantril@redhat.com>
Date: Wed, 29 Jul 2026 15:57:06 -0400
Subject: [PATCH 1/2] chore(ocp-logging): remove transforms.lua from feature
 set

ref: LOG-9706
---
 Cargo.toml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/Cargo.toml b/Cargo.toml
index 9d115288dd353..609c76257b026 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -524,7 +524,6 @@ ocp-logging = [
   "transforms-filter",
   "transforms-remap",
   "transforms-log_to_metric",
-  "transforms-lua",
   "transforms-throttle",
   "transforms-reduce",
   "transforms-detect_exceptions",

From 76318505be32ad12fbe211583fbc3d07af1e46e9 Mon Sep 17 00:00:00 2001
From: Jeff Cantrill <jcantril@redhat.com>
Date: Wed, 29 Jul 2026 16:32:30 -0400
Subject: [PATCH 2/2] fix(ocp-logging): feature gate secrets.exec and remove
 from feature set

ref: LOG-9705
---
 Cargo.toml         | 3 ++-
 src/secrets/mod.rs | 3 +++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/Cargo.toml b/Cargo.toml
index 609c76257b026..027effb3eb913 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -655,9 +655,10 @@ codecs-opentelemetry = ["vector-lib/opentelemetry"]
 codecs-syslog = ["vector-lib/syslog"]
 
 # Secrets
-secrets = ["secrets-aws-secrets-manager"]
+secrets = ["secrets-aws-secrets-manager", "secrets-exec"]
 
 secrets-aws-secrets-manager = ["aws-core", "dep:aws-sdk-secretsmanager"]
+secrets-exec = []
 
 # Sources
 sources = ["sources-logs", "sources-metrics"]
diff --git a/src/secrets/mod.rs b/src/secrets/mod.rs
index 19bc6471ee96e..2ae7b3462ad2a 100644
--- a/src/secrets/mod.rs
+++ b/src/secrets/mod.rs
@@ -12,6 +12,7 @@ use crate::{
 #[cfg(feature = "secrets-aws-secrets-manager")]
 mod aws_secrets_manager;
 mod directory;
+#[cfg(feature = "secrets-exec")]
 mod exec;
 mod file;
 mod test;
@@ -68,6 +69,7 @@ pub enum SecretBackends {
     Directory(directory::DirectoryBackend),
 
     /// Exec.
+    #[cfg(feature = "secrets-exec")]
     Exec(exec::ExecBackend),
 
     /// AWS Secrets Manager.
@@ -85,6 +87,7 @@ impl vector_lib::configurable::NamedComponent for SecretBackends {
         match self {
             Self::File(config) => config.get_component_name(),
             Self::Directory(config) => config.get_component_name(),
+            #[cfg(feature = "secrets-exec")]
             Self::Exec(config) => config.get_component_name(),
             #[cfg(feature = "secrets-aws-secrets-manager")]
             Self::AwsSecretsManager(config) => config.get_component_name(),