Luke Heath
+76
-1
@@ -1,8 +1,83 @@
|
||||
## Fleet 4.71.0 (Jul 23, 2025)
|
||||
|
||||
### Security Engineers
|
||||
- Updated CIS benchmarks for Windows 10 to version 3.
|
||||
- Added support for IdP-based labels.
|
||||
- Added last opened time for Windows applications.
|
||||
- Updated `GET /hosts/:id/encryption_key` to return most recently archived encryption key if current key is not available.
|
||||
- Added support for ingesting user's "Department" via SCIM and added support to set the `FLEET_VAR_HOST_END_USER_IDP_DEPARTMENT` variable on configuration profiles.
|
||||
- Cleaned up false-positive vulnerabilities on Amazon Linux 2 hosts reported in Fleet <= 4.55.
|
||||
|
||||
### IT Admins
|
||||
- Added the verification of user-scoped profiles on macOS.
|
||||
- Added last opened time for Windows applications.
|
||||
- Updated Windows Custom OS Settings including Win32/Desktop Bridge ADMX policies to now be marked verified after the host has acknowledged the MDM install command.
|
||||
- Added support for "Host Vitals" label, starting with IdP-based labels which update automatically including after software installs.
|
||||
- Displayed VPP apps installed on a host in the UI after command is acknowledged.
|
||||
- Updated `GET /hosts/:id/encryption_key` to return most recently archived encryption key if current key is not available.
|
||||
- Increased how often Fleet checks for new Fleet-maintained apps, from once per day to once per hour.
|
||||
- Improved GitOps speed when managing software with hashes on a large number of teams.
|
||||
- Separated host details software list into two separate sections: Inventory (software installed on a host) and Library (software available for installation on a host).
|
||||
- Updated Apple profile verification code to disallow uploading profiles with the same identifier but differing PayloadScopes.
|
||||
- Recorded installer URL when a Fleet-maintained app is added via the web UI or REST API.
|
||||
- Added support for ingesting user's "Department" via SCIM and added support to set the `FLEET_VAR_HOST_END_USER_IDP_DEPARTMENT` variable on configuration profiles.
|
||||
- Added support for the Apple MDM user channel. When a mobileconfig with a payloadscope of User is targeted for a host with a user channel connection, it will now be sent to the user channel.
|
||||
- Added ability to add EULA end user sees during setup experience via gitops.
|
||||
|
||||
### Other improvements and bug fixes
|
||||
- Added user property `api_only` to backend activity details.
|
||||
- Replaced email with user full name for login activity.
|
||||
- Added a new avatar for API-only users in the activity feed.
|
||||
- Updated side navigation styles across the app.
|
||||
- Added premium tier messaging to the certificates section on the integrations page.
|
||||
- Removed ability to upload a EULA in the UI if gitops is enabled.
|
||||
- Migrated from `aws-sdk-go` v1 to `aws-sdk-go-v2`.
|
||||
- Optimized database queries for MDM enrollment checks when one host is being checked at a time.
|
||||
- Replaced own SAML implementation with https://github.com/crewjam/saml.
|
||||
- Increased page size for software versions shown on the software view page from 5 to 10.
|
||||
- Added retries in `PATCH` policies API requests to fix deadlock errors in "Manage automations" page.
|
||||
- Added missing team_name property on `/api/v1/fleet/hosts/identifier/:id` endpoint.
|
||||
- Added missing "url" parameter when exporting YAML on software packages that have a URL specified (thanks @drvcodenta!)
|
||||
- Improved performance when pulling team settings on osquery config and distributed read endpoints.
|
||||
- Allowed team selection and name updates when saving a copy of an existing query as a new query.
|
||||
- Updated Fleet maintained apps uninstall script to use `pkgutil` to remove applications files.
|
||||
- Added functionality for verifying installation of VPP apps.
|
||||
- Moved the SSO and Host status webhook settings from Settings > Organization to Settings > Integrations.
|
||||
- Updated software installed activities created during setup experience correctly categorized as from automation.
|
||||
- Fixed cases where valid operating system vulnerabilities would be periodically incorrectly purged.
|
||||
- Fixed details not showing when the device page URL was edited.
|
||||
- Fixed an issue where the `fleetctl` codesignature requirements couldn't be used to verify the codesignature of `fleetctl`.
|
||||
- Fixed issue where IdP integration page did not show the premium feature message.
|
||||
- Fixed bug present on gitops cmd when importing no-team.yml with scripts without default.yml.
|
||||
- Fixed a bug where Fleet-maintained app updates via GitOps wouldn't pull the latest version of Google Chrome on each run, and would display an invalid SHA256 hash in the UI and API.
|
||||
- Fixed host API to returns empty array (instead of 404) if software title or version is not found on hosts on that team consistent with other host filters.
|
||||
- Fixed bug with the run script modal on the Hosts page when running under FreeTier due to invalid teamId filter.
|
||||
- Fixed a case where host software counts wouldn't be updated if the host_software database table included one or more rows with a zero `software_id`.
|
||||
- Fixed issue where attempting to lock an MDM-unenrolled macOS host was not returning the expected error.
|
||||
- Fixed error when deleting a calendar event for a Google Workspace user that no longer exists.
|
||||
- Fixed `fleetctl` panic caused by missing SSO settings during gitops generate.
|
||||
- Fixed software title ID + installer status filters to return an empty array with 0 count instead of 404 when an installer is not present on a team.
|
||||
- Fixed issue where iOS devices were not refetching at the expected cadence when re-enrolled without first deleting the host.
|
||||
- Fixed cases where valid operating system vulnerabilities would be periodically incorrectly purged.
|
||||
- Fixed issue with `PATCH /fleet/scim/Groups/<group name>` endpoint handling duplicate entries.
|
||||
- Fixed bug with calendar/webhook endpoint that caused an error if the calendar event relates to a deleted host.
|
||||
- Fixed host details > MDM OS settings tooltips from flashing during a host refetch.
|
||||
- Fixed an issue where `macos_setup` would not always be exported by `fleetctl generate-gitops` when it should have been.
|
||||
- Fixed host certificate source recording (including associated performance/database load issues) when multiple hosts share the same certificate on user keychains with differing usernames.
|
||||
- Fixed software package version output in generated GitOps YAML.
|
||||
- Fixed truncation of the MDM server url value on the about card on host details page.
|
||||
- Fixed a bug that prevented users from adding VPP apps to macOS setup experience if the iOS version of the app was also added to their team software library.
|
||||
- Fixed cases where installed-then-uninstalled software would show up in software inventory.
|
||||
- Fixed automation tooltip not showing the correct filesystem log destination.
|
||||
- Fixed SSO settings page returning 500 when SSO settings are undefined.
|
||||
- Fixed the linux uninstall script.
|
||||
- Fixed broken macOS users causing errors during query ingestion.
|
||||
|
||||
## Fleet 4.70.1 (Jul 09, 2025)
|
||||
|
||||
### Bug fixes
|
||||
|
||||
* Fixed host certificate source recording (including associated performance/database load issues) when multiple hosts share the same certificate on user keychains with differing usernames.
|
||||
- Fixed host certificate source recording (including associated performance/database load issues) when multiple hosts share the same certificate on user keychains with differing usernames.
|
||||
- Fixed fleetctl panic caused by missing SSO settings during gitops generate.
|
||||
- Fixed SSO settings page returning 500 when SSO settings are undefined.
|
||||
|
||||
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed bug with calendar/webhook endpoint that caused an error if the calendar event relates to a deleted host.
|
||||
@@ -1 +0,0 @@
|
||||
- Allow team selection and name updates when saving a copy of an existing query as a new query
|
||||
@@ -1 +0,0 @@
|
||||
* Update side nave styles across the app
|
||||
@@ -1 +0,0 @@
|
||||
* Cleaned up false-positive vulnerabilities on Amazon Linux 2 hosts reported in Fleet <= 4.55
|
||||
@@ -1 +0,0 @@
|
||||
- Fleet UI: Fixed host details > MDM OS settings tooltips from flashing during a host refetch
|
||||
@@ -1 +0,0 @@
|
||||
- Add support for IdP-based labels
|
||||
@@ -1,2 +0,0 @@
|
||||
* Move the SSO and Host status webhook settings from Settings > Organization to Settings >
|
||||
Integrations
|
||||
@@ -1 +0,0 @@
|
||||
- Updated CIS benchmark for Windows 10 to version 3
|
||||
@@ -1,2 +0,0 @@
|
||||
- Fixed issue where iOS devices were not refetching at the expected cadence when re-enrolled without first
|
||||
deleting the host.
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed software title ID + installer status filters to return an empty array with 0 count instead of 404 when an installer is not present on a team
|
||||
@@ -1 +0,0 @@
|
||||
Fixed error when deleting a calendar event for a Google Workspace user that no longer exists.
|
||||
@@ -1 +0,0 @@
|
||||
* Added missing team_name property on /api/v1/fleet/hosts/identifier/:id endpoint.
|
||||
@@ -1 +0,0 @@
|
||||
* Windows Custom OS Settings including Win32/Desktop Bridge ADMX policies are now marked verified after the host has acknowledged the MDM install command
|
||||
@@ -1 +0,0 @@
|
||||
- Added a new avatar for API-only users in the activity feed
|
||||
@@ -1 +0,0 @@
|
||||
- Added whether user is api_only to backend activity details
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed automation tooltip not showing the correct filesystem log destination
|
||||
@@ -1 +0,0 @@
|
||||
* Add last opened time for Windows software (programs)
|
||||
@@ -1 +0,0 @@
|
||||
* Updated fleet maintained apps uninstall script to use pkgutil to remove applications files
|
||||
@@ -1 +0,0 @@
|
||||
* Added support for the Apple MDM user channel. When a mobileconfig with a payloadscope of User is targeted for a host with a user channel connection, it will now be sent to the user channel
|
||||
@@ -1 +0,0 @@
|
||||
* Added retries in `PATCH` policies API requests to fix deadlock errors in "Manage automations" page.
|
||||
@@ -1 +0,0 @@
|
||||
* Migrated from `aws-sdk-go` v1 to `aws-sdk-go-v2`.
|
||||
@@ -1,2 +0,0 @@
|
||||
- Fixed a bug that prevented users from adding VPP apps to macOS setup experience if the iOS version
|
||||
of the app was also added to their team software library.
|
||||
@@ -1 +0,0 @@
|
||||
* Added support for ingesting user's "Department" via SCIM and added support to set the `FLEET_VAR_HOST_END_USER_IDP_DEPARTMENT` variable on configuration profiles.
|
||||
@@ -1 +0,0 @@
|
||||
* Added missing "url" parameter when exporting YAML on software packages that have a URL specified (thanks @drvcodenta!)
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed software package version output in generated GitOps YAML
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed bug present on gitops cmd when importing no-team.yml with scripts without default.yml.
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed broken macos users causing errors during query ingestion
|
||||
@@ -1 +0,0 @@
|
||||
- Fleet UI: Separate Host details > Software into two separate section: 1. Inventory (software installed on a host) 2. Library (software available for installation on a host)
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed bug with the run script modal on the Hosts page when running under FreeTier due to invalid teamId filter.
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed host API to returns empty array (instead of 404) if software title or version is not found on hosts on that team consistent with other host filters
|
||||
@@ -1 +0,0 @@
|
||||
- Adds functionality for verifying installation of VPP apps.
|
||||
@@ -1 +0,0 @@
|
||||
* Updated Apple profile verification code to disallow uploading profiles with the same identifier but differing PayloadScopes
|
||||
@@ -1 +0,0 @@
|
||||
* Added the verification of user-scoped profiles on darwin.
|
||||
@@ -1 +0,0 @@
|
||||
- Fleet UI: Surfaced whether VPP apps are installs on a host after command is acknowledged.
|
||||
@@ -1 +0,0 @@
|
||||
* Software installed activities created during setup experience correctly categorized as from automation
|
||||
@@ -1 +0,0 @@
|
||||
* Added automatic host vitals refetch when a software install or uninstall is successful
|
||||
@@ -1,2 +0,0 @@
|
||||
- Updated `GET /hosts/:id/encryption_key` to return most recently archived encryption key if current key is
|
||||
not available.
|
||||
@@ -1 +0,0 @@
|
||||
- Replaced email with user full name for login activity
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed cases where valid operating system vulnerabilities would be periodically incorrectly purged
|
||||
@@ -1 +0,0 @@
|
||||
- Added support for "Host Vitals" label, starting with IdP-based labels
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed issue with `PATCH /fleet/scim/Groups/<group name>` endpoint handling duplicate entries.
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed cases where installed-then-uninstalled software would show up in software inventory
|
||||
@@ -1,2 +0,0 @@
|
||||
- Fixed issue where attempting to lock an MDM-unenrolled macOS host was not returning the expected
|
||||
error.
|
||||
@@ -1 +0,0 @@
|
||||
* Optimized database queries for MDM enrollment checks when one host is being checked at a time.
|
||||
@@ -1 +0,0 @@
|
||||
* Improved performance when pulling team settings on osquery config and distributed read endpoints
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed the linux uninstall script
|
||||
@@ -1 +0,0 @@
|
||||
* Recorded installer URL when a Fleet-maintained app is added via the web UI or REST API
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a bug where Fleet-maintained app updates via GitOps wouldn't pull the latest version of Google Chrome on each run, and would display an invalid SHA256 hash in the UI and API
|
||||
@@ -1 +0,0 @@
|
||||
* Improved GitOps speed when managing software with hashes on a large number of teams
|
||||
@@ -1 +0,0 @@
|
||||
* Switched page size for software versions shown on the software view page from 5 to 10.
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed an issue where macos_setup would not always be exported by `fleetctl generate-gitops` when it should have been
|
||||
@@ -1 +0,0 @@
|
||||
* Fixed a case where host software counts wouldn't be updated if the host_software database table included one or more rows with a zero software_id
|
||||
@@ -1 +0,0 @@
|
||||
- Fixed Details not showing up when the device page URL was edited
|
||||
@@ -1 +0,0 @@
|
||||
* Replaced own SAML implementation with https://github.com/crewjam/saml.
|
||||
@@ -1 +0,0 @@
|
||||
* Increased how often Fleet checks for new Fleet-maintained apps, from once per day to once per hour
|
||||
@@ -1 +0,0 @@
|
||||
- remove ability to upload a EULA in the UI if gitops is enabled
|
||||
@@ -1 +0,0 @@
|
||||
- add ability to add EULA end user sees during setup experience via gitops
|
||||
@@ -1 +0,0 @@
|
||||
- fix issue where idp integration page would not show the premium feature message.
|
||||
@@ -1 +0,0 @@
|
||||
- add premium tier messaging to the certificates section on the integrations page
|
||||
@@ -1 +0,0 @@
|
||||
- fix truncation of the mdm server url value on the about card on host details page
|
||||
@@ -1 +0,0 @@
|
||||
- Fixes an issue where the fleetctl codesignature requirements couldn't be used to verify the codesignature of fleetctl.
|
||||
@@ -4,11 +4,11 @@ name: fleet
|
||||
keywords:
|
||||
- fleet
|
||||
- osquery
|
||||
version: v6.6.9
|
||||
version: v6.6.10
|
||||
home: https://github.com/fleetdm/fleet
|
||||
sources:
|
||||
- https://github.com/fleetdm/fleet.git
|
||||
appVersion: v4.70.1
|
||||
appVersion: v4.71.0
|
||||
dependencies:
|
||||
- name: mysql
|
||||
condition: mysql.enabled
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
hostName: fleet.localhost
|
||||
replicas: 3 # The number of Fleet instances to deploy
|
||||
imageRepository: fleetdm/fleet
|
||||
imageTag: v4.70.1 # Version of Fleet to deploy
|
||||
imageTag: v4.71.0 # Version of Fleet to deploy
|
||||
# imagePullSecrets is optional.
|
||||
# imagePullSecrets:
|
||||
# - name: docker
|
||||
|
||||
@@ -56,7 +56,7 @@ variable "database_name" {
|
||||
|
||||
variable "fleet_image" {
|
||||
description = "the name of the container image to run"
|
||||
default = "fleetdm/fleet:v4.70.1"
|
||||
default = "fleetdm/fleet:v4.71.0"
|
||||
|
||||
variable "software_inventory" {
|
||||
description = "enable/disable software inventory (default is enabled)"
|
||||
|
||||
@@ -68,7 +68,7 @@ variable "redis_mem" {
|
||||
}
|
||||
|
||||
variable "image" {
|
||||
default = "fleetdm/fleet:v4.70.1"
|
||||
default = "fleetdm/fleet:v4.71.0"
|
||||
|
||||
variable "software_installers_bucket_name" {
|
||||
default = "fleet-software-installers"
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "fleetctl",
|
||||
"version": "v4.70.1",
|
||||
"version": "v4.71.0",
|
||||
"description": "Installer for the fleetctl CLI tool",
|
||||
"bin": {
|
||||
"fleetctl": "./run.js"
|
||||
|
||||
Reference in New Issue
Block a user