diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6e4ffbb4a2..9c24083fed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,78 @@
+## Fleet 4.68.0 (May 22, 2025)
+
+### Security Engineers
+- Built Fleet integration with Microsoft Entra to conditionally prevent single sign-on for hosts failing policies.
+- Added ability to set conditional access per policy, and update host policy UI to incorporate conditional access data.
+- Added CVE ID as matching criteria for host software queries, in addition to software name. Also rebuild host software querying for better maintainability.
+- Updated Fleet-managed DigiCert, NDES, and SCEP certificates to be renewed 30 days before expiry for those valid longer than 30 days or when half the validity period remains for certificates valid 30 days or less. Applies to certificates requested using this release or later. 
+- Added webhook as a logging configuration option.
+- Added webhook query automation logging.
+- Added shell and Powershell syntax highlighting when editing scripts.
+- Added ability to run a script on a batch of hosts with a single user flow.
+- Added download validation and existing-installer matching in GitOps via a new `hash_sha256` field in software YAML.
+- Added `hash_sha256` field to the response for the `GET /software/titles` API.
+- Added `fleetctl generate-gitops` command to generate gitops YAML files based on current Fleet configuration.
+- Enabled saving Integrations > Advanced in GitOps mode.
+
+### IT Admins
+- Added ability to run a script on a batch of hosts with a single user flow.
+- Added the ability to upload and install tarball archives (.tar.gz).
+- Added support for Fleet-maintained apps in GitOps.
+- Added ability to add FMA via `fleetctl` YAML files.
+- Added shell and Powershell syntax highlighting when editing scripts.
+- Added query ID to query automation logs.
+- Added UI for the manual agent install of a bootstrap package.
+- Added categorization for self-service software, including filtering on the "My device" page.
+- Added number of policies triggering automatic install of software in software table.
+- Added webhook as a logging configuration option.
+- Added webhook query automation logging.
+- Added download validation and existing-installer matching in GitOps via a new `hash_sha256` field in software YAML.
+- Added `hash_sha256` field to the response for the `GET /software/titles` API.
+- Added support for `FLEET_VAR_HOST_END_USER_IDP_USERNAME`, `FLEET_VAR_HOST_END_USER_IDP_USERNAME_LOCAL_PART` and `FLEET_VAR_HOST_END_USER_IDP_GROUPS` fleet variables in macOS MDM configuration profiles.
+- Added `last_mdm_enrolled_at` and `last_mdm_checked_in_at` to host detail endpoints to return the last time a host enrolled, or re-enrolled in MDM and the last time a host checked in via MDM, respectively.
+- Added `fleetctl generate-gitops` command to generate gitops YAML files based on current Fleet configuration.
+- Updated Fleet-managed DigiCert, NDES, and SCEP certificates to be renewed 30 days before expiry for those valid longer than 30 days or when half the validity period remains for certificates valid 30 days or less. Applies to certificates requested using this release or later. 
+- Updated host certificates with serial numbers below 2^63 will now display the decimal represntation of the serial number in addition to hex so that it is easier to match them up to what is displayed in the macOS keychain.
+- Updated Install Status to correctly display available for self-service VPP apps.
+- Logged invalid Windows MDM SOAP message and return 400 instead of 5XX. This change helps debug Windows MDM issues.
+- Added `macos_setup.manual_agent_install` option in Mac setup experience to bypass fleetd install. Instead, fleetd should be installed via customer-customized bootstrap package.
+- Allowed uploading VPP apps when GitOps mode is enabled.
+- Allowed viewing the status details for an (un)install via the "My device" page.
+- Updated Apple MDM enrollment flow to improve device-to-user mapping.
+- Updated verification of Windows Wireless profiles to avoid resending already-applied profiles.
+- Enabled saving Integrations > Advanced in GitOps mode.
+
+### Other improvements and bug fixes
+- Added hover cursors to checkbox and radio form elements.
+- Added keyboard accessibility controls to activities on dashboard and host details pages.
+- Added an additional statistic item to count ABM pending hosts.
+- Added truncation and a conditional tooltip for long host names on the host details page.
+- Updated the parser used when editing SQL in the UI to handle modern expressions like window functions.
+- Updated "My device" page layout.
+- Updated Google Calendar event bodies and relevant previews in the Fleet UI.
+- Updated UI for Settings > Organization settings > Organization info.
+- Updated LUKS escrow instrucitons.
+- Updated error message and related documentation for Windows MDM configuration.
+- Updated UI to show the premium feature message when viewing the GitOps mode toggle page on Fleet free.
+- Cleaned up various empty and configured states on the settings pages.
+- Improved performance on database migration from 4.66 and earlier for instances with large macOS host counts.
+- Removed Apple MDM profile validation checks for com.apple.MCX keys (dontAllowFDEDisable and dontAllowFDEEnable) due to customer feedback.
+- Removed Fleet config no team settings when the `no-team.yml` file is removed via GitOps.
+- Updated Go to 1.24.2.
+- Fixed an issue where the upcoming host activities showed the incorrect created at date in the tooltip.
+- Fixed bug where Fleet failed to restore some "pending" hosts (i.e. hosts that remained assigned to Fleet in Apple Business Manager) when multiple hosts are deleted from Fleet.
+- Fixed an issue with how names for macOS software titles were calculated and prevents duplicate entries being created if the software is renamed by end users.
+- Fixed issue when Apple device was removed/re-added to ABM, it was not getting an enrollment profile.
+- Fixed issue where `fleetctl gitops --dry-run` would sometimes fail when creating and using labels in the same run.
+- Fixed a small bug with the way live policy result percentages were being rounded.
+- Fixed an issue where selections made on the Queries page were cleared a few seconds after page load.
+- Fixed an issue with the gitops command caused when trying to interpolate variables inside the 'description'/'remediation' sections.
+- Fixed `fleetctl gitops` issue where creating a new team containing VPP apps caused an error.
+- Fixed issue where GitOps may fail to apply new queries due to deadlocks.
+- Fixed spurious install/uninstall script errors on EXE software edits when install and uninstall scripts were specified.
+- Fixed issue where the host expiry window caused MDM devices assigned to Fleet in Apple Business Manager (ABM) to be repeatedly deleted and re-added to Fleet, which in some cases also caused the device to revert to the default team.
+- Fixed missing To: email header.
+
 ## Fleet 4.67.3 (May 6, 2025)
 
 - Removed error caused by macOS electron helper apps during ingestion.
diff --git a/changes/10098-org-logo b/changes/10098-org-logo
deleted file mode 100644
index 2a40c7d280..0000000000
--- a/changes/10098-org-logo
+++ /dev/null
@@ -1 +0,0 @@
-- Updated UI for Settings > Organization settings > Organization info.
\ No newline at end of file
diff --git a/changes/17710-apple-host-mdm-timestamps b/changes/17710-apple-host-mdm-timestamps
deleted file mode 100644
index f83aedb567..0000000000
--- a/changes/17710-apple-host-mdm-timestamps
+++ /dev/null
@@ -1 +0,0 @@
-Added last_mdm_enrolled_at and last_mdm_checked_in_at to host detail endpoints to return the last time a host enrolled, or re-enrolled in MDM and the last time a host checked in via MDM, respectively. This data is only returned for macOS, iOS and iPadOS hosts enrolled in Fleet MDM currently, other platforms will return null.
diff --git a/changes/19235-microsoft-compliance-conditional-access b/changes/19235-microsoft-compliance-conditional-access
deleted file mode 100644
index 98794e72a3..0000000000
--- a/changes/19235-microsoft-compliance-conditional-access
+++ /dev/null
@@ -1 +0,0 @@
-- Build Fleet integration with Microsoft Entra to conditionally prevent single sign-on for hosts failing policies
diff --git a/changes/23497-gitops-sha b/changes/23497-gitops-sha
deleted file mode 100644
index ee40b288ab..0000000000
--- a/changes/23497-gitops-sha
+++ /dev/null
@@ -1 +0,0 @@
-- Added download validation and existing-installer matching in GitOps via a new `hash_sha256` field in software YAML.
\ No newline at end of file
diff --git a/changes/24087-app-names b/changes/24087-app-names
deleted file mode 100644
index 33f3000d5e..0000000000
--- a/changes/24087-app-names
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixes an issue with how names for macOS software titles were calculated and prevents duplicate
-  entries being created if the software is renamed by end users.
\ No newline at end of file
diff --git a/changes/24087-migration-perf-improvement b/changes/24087-migration-perf-improvement
deleted file mode 100644
index a44db07c4c..0000000000
--- a/changes/24087-migration-perf-improvement
+++ /dev/null
@@ -1 +0,0 @@
-* Further improved performance on database migration from 4.66 and earlier for instances with large macOS host counts.
diff --git a/changes/24209-windows-mdm-error-msg b/changes/24209-windows-mdm-error-msg
deleted file mode 100644
index 12d662731f..0000000000
--- a/changes/24209-windows-mdm-error-msg
+++ /dev/null
@@ -1 +0,0 @@
-- Updated error message and related documentation for Windows MDM configuration.
diff --git a/changes/24394-wlan-xml-profile-verification b/changes/24394-wlan-xml-profile-verification
deleted file mode 100644
index 51cebfc44c..0000000000
--- a/changes/24394-wlan-xml-profile-verification
+++ /dev/null
@@ -1 +0,0 @@
-- Updated verification of Windows Wireless profiles to avoid resending already-applied profiles
diff --git a/changes/24469-FMA-gitops b/changes/24469-FMA-gitops
deleted file mode 100644
index 8184b94c8b..0000000000
--- a/changes/24469-FMA-gitops
+++ /dev/null
@@ -1 +0,0 @@
-- Added support for fleet maintained apps in gitops
\ No newline at end of file
diff --git a/changes/24469-fleetctl-fma-apps b/changes/24469-fleetctl-fma-apps
deleted file mode 100644
index 55449a008d..0000000000
--- a/changes/24469-fleetctl-fma-apps
+++ /dev/null
@@ -1 +0,0 @@
-* Added ability to add FMA via fleetctl YAML files
\ No newline at end of file
diff --git a/changes/24475-manual_agent_install b/changes/24475-manual_agent_install
deleted file mode 100644
index dbd3f5fd5f..0000000000
--- a/changes/24475-manual_agent_install
+++ /dev/null
@@ -1 +0,0 @@
-In macOS MDM setup experience, added macos_setup.manual_agent_install option to bypass fleetd install. Instead, fleetd should be installed via customer-customized bootstrap package.
diff --git a/changes/24878-renew-ndes b/changes/24878-renew-ndes
deleted file mode 100644
index 0e13f02ef2..0000000000
--- a/changes/24878-renew-ndes
+++ /dev/null
@@ -1 +0,0 @@
-Fleet-managed NDES certificates will be renewed 30 days before expiry for those valid longer than 30 days or when half the validity period remains for certificates valid 30 days or less. This only applies to certificates that were requested after this renewal feature was added. For hosts with NDES certificates requested prior to this renew feature, updating the profile to contain the $FLEET_VAR_SCEP_RENEWAL_ID variable in the CN and then manually resending the profile will generate a new certificate which will be automatically renewed before its next expiry.
diff --git a/changes/25700-luks-escrow-longtime b/changes/25700-luks-escrow-longtime
deleted file mode 100644
index 601a76260a..0000000000
--- a/changes/25700-luks-escrow-longtime
+++ /dev/null
@@ -1 +0,0 @@
-- Changed LUKS escrow instrucitons
diff --git a/changes/26114-new-team-with-vpp-apps b/changes/26114-new-team-with-vpp-apps
deleted file mode 100644
index 6a0233d03f..0000000000
--- a/changes/26114-new-team-with-vpp-apps
+++ /dev/null
@@ -1 +0,0 @@
-Fixed `fleetctl gitops` issue where creating a new team containing VPP apps caused an error.
diff --git a/changes/26366-update-sql-parser b/changes/26366-update-sql-parser
deleted file mode 100644
index b57dce129f..0000000000
--- a/changes/26366-update-sql-parser
+++ /dev/null
@@ -1 +0,0 @@
-- Updated the parser used when editing SQL in the UI to handle modern expressions like window functions
diff --git a/changes/26553-renew-digicert b/changes/26553-renew-digicert
deleted file mode 100644
index 096f02200d..0000000000
--- a/changes/26553-renew-digicert
+++ /dev/null
@@ -1 +0,0 @@
-Fleet-managed DigiCert certificates will be renewed 30 days before expiry for those valid longer than 30 days or when half the validity period remains for certificates valid 30 days or less. This only applies to certificates that were initially requested after this feature was added. For hosts with DigiCert certificates originally requested prior to this renew feature, manually resending the profile will generate a new certificate which will be automatically renewed before its next expiry.
diff --git a/changes/26692-upload-install-tarballs b/changes/26692-upload-install-tarballs
deleted file mode 100644
index 409ff774d1..0000000000
--- a/changes/26692-upload-install-tarballs
+++ /dev/null
@@ -1 +0,0 @@
-- Added the ability to upload and install tarball archives (.tar.gz)
\ No newline at end of file
diff --git a/changes/27003-list-host-software b/changes/27003-list-host-software
deleted file mode 100644
index 1c72f4a2ae..0000000000
--- a/changes/27003-list-host-software
+++ /dev/null
@@ -1 +0,0 @@
-* Added CVE ID as matching criteria for host software queries, in addition to software name. Also rebuild host software querying for better maintainability.
\ No newline at end of file
diff --git a/changes/27007-host-certificate-serial-display b/changes/27007-host-certificate-serial-display
deleted file mode 100644
index 86173dff85..0000000000
--- a/changes/27007-host-certificate-serial-display
+++ /dev/null
@@ -1 +0,0 @@
-Host certificates with serial numbers below 2^63 will display the decimal represntation of the serial number in addition to hex so that it is easier to match them up to what is displayed in the macOS keychain.
diff --git a/changes/27052-round-live-policy-percentages b/changes/27052-round-live-policy-percentages
deleted file mode 100644
index 3c3b734270..0000000000
--- a/changes/27052-round-live-policy-percentages
+++ /dev/null
@@ -1 +0,0 @@
-- Fix a small bug with the way live policy result percentages were being rounded
diff --git a/changes/27436-query-automation-query-ids b/changes/27436-query-automation-query-ids
deleted file mode 100644
index 881e2c6d40..0000000000
--- a/changes/27436-query-automation-query-ids
+++ /dev/null
@@ -1 +0,0 @@
-- Added query ID to query automation logs
diff --git a/changes/27445-webhook-automation-backend b/changes/27445-webhook-automation-backend
deleted file mode 100644
index 447c45c53b..0000000000
--- a/changes/27445-webhook-automation-backend
+++ /dev/null
@@ -1 +0,0 @@
-- Added webhook query automation logging
diff --git a/changes/27450-mdm-enroll-reference b/changes/27450-mdm-enroll-reference
deleted file mode 100644
index 7ff0df610c..0000000000
--- a/changes/27450-mdm-enroll-reference
+++ /dev/null
@@ -1 +0,0 @@
-- Updated Apple MDM enrollment flow to improve device-to-user mapping.
\ No newline at end of file
diff --git a/changes/27458-update-calendar-events b/changes/27458-update-calendar-events
deleted file mode 100644
index 664ce08844..0000000000
--- a/changes/27458-update-calendar-events
+++ /dev/null
@@ -1 +0,0 @@
-* Update Google Calendar event bodies and relevant previews in the Fleet UI
diff --git a/changes/27463-add-script-syntax-highlighting b/changes/27463-add-script-syntax-highlighting
deleted file mode 100644
index c18ad6ffb2..0000000000
--- a/changes/27463-add-script-syntax-highlighting
+++ /dev/null
@@ -1 +0,0 @@
-- Added shell and Powershell syntax highlighting when editing scripts
\ No newline at end of file
diff --git a/changes/27475-fix-query-page-selection-clear b/changes/27475-fix-query-page-selection-clear
deleted file mode 100644
index a950b929c1..0000000000
--- a/changes/27475-fix-query-page-selection-clear
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where selections made on the Queries page were cleared a few seconds after page load.
\ No newline at end of file
diff --git a/changes/27476-add-generate-gitops-cmd b/changes/27476-add-generate-gitops-cmd
deleted file mode 100644
index 2c7ff4d1c6..0000000000
--- a/changes/27476-add-generate-gitops-cmd
+++ /dev/null
@@ -1 +0,0 @@
-- Added "generate-gitops" command to fleetctl
\ No newline at end of file
diff --git a/changes/27477-do-not-interpolate-gitops-text-sections b/changes/27477-do-not-interpolate-gitops-text-sections
deleted file mode 100644
index 752e682154..0000000000
--- a/changes/27477-do-not-interpolate-gitops-text-sections
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue with the gitops command caused when trying to interpolate variables inside the 'description'/'remediation' sections.
\ No newline at end of file
diff --git a/changes/27501-clear-windows-mdm-info-on-linux-enroll b/changes/27501-clear-windows-mdm-info-on-linux-enroll
deleted file mode 100644
index 70f3173be4..0000000000
--- a/changes/27501-clear-windows-mdm-info-on-linux-enroll
+++ /dev/null
@@ -1 +0,0 @@
-Windows hosts which re-enroll as another OS such as Linux will no longer show Windows MDM information on the hosts page unless they later re-enroll as a Windows host again(i.e. when dual booting).
diff --git a/changes/27822-dep-host-cleanup b/changes/27822-dep-host-cleanup
deleted file mode 100644
index fcb2191c83..0000000000
--- a/changes/27822-dep-host-cleanup
+++ /dev/null
@@ -1,3 +0,0 @@
-- Fixed issue where the host expiry window caused MDM devices assigned to Fleet in Apple Business
-  Manager (ABM) to be repeatedly deleted and re-added to Fleet, which in some cases also caused the
-  device to revert to the default team.
diff --git a/changes/27854-force-profile-assign-on-abm-add b/changes/27854-force-profile-assign-on-abm-add
deleted file mode 100644
index 7d99f9369a..0000000000
--- a/changes/27854-force-profile-assign-on-abm-add
+++ /dev/null
@@ -1 +0,0 @@
-Fixed issue that when Apple device was removed/re-added to ABM, it was not getting an enrollment profile.
\ No newline at end of file
diff --git a/changes/27909-hover-checkbox-radio b/changes/27909-hover-checkbox-radio
deleted file mode 100644
index eb5b114c51..0000000000
--- a/changes/27909-hover-checkbox-radio
+++ /dev/null
@@ -1 +0,0 @@
-* Fleet UI: Added hover cursors to checkbox and radio form elements
\ No newline at end of file
diff --git a/changes/27941-GOM-shouldn't-apply-to-VPP-token b/changes/27941-GOM-shouldn't-apply-to-VPP-token
deleted file mode 100644
index a7b5cdc179..0000000000
--- a/changes/27941-GOM-shouldn't-apply-to-VPP-token
+++ /dev/null
@@ -1 +0,0 @@
-* Allow uploading a VPP when GitOps mode is enabled
\ No newline at end of file
diff --git a/changes/28032-email-to-header b/changes/28032-email-to-header
deleted file mode 100644
index f33cba695d..0000000000
--- a/changes/28032-email-to-header
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed missing To: email header
diff --git a/changes/28033-support-end-user-idp-fleet-vars b/changes/28033-support-end-user-idp-fleet-vars
deleted file mode 100644
index e5a2a2b977..0000000000
--- a/changes/28033-support-end-user-idp-fleet-vars
+++ /dev/null
@@ -1 +0,0 @@
-* Added support for `FLEET_VAR_HOST_END_USER_IDP_USERNAME`, `FLEET_VAR_HOST_END_USER_IDP_USERNAME_LOCAL_PART` and `FLEET_VAR_HOST_END_USER_IDP_GROUPS` fleet variables in macOS MDM configuration profiles.
diff --git a/changes/28049-conditional-access-fe-updates b/changes/28049-conditional-access-fe-updates
deleted file mode 100644
index 49af6e91bf..0000000000
--- a/changes/28049-conditional-access-fe-updates
+++ /dev/null
@@ -1,2 +0,0 @@
-- Add ability to set conditional access per policy, and update host policy UI to incorporate
-  conditional access data
diff --git a/changes/28054-surface-policy-count-triggering-install b/changes/28054-surface-policy-count-triggering-install
deleted file mode 100644
index 45b0c39679..0000000000
--- a/changes/28054-surface-policy-count-triggering-install
+++ /dev/null
@@ -1 +0,0 @@
-* Fleet UI: Surfaced number of policies triggering automatic install of software in software table
\ No newline at end of file
diff --git a/changes/28137-my-device-page-layout-changes b/changes/28137-my-device-page-layout-changes
deleted file mode 100644
index 0abe4469ac..0000000000
--- a/changes/28137-my-device-page-layout-changes
+++ /dev/null
@@ -1 +0,0 @@
-* Updated "My device page" layout
\ No newline at end of file
diff --git a/changes/28138-categories-be b/changes/28138-categories-be
deleted file mode 100644
index cf0dfdf456..0000000000
--- a/changes/28138-categories-be
+++ /dev/null
@@ -1 +0,0 @@
-- Added categorization for self-service software, including filtering on the "My device" page.
\ No newline at end of file
diff --git a/changes/28154-fix-gitops-dry-run-labels b/changes/28154-fix-gitops-dry-run-labels
deleted file mode 100644
index 8c7caf2021..0000000000
--- a/changes/28154-fix-gitops-dry-run-labels
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed issue where `fleetctl gitops --dry-run` would sometimes fail when creating and using labels in the same run
diff --git a/changes/28158-batch-script-backend b/changes/28158-batch-script-backend
deleted file mode 100644
index fe562cfea4..0000000000
--- a/changes/28158-batch-script-backend
+++ /dev/null
@@ -1 +0,0 @@
-- Added batch script execution backend functionality
diff --git a/changes/28159-batch-scripts b/changes/28159-batch-scripts
deleted file mode 100644
index 21ec8de5ae..0000000000
--- a/changes/28159-batch-scripts
+++ /dev/null
@@ -1 +0,0 @@
-- Implement ability to run a script on a batch of hosts with a single user flow
diff --git a/changes/28166-webhook-logging b/changes/28166-webhook-logging
deleted file mode 100644
index ee1da9a3b2..0000000000
--- a/changes/28166-webhook-logging
+++ /dev/null
@@ -1 +0,0 @@
-* Add webhook as a logging configuration option
diff --git a/changes/28240-log-invalid-soap-msg b/changes/28240-log-invalid-soap-msg
deleted file mode 100644
index bb865c7875..0000000000
--- a/changes/28240-log-invalid-soap-msg
+++ /dev/null
@@ -1 +0,0 @@
-Log invalid Windows MDM SOAP message and return 400 instead of 5XX. This change helps debug Windows MDM issues.
diff --git a/changes/28266-clean-up-settings b/changes/28266-clean-up-settings
deleted file mode 100644
index 0bfd2bd45b..0000000000
--- a/changes/28266-clean-up-settings
+++ /dev/null
@@ -1 +0,0 @@
-* Clean up various empty and configured states on the settings pages
diff --git a/changes/28343-reverting-some-mcx-validation b/changes/28343-reverting-some-mcx-validation
deleted file mode 100644
index 824ce79e9a..0000000000
--- a/changes/28343-reverting-some-mcx-validation
+++ /dev/null
@@ -1 +0,0 @@
-Removing Apple MDM profile validation checks for com.apple.MCX keys (dontAllowFDEDisable and dontAllowFDEEnable) due to customer feedback.
diff --git a/changes/28379-vpp-app-install-status b/changes/28379-vpp-app-install-status
deleted file mode 100644
index 8ccad0f8a6..0000000000
--- a/changes/28379-vpp-app-install-status
+++ /dev/null
@@ -1 +0,0 @@
-Fleet UI: Install Status correctly displays available for self-service for VPP apps
diff --git a/changes/28411-self-service-install-status b/changes/28411-self-service-install-status
deleted file mode 100644
index 15b94d57fd..0000000000
--- a/changes/28411-self-service-install-status
+++ /dev/null
@@ -1 +0,0 @@
-* Allowed viewing the status details for an (un)install via the "My device" page
diff --git a/changes/28443-add-hash-to-software-title-response b/changes/28443-add-hash-to-software-title-response
deleted file mode 100644
index 278f87fce5..0000000000
--- a/changes/28443-add-hash-to-software-title-response
+++ /dev/null
@@ -1 +0,0 @@
-- Added `hash_sha256` field to the response for the `GET /software/titles` API.
diff --git a/changes/28543-exe-edits b/changes/28543-exe-edits
deleted file mode 100644
index 29ba5c8d51..0000000000
--- a/changes/28543-exe-edits
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed spurious install/uninstall script errors on EXE software edits when install and uninstall scripts were specified.
diff --git a/changes/28616-renew-custom-scep b/changes/28616-renew-custom-scep
deleted file mode 100644
index 2bcd88b70a..0000000000
--- a/changes/28616-renew-custom-scep
+++ /dev/null
@@ -1 +0,0 @@
-Fleet-managed Custom SCEP CA certificates will be renewed 30 days before expiry for those valid longer than 30 days or when half the validity period remains for certificates valid 30 days or less. This only applies to certificates that were requested after this renewal feature was added. For hosts with Custom SCEP CA certificates requested prior to this renew feature, updating the profile to contain the $FLEET_VAR_SCEP_RENEWAL_ID variable in the CN and then manually resending the profile will generate a new certificate which will be automatically renewed before its next expiry.
diff --git a/changes/28743-gom-premium-only b/changes/28743-gom-premium-only
deleted file mode 100644
index bf8af9bb90..0000000000
--- a/changes/28743-gom-premium-only
+++ /dev/null
@@ -1 +0,0 @@
-- Show the premium feature message when viewing the GitOps mode toggle page on Fleet free
diff --git a/changes/28747-allow-advanced-save-in-GOM b/changes/28747-allow-advanced-save-in-GOM
deleted file mode 100644
index d1ac19ceb3..0000000000
--- a/changes/28747-allow-advanced-save-in-GOM
+++ /dev/null
@@ -1 +0,0 @@
-* Enable saving Integrations > Advanced in GitOps mode
diff --git a/changes/29119-restore-dep-hosts b/changes/29119-restore-dep-hosts
deleted file mode 100644
index 5371e8924d..0000000000
--- a/changes/29119-restore-dep-hosts
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed bug where Fleet failed to restore some "pending" hosts (i.e. hosts that remained assigned to
-  Fleet in Apple Business Manager) when multiple hosts are deleted from Fleet.
diff --git a/changes/48642-add-retry-to-apply-queries b/changes/48642-add-retry-to-apply-queries
deleted file mode 100644
index 9068137e49..0000000000
--- a/changes/48642-add-retry-to-apply-queries
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed issue where GitOps may fail to apply new queries due to deadlocks.
diff --git a/changes/C10298-additional-stats b/changes/C10298-additional-stats
deleted file mode 100644
index 09fa4a620c..0000000000
--- a/changes/C10298-additional-stats
+++ /dev/null
@@ -1 +0,0 @@
-- Added an additional statistic item to count ABM pending hosts.
diff --git a/changes/issue-26070-add-ui-for-manual-agent-install b/changes/issue-26070-add-ui-for-manual-agent-install
deleted file mode 100644
index 15581e859f..0000000000
--- a/changes/issue-26070-add-ui-for-manual-agent-install
+++ /dev/null
@@ -1 +0,0 @@
-- add UI for the manual agent install of a bootstrap package
diff --git a/changes/issue-26148-remove-config-settings-when-no-team-removed b/changes/issue-26148-remove-config-settings-when-no-team-removed
deleted file mode 100644
index 9d4c4710ea..0000000000
--- a/changes/issue-26148-remove-config-settings-when-no-team-removed
+++ /dev/null
@@ -1 +0,0 @@
-- remove fleet config no team settings when the no-team.yml file is removed via gitops
diff --git a/changes/issue-26505-keyboard-accssibility-to-activites b/changes/issue-26505-keyboard-accssibility-to-activites
deleted file mode 100644
index d028308ba5..0000000000
--- a/changes/issue-26505-keyboard-accssibility-to-activites
+++ /dev/null
@@ -1 +0,0 @@
-- add keyboard accessibility controls to activities on dashboard and host details pages
diff --git a/changes/issue-27198-long-host-name b/changes/issue-27198-long-host-name
deleted file mode 100644
index 6fd6e7a53d..0000000000
--- a/changes/issue-27198-long-host-name
+++ /dev/null
@@ -1 +0,0 @@
-- add truncation and a conditional tooltip for long host names on the host details page
diff --git a/changes/issue-27775-fix-activity-date-tooltip b/changes/issue-27775-fix-activity-date-tooltip
deleted file mode 100644
index dceeb64642..0000000000
--- a/changes/issue-27775-fix-activity-date-tooltip
+++ /dev/null
@@ -1,2 +0,0 @@
-- fix an issue where the upcoming host activities showed the incorrect created at date in the
-  tooltip
diff --git a/changes/update-go-1.24.2 b/changes/update-go-1.24.2
deleted file mode 100644
index 1464755592..0000000000
--- a/changes/update-go-1.24.2
+++ /dev/null
@@ -1 +0,0 @@
-* Updated go to 1.24.2.
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
index e57154901d..bcbeefdf35 100644
--- a/charts/fleet/Chart.yaml
+++ b/charts/fleet/Chart.yaml
@@ -4,11 +4,11 @@ name: fleet
 keywords:
   - fleet
   - osquery
-version: v6.6.1
+version: v6.6.2
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.67.3
+appVersion: v4.68.0
 dependencies:
   - name: mysql
     condition: mysql.enabled
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index 1085bc37fe..3815acf82a 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.67.3 # Version of Fleet to deploy
+imageTag: v4.68.0 # Version of Fleet to deploy
 # imagePullSecrets is optional.
 # imagePullSecrets:
 #   - name: docker
diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
index f3481e2d49..b9d5019228 100644
--- a/infrastructure/dogfood/terraform/aws/variables.tf
+++ b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.67.3"
+  default     = "fleetdm/fleet:v4.68.0"
 
 variable "software_inventory" {
   description = "enable/disable software inventory (default is enabled)"
diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
index 00bc5f1876..8af4df1f3a 100644
--- a/infrastructure/dogfood/terraform/gcp/variables.tf
+++ b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,8 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.67.3"
-}
+  default = "fleetdm/fleet:v4.68.0"
 
 variable "software_installers_bucket_name" {
   default = "fleet-software-installers"
diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
index 176988cfa2..b02ca38fe9 100644
--- a/tools/fleetctl-npm/package.json
+++ b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.67.3",
+  "version": "v4.68.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"
diff --git a/tools/release/publish_release.sh b/tools/release/publish_release.sh
index 397c0d1e9a..9e1ac1d2c7 100755
--- a/tools/release/publish_release.sh
+++ b/tools/release/publish_release.sh
@@ -318,20 +318,22 @@ build_changelog() {
         api_endpoint="https://api.openai.com/v1/chat/completions"
         output="null"
 
-        while [[ "$output" == "null" ]]; do
-            data_payload=$(jq -n \
-                              --arg prompt "$question" \
-                              --arg model "gpt-3.5-turbo" \
-                              '{model: $model, messages: [{"role": "user", "content": $prompt}]}')
+        # while [[ "$output" == "null" ]]; do
+        #     data_payload=$(jq -n \
+        #                       --arg prompt "$question" \
+        #                       --arg model "gpt-4o" \
+        #                       '{model: $model, messages: [{"role": "user", "content": $prompt}]}')
 
-            response=$(curl -s -X POST $api_endpoint \
-               -H "Content-Type: application/json" \
-               -H "Authorization: Bearer $open_api_key" \
-               --data "$data_payload")
+        #     response=$(curl -s -X POST $api_endpoint \
+        #        -H "Content-Type: application/json" \
+        #        -H "Authorization: Bearer $open_api_key" \
+        #        --data "$data_payload")
 
-            output=$(echo $response | jq -r .choices[0].message.content)
-            echo "${output}"
-        done
+        #     echo "${response}"
+
+        #     output=$(echo $response | jq -r .choices[0].message.content)
+        #     echo "${output}"
+        # done
 
         git checkout CHANGELOG.md
         if [[ "$target_date" == "" ]]; then
@@ -772,7 +774,7 @@ if [ "$cherry_pick_resolved" = "false" ]; then
         prs_for_issue=$(gh api repos/fleetdm/fleet/issues/$issue/timeline --paginate | jq -r '.[]' | $GREP_CMD "fleetdm/fleet/" | $GREP_CMD -oP "pulls\/\K(?:\d+)")
         echo -n "https://github.com/fleetdm/fleet/issues/$issue"
         if [[ "$prs_for_issue" == "" ]]; then
-            echo -n " - No PRs found, please verify they are not missing in the issue."
+            echo -n " - No PRs found."
         fi
         for val in $prs_for_issue; do
             echo -n " $val"