diff --git a/CHANGELOG.md b/CHANGELOG.md
index 038fb29996..5460fa100b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,109 @@
+## Fleet 4.82.0 (Mar 11, 2026)
+
+### IT Admins
+- Added support for enrolling fully managed Android hosts without a work profile.
+- Added capability to uninstall Android apps on the device (and removal from self-service in the managed Google Play store) when an app is removed from Fleet.
+- Added ability to allow or disallow end-users to bypass conditional access on a per-policy basis.
+- Added filtering by platform and add status to the Software > Add Fleet-maintained apps table.
+- Updated Android status reports to re-verify profiles that previously failed.
+- Added ability to roll back to previously added versions of Fleet-maintained apps.
+- Added new Technician role designed for help desk and IT support teams. Technicians can run scripts, view results, and install or uninstall software.
+- Added support for JIT provisioning of the Technician role via SSO SAML attributes.
+- Added automatic retries for failed software operations.
+
+### Security Engineers
+- Added ability to scan for kernel vulnerabilities on RHEL based hosts.
+- Added AWS GovCloud RDS CA certificates to the RDS MySQL TLS bundle, enabling IAM authentication for Fleet deployments connecting to RDS in AWS GovCloud regions (us-gov-east-1, us-gov-west-1).
+- Added CVE alias for python visual studio code extension.
+- Added new activity for edited enroll secrets.
+
+### Other improvements and bug fixes
+- Renamed teams and queries to fleets and reports in the UI, API, CLI, and GitOps.
+- Deprecated no-team.yml in GitOps in favor of unassigned.yml.
+- Deprecated certain API field names to reflect the renaming of "teams" to "fleets" and "queries" to "reports".
+- Updated Android MDM profiles to show up as pending on upload, the same as Apple MDM profiles.
+- Improved the speed of a database query that runs every minute to avoid database locking.
+- Added configurable body size limits for the `/api/osquery/log` and `/api/osquery/distributed/write` endpoints.
+- Updated logic to trigger vulnerability webhook when on Fleet free tier.
+- Updated storage of the auth token used in the UI.
+- Dynamically alphabetized vitals on the host details page.
+- Reworked how we handle server/worker delays to fix flaky tests.
+- Disabled "Calendar" dropdown option in Policy > Manage automations for Unassigned.
+- Added Go slog logging infrastructure and migrated a portion of the code from go-kit/log to slog.
+- Added CTA to turn on Android MDM for Android software setup experience if MDM is not configured.
+- Left-aligned "Critical" checkbox in Save policy form.
+- Improved spacing on the Controls > OS Settings page.
+- Updated to not allow editing Fleet-maintained app in the UI while GitOps mode is enabled.
+- Updated to accept the previous device authentication token for up to one rotation cycle, so the My Device page URL remains valid after token refresh.
+- Updated default macOS, iOS, and iPadOS update deadline time to 7PM (19:00) local time.
+- Updated UI to enable adding/removing multiple Microsoft Entra tenant ids.
+- Added additional logging for SCEP proxy requests and SCEP profile renewals.
+- Added warning message on gitops label rename to clarify to users that renaming a label implies a delete operation.
+- Added the ability to specify allowed Entra tenant IDs for enrollments.
+- Updated the DEP syncer to properly reassign a profile when ABM unilaterally removes it.
+- Increased the maximum script execution timeout from 1 hour (3600 seconds) to 5 hours (18000 seconds).
+- Improved error handling on AWS DB failover. Fleet will now fail health check if the primary DB is read-only, or trigger graceful shutdown when write operations encounter read-only errors.
+- Generated a server-side device token in the Okta conditional access flow when none exists or the current token is expired.
+- Moved the copy button for text areas out of the text area itself and in line with its label.
+- Removed unnecessary calls to `svc.ds.BulkSetPendingMDMHostProfiles` in `POST /api/latest/fleet/spec/fleets`.
+- Internal refactoring: moved `/api/_version_/fleet/hosts/{id:[0-9]+}/activities` endpoint and `MarkActivitiesAsStreamed` to new server/activity bounded context.
+- Added `logging.otel_logs_enabled` contributor config option to export server logs to OpenTelemetry.
+- Added automatic tagging of prerelease/post-release versions on local build based on branch name.
+- Added ability to enable/disable logs by topic.
+- Improved detection of `DISPLAY` variable in X11 sessions.
+- Updated the "Used by" column heading on the hosts page to "User email".
+- Refactored query used for deleting host_mdm_apple_profiles in bulk to use Primary keys only.
+- Added `team_id` to host details page param in URL to allow retaining team on refresh.
+- Added help text on the software details page, below the installer status table, to explain the meanings of the counts.
+- Added Country:US to new CA certs created by Fleet.
+- Added error if GitOps/batch attempts to add setup experience software when manual agent install is enabled.
+- Updated "Manage automations" button on the Queries and Policies pages to now always be visible, and disabled only when the current team has no queries of its own.
+- Updated validation rules around the creation of labels to make sure only valid platforms are used.
+- Improved host software inventory table's handling of long "Type" values.
+- Updated expiration date of the auth token cookie to match the fleet session duration.
+- Surfaced FMA version used and whether it's out of date in the UI.
+- Updated nats-server dependency to resolve dependency vulnerabilities.
+- Improved validation for host transfers.
+- Fixed matching logic on App component for pages titles.
+- Fixed adding Windows Fleet maintained apps failing when a software title with the same upgrade code already exists.
+- Fixed an issue where GitOps would not respect the value set on `update_new_hosts` for macOS updates.
+- Fixed an issue where duplicate kernels were reported in the OS versions API for RHEL-family distributions (RHEL, AlmaLinux, CentOS, Rocky, Fedora).
+- Fixed issue where Windows Jetbrains products would not report the correct version number.
+- Fixed a bug where custom software installer display names and icons were not used in the setup experience UI.
+- Fixed a bug where the list activities API endpoint would fail with a database error when there were more than 65,535 activities and no pagination parameters were specified. The maximum `per_page` for activities endpoints is now 10,000.
+- Fixed issue where MySQL IAM authentication could fail when a custom TLS CA/TLS config was set (for example GovCloud), by ensuring Fleet includes the configured TLS mode in IAM DSNs.
+- Fixed styling issues for the UI when no enroll secret is present on a fleet.
+- Fixed an issue where some UI users saw a blank gutter on the right side of parts of the UI.
+- Fixed a bug where certain macOS app names could be ingested as empty strings due to incorrect ".app" suffix removal.
+- Fixed install/uninstall tarballs package to skip recently updated status that is waiting for a change in software inventory
+- Fixed a bug where software installers could create titles with the wrong platform.
+- Fixed a bug where 2 vulnerability jobs can run in parallel if one is taking longer than 2 hours.
+- Fixed issue with hosts incorrectly reporting policy failures after policy label targets changed.
+- Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry.
+- Fixed issue where the status name was wrapping at smaller viewport widths on the mdm card on the Dashboard page.
+- Fixed false negative CVE-2026-20841 on Windows Notepad.
+- Fixed false positive CVE for Nextcloud Desktop.
+- Fixed rare CPE error when software name sanitizes to empty (e.g. only special characters).
+- Fixed Android enrollment to associate hosts with SCIM users, populating full name, groups, and department in host vitals.
+- Fixed a hover style issue in the label filter close button.
+- Fixed mismatches between disk encryption summary counts vs hosts displayed.
+- Fixed truncation of certificate fields containing non-ASCII characters.
+- Fixed an issue where policy automation settings in the Other Workflows modal reverted to stale values after saving when using a MySQL read replica.
+- Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause.
+- Fixed DB lock contention during vulnerability cron's software cleanup that caused failures under load.
+- Fixed pagination on the host software page incorrectly disabling the "Next" button when a software title has multiple installer versions.
+- Fixed a bug where macOS systems previous enrolled in fleet wouldn't always go through setup experience after a wipe
+- Fixed stale software titles list after adding a VPP or fleet-maintained app by invalidating the query cache on success.
+- Fixed issue where Windows Jetbrains products would not report the correct version number.
+- Fixed false positive `PayloadTooLargeError` errors.
+- Fixed software appearance edits not reflected until page refresh.
+- Fixed issue where policy automation retries were potentially reading stale data from replica database.
+- Fixed label edits not reflected until page refresh.
+- Fixed report creation API returning zero timestamps for `created_at` and `updated_at` fields.
+- Fixed issue where arbitrary order_key values could be used to extract data.
+- Fixed stale software titles list after deleting a software installer.
+- Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause.
+
 ## Fleet 4.81.2 (Mar 06, 2026)
 
 ### Bug fixes
diff --git a/changes/14323-order-by b/changes/14323-order-by
deleted file mode 100644
index 8797b0b228..0000000000
--- a/changes/14323-order-by
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed information disclosure vulnerability where arbitrary order_key values could be used to extract sensitive data via sort-order correlation attacks.
\ No newline at end of file
diff --git a/changes/14489-host-transfer-validations b/changes/14489-host-transfer-validations
deleted file mode 100644
index fbaf1f5d8e..0000000000
--- a/changes/14489-host-transfer-validations
+++ /dev/null
@@ -1 +0,0 @@
-- Improved validation for host transfers.
diff --git a/changes/25080-show-manage-automations-queries-policies-pages b/changes/25080-show-manage-automations-queries-policies-pages
deleted file mode 100644
index ab6dbbcf41..0000000000
--- a/changes/25080-show-manage-automations-queries-policies-pages
+++ /dev/null
@@ -1 +0,0 @@
-- The "Manage automations" button on the Queries and Policies pages is now always visible, and disabled only when the current team has no queries of its own.
diff --git a/changes/26405-jetbrains b/changes/26405-jetbrains
deleted file mode 100644
index 6df986c267..0000000000
--- a/changes/26405-jetbrains
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed issue where Windows Jetbrains products would not report the correct version number.
diff --git a/changes/29076-vuln-freetier-webhook b/changes/29076-vuln-freetier-webhook
deleted file mode 100644
index dd4179ea2e..0000000000
--- a/changes/29076-vuln-freetier-webhook
+++ /dev/null
@@ -1 +0,0 @@
-* Updated logic to trigger vulnerability webhook when on fleet free tier
\ No newline at end of file
diff --git a/changes/30670-python-cve b/changes/30670-python-cve
deleted file mode 100644
index b6c4eb1d8c..0000000000
--- a/changes/30670-python-cve
+++ /dev/null
@@ -1 +0,0 @@
-* Addded CVE alias for python visual studio code extension
\ No newline at end of file
diff --git a/changes/30967-disable-calendar-manage-policy-automations-no-team b/changes/30967-disable-calendar-manage-policy-automations-no-team
deleted file mode 100644
index 346ec0af23..0000000000
--- a/changes/30967-disable-calendar-manage-policy-automations-no-team
+++ /dev/null
@@ -1 +0,0 @@
-- Disabled "Calendar" dropdown option in Policy > Manage automations for No team.
diff --git a/changes/31919-rollback b/changes/31919-rollback
deleted file mode 100644
index df2322eddd..0000000000
--- a/changes/31919-rollback
+++ /dev/null
@@ -1 +0,0 @@
-- Added ability to roll back to previously added versions of Fleet-maintained apps.
diff --git a/changes/31919-surface-latest-fma-version b/changes/31919-surface-latest-fma-version
deleted file mode 100644
index b5ab747e25..0000000000
--- a/changes/31919-surface-latest-fma-version
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Surface FMA version used and whether it's out of date
diff --git a/changes/33519-url-team-id-param b/changes/33519-url-team-id-param
deleted file mode 100644
index 23e305fb08..0000000000
--- a/changes/33519-url-team-id-param
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Host details page includes team_id param in URL to allow retaining team on refresh
diff --git a/changes/33990-rhel-kernel-vulns b/changes/33990-rhel-kernel-vulns
deleted file mode 100644
index 774112d478..0000000000
--- a/changes/33990-rhel-kernel-vulns
+++ /dev/null
@@ -1 +0,0 @@
-- added ability to scan for kernel vulnerabilities on RHEL based hosts
\ No newline at end of file
diff --git a/changes/34122-remove-stable-scrollbar-gutters b/changes/34122-remove-stable-scrollbar-gutters
deleted file mode 100644
index b7dbf3b156..0000000000
--- a/changes/34122-remove-stable-scrollbar-gutters
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where some UI users saw a blank gutter on the right side of parts of the UI
diff --git a/changes/34370-vert-padding-ossettings b/changes/34370-vert-padding-ossettings
deleted file mode 100644
index 021a4d7c31..0000000000
--- a/changes/34370-vert-padding-ossettings
+++ /dev/null
@@ -1 +0,0 @@
-- Improved spacing on the Controls > OS Settings page
diff --git a/changes/34620-trim-app-fix b/changes/34620-trim-app-fix
deleted file mode 100644
index 2e3c5ae29c..0000000000
--- a/changes/34620-trim-app-fix
+++ /dev/null
@@ -1 +0,0 @@
-Fixed a bug where certain macOS app names could be ingested as empty strings due to incorrect ".app" suffix removal.
diff --git a/changes/34748-tooltip-truncated-host-software-type b/changes/34748-tooltip-truncated-host-software-type
deleted file mode 100644
index 0af02d9bac..0000000000
--- a/changes/34748-tooltip-truncated-host-software-type
+++ /dev/null
@@ -1 +0,0 @@
-- Improved host software inventory table's handling of long "Type" values.
\ No newline at end of file
diff --git a/changes/34990-improve-apns-query-efficiency b/changes/34990-improve-apns-query-efficiency
deleted file mode 100644
index 69f980c3f0..0000000000
--- a/changes/34990-improve-apns-query-efficiency
+++ /dev/null
@@ -1 +0,0 @@
-- Improved the speed of a database query that runs every minute, to avoid database locking
\ No newline at end of file
diff --git a/changes/35044-2-vuln-jobs b/changes/35044-2-vuln-jobs
deleted file mode 100644
index d14e2ca0cd..0000000000
--- a/changes/35044-2-vuln-jobs
+++ /dev/null
@@ -1 +0,0 @@
-Fixed a bug where 2 vulnerability jobs can run in parallel if one is taking longer than 2 hours.
diff --git a/changes/35561-move-textarea-copy-icons b/changes/35561-move-textarea-copy-icons
deleted file mode 100644
index 3355e8c62e..0000000000
--- a/changes/35561-move-textarea-copy-icons
+++ /dev/null
@@ -1 +0,0 @@
-- Moved the copy button for text areas out of the text area itself and in line with its label
diff --git a/changes/35613-android-profiles-pending b/changes/35613-android-profiles-pending
deleted file mode 100644
index 7117e8f64c..0000000000
--- a/changes/35613-android-profiles-pending
+++ /dev/null
@@ -1 +0,0 @@
-Updated Android MDM profiles to show up as pending on upload, the same as Apple MDM profiles.
diff --git a/changes/35659-android-profiles-dont-reverify b/changes/35659-android-profiles-dont-reverify
deleted file mode 100644
index 2fcafea8f1..0000000000
--- a/changes/35659-android-profiles-dont-reverify
+++ /dev/null
@@ -1 +0,0 @@
-* Changed Android status reports to re-verify profiles that previously failed.
diff --git a/changes/36355-activities-max-per_page b/changes/36355-activities-max-per_page
deleted file mode 100644
index 008aceae39..0000000000
--- a/changes/36355-activities-max-per_page
+++ /dev/null
@@ -1 +0,0 @@
-Fixed a bug where the list activities API endpoint would fail with a database error when there were more than 65,535 activities and no pagination parameters were specified. The maximum `per_page` for activities endpoints is now 10,000.
diff --git a/changes/36361-more-debug-logging-for-ca-profiles b/changes/36361-more-debug-logging-for-ca-profiles
deleted file mode 100644
index 7f2589eea5..0000000000
--- a/changes/36361-more-debug-logging-for-ca-profiles
+++ /dev/null
@@ -1 +0,0 @@
-- Added additional logging for SCEP proxy requests and SCEP profile renewals.
\ No newline at end of file
diff --git a/changes/36755-add-activity-for-modified-enroll-secrets b/changes/36755-add-activity-for-modified-enroll-secrets
deleted file mode 100644
index e6e63436a3..0000000000
--- a/changes/36755-add-activity-for-modified-enroll-secrets
+++ /dev/null
@@ -1 +0,0 @@
-* Added new activity for edited enroll secrets.
\ No newline at end of file
diff --git a/changes/37182-update-policy-membership-when-labels-change b/changes/37182-update-policy-membership-when-labels-change
deleted file mode 100644
index ee5ceecbfb..0000000000
--- a/changes/37182-update-policy-membership-when-labels-change
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed issue with hosts incorrectly reporting policy failures after policy label targets changed.
diff --git a/changes/37219-fix b/changes/37219-fix
deleted file mode 100644
index b0cfd5d01e..0000000000
--- a/changes/37219-fix
+++ /dev/null
@@ -1 +0,0 @@
-Added help text on the software details page, below the installer status table, to explain the meanings of the counts.
diff --git a/changes/37306-fix-certificate-field-truncation b/changes/37306-fix-certificate-field-truncation
deleted file mode 100644
index 9e4e3e15dc..0000000000
--- a/changes/37306-fix-certificate-field-truncation
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed truncation of certificate fields containing non-ASCII characters.
diff --git a/changes/37804-filtering-fmas b/changes/37804-filtering-fmas
deleted file mode 100644
index 25e1d2fd35..0000000000
--- a/changes/37804-filtering-fmas
+++ /dev/null
@@ -1 +0,0 @@
-* Fleet UI: Add filtering by platform and add status to the Software > Add Fleet-maintained apps table
\ No newline at end of file
diff --git a/changes/38343-use-custom-icon-display-name-in-setup-experience b/changes/38343-use-custom-icon-display-name-in-setup-experience
deleted file mode 100644
index b0978a2349..0000000000
--- a/changes/38343-use-custom-icon-display-name-in-setup-experience
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed a bug where custom software installer display names and icons were not used in the setup experience UI.
diff --git a/changes/38351-token-auth b/changes/38351-token-auth
deleted file mode 100644
index 32a76c97cb..0000000000
--- a/changes/38351-token-auth
+++ /dev/null
@@ -1,2 +0,0 @@
-- Accept the previous device authentication token for up to one rotation cycle, so the My Device page URL remains valid after token refresh.
-- Generate a server-side device token in the Okta conditional access flow when none exists or the current token is expired.
diff --git a/changes/38514-android-mdm-empty-state b/changes/38514-android-mdm-empty-state
deleted file mode 100644
index b078c5717c..0000000000
--- a/changes/38514-android-mdm-empty-state
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Show CTA to turn on Android MDM for Android software setup experience if MDM is not configured
diff --git a/changes/38534-fleet-activities-2 b/changes/38534-fleet-activities-2
deleted file mode 100644
index 424c773c8b..0000000000
--- a/changes/38534-fleet-activities-2
+++ /dev/null
@@ -1 +0,0 @@
-Internal refactoring: moved `/api/_version_/fleet/hosts/{id:[0-9]+}/activities` endpoint and `MarkActivitiesAsStreamed` to new server/activity bounded context.
diff --git a/changes/38543-disk-encryption-miscounts b/changes/38543-disk-encryption-miscounts
deleted file mode 100644
index b0fe4f4768..0000000000
--- a/changes/38543-disk-encryption-miscounts
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed mismatches between disk encryption summary counts vs hosts displayed.
diff --git a/changes/38554-populate-idp-host-vitals-android b/changes/38554-populate-idp-host-vitals-android
deleted file mode 100644
index d4b125bfc4..0000000000
--- a/changes/38554-populate-idp-host-vitals-android
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed Android enrollment to associate hosts with SCIM users, populating full name, groups, and department in host vitals.
diff --git a/changes/38607-otel-logs b/changes/38607-otel-logs
deleted file mode 100644
index b9595f1452..0000000000
--- a/changes/38607-otel-logs
+++ /dev/null
@@ -1 +0,0 @@
-Added `logging.otel_logs_enabled` contributor config option to export server logs to OpenTelemetry.
diff --git a/changes/38621-add-technician-role b/changes/38621-add-technician-role
deleted file mode 100644
index 3f94d91108..0000000000
--- a/changes/38621-add-technician-role
+++ /dev/null
@@ -1 +0,0 @@
-* Added new Technician role.
diff --git a/changes/38699-ca-cert-country b/changes/38699-ca-cert-country
deleted file mode 100644
index be89949315..0000000000
--- a/changes/38699-ca-cert-country
+++ /dev/null
@@ -1 +0,0 @@
-- Added Country:US to new CA certs created by Fleet.
diff --git a/changes/38766-uninstall-android-apps-on-fleet-remove b/changes/38766-uninstall-android-apps-on-fleet-remove
deleted file mode 100644
index e83523e09e..0000000000
--- a/changes/38766-uninstall-android-apps-on-fleet-remove
+++ /dev/null
@@ -1 +0,0 @@
-- Implemented uninstall of Android apps on the device (and removal from self-service in the managed Google Play store) when an app is removed from Fleet.
diff --git a/changes/38834-update-apple-os-update-time b/changes/38834-update-apple-os-update-time
deleted file mode 100644
index 1f860dd7e6..0000000000
--- a/changes/38834-update-apple-os-update-time
+++ /dev/null
@@ -1 +0,0 @@
-- Updated default macOS, iOS, and iPadOS update deadline time to 7PM (19:00) local time.
\ No newline at end of file
diff --git a/changes/38878-fully-managed-android b/changes/38878-fully-managed-android
deleted file mode 100644
index 349eb114aa..0000000000
--- a/changes/38878-fully-managed-android
+++ /dev/null
@@ -1 +0,0 @@
-* Added support for enrolling fully managed Android hosts without a work profile
diff --git a/changes/38889-slog-1 b/changes/38889-slog-1
deleted file mode 100644
index 49aeea0532..0000000000
--- a/changes/38889-slog-1
+++ /dev/null
@@ -1 +0,0 @@
-Added Go slog logging infrastructure and migrated a portion of the code from go-kit/log to slog.
diff --git a/changes/38911-nextcloud-cve b/changes/38911-nextcloud-cve
deleted file mode 100644
index 41dd56b20b..0000000000
--- a/changes/38911-nextcloud-cve
+++ /dev/null
@@ -1,2 +0,0 @@
-* Fixed false positive CVE for Nextcloud Desktop.
-* Fixed rare CPE error when software name sanitizes to empty (e.g. only special characters)
diff --git a/changes/38947-handle-renaming-labels-in-gitops b/changes/38947-handle-renaming-labels-in-gitops
deleted file mode 100644
index 66897d62ab..0000000000
--- a/changes/38947-handle-renaming-labels-in-gitops
+++ /dev/null
@@ -1 +0,0 @@
-* Added warning message on gitops label rename to clarify to users that renaming a label implies a delete operation.
\ No newline at end of file
diff --git a/changes/38949-policy-automations-stale-data-after-save b/changes/38949-policy-automations-stale-data-after-save
deleted file mode 100644
index c3bb6470ba..0000000000
--- a/changes/38949-policy-automations-stale-data-after-save
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where policy automation settings in the Other Workflows modal reverted to stale values after saving when using a MySQL read replica.
\ No newline at end of file
diff --git a/changes/38955-bulk-team-transfer-cause-long-db-locks b/changes/38955-bulk-team-transfer-cause-long-db-locks
deleted file mode 100644
index 01b5e95a71..0000000000
--- a/changes/38955-bulk-team-transfer-cause-long-db-locks
+++ /dev/null
@@ -1 +0,0 @@
-* Refactored query used for deleting host_mdm_apple_profiles in bulk to use Primary keys only.
\ No newline at end of file
diff --git a/changes/39000-ca-bypass-per-policy b/changes/39000-ca-bypass-per-policy
deleted file mode 100644
index b10ea24b22..0000000000
--- a/changes/39000-ca-bypass-per-policy
+++ /dev/null
@@ -1 +0,0 @@
-- Implemented ability for Fleet users to allow or disallow end-users to bypass conditional access on a per-policy basis.
\ No newline at end of file
diff --git a/changes/39048-only-default-if-update-new-hosts-not-explictly-set b/changes/39048-only-default-if-update-new-hosts-not-explictly-set
deleted file mode 100644
index e14bf44192..0000000000
--- a/changes/39048-only-default-if-update-new-hosts-not-explictly-set
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where GitOps would not respect the value set on `update_new_hosts` for macOS updates.
\ No newline at end of file
diff --git a/changes/39083-gitops-label-platform-validation b/changes/39083-gitops-label-platform-validation
deleted file mode 100644
index c216696d31..0000000000
--- a/changes/39083-gitops-label-platform-validation
+++ /dev/null
@@ -1 +0,0 @@
-* Updated validation rules around the creation of labels to make sure only valid platforms are used.
\ No newline at end of file
diff --git a/changes/39228-db-failover b/changes/39228-db-failover
deleted file mode 100644
index 41a7ccba50..0000000000
--- a/changes/39228-db-failover
+++ /dev/null
@@ -1 +0,0 @@
-Improve error handling on AWS DB failover. Fleet will now fail health check if the primary DB is read-only, or trigger graceful shutdown when write operations encounter read-only errors.
\ No newline at end of file
diff --git a/changes/39260-fix-enroll-secrets-ui b/changes/39260-fix-enroll-secrets-ui
deleted file mode 100644
index 32cf92b68e..0000000000
--- a/changes/39260-fix-enroll-secrets-ui
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed some styling issues for the UI when no enroll secret is present on a fleet.
diff --git a/changes/39264-entra-tenants b/changes/39264-entra-tenants
deleted file mode 100644
index e00176f1aa..0000000000
--- a/changes/39264-entra-tenants
+++ /dev/null
@@ -1 +0,0 @@
-* Added the ability to specify allowed Entra tenant IDs for enrollments
diff --git a/changes/39273-filter-button-hover-fix b/changes/39273-filter-button-hover-fix
deleted file mode 100644
index 166d1dfb47..0000000000
--- a/changes/39273-filter-button-hover-fix
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed a hover style issue in the label filter close button
\ No newline at end of file
diff --git a/changes/39329-rename-teams-and-queries b/changes/39329-rename-teams-and-queries
deleted file mode 100644
index b8db4f3a35..0000000000
--- a/changes/39329-rename-teams-and-queries
+++ /dev/null
@@ -1 +0,0 @@
-- Renamed teams and queries to fleets and reports in the UI.
\ No newline at end of file
diff --git a/changes/39344-deprecate-some-api-fields b/changes/39344-deprecate-some-api-fields
deleted file mode 100644
index 501b9d2acb..0000000000
--- a/changes/39344-deprecate-some-api-fields
+++ /dev/null
@@ -1 +0,0 @@
-- Deprecated certain API field names to reflect the renaming of "teams" to "fleets" and "queries" to "reports".
diff --git a/changes/39419-disable-gitops-edit-fma b/changes/39419-disable-gitops-edit-fma
deleted file mode 100644
index c9798bd858..0000000000
--- a/changes/39419-disable-gitops-edit-fma
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Do not allow editing Fleet-maintained app in the UI while GitOps mode is enabled
\ No newline at end of file
diff --git a/changes/39423-left-align-critical-checkbox-save-policy b/changes/39423-left-align-critical-checkbox-save-policy
deleted file mode 100644
index 5c809e4cc4..0000000000
--- a/changes/39423-left-align-critical-checkbox-save-policy
+++ /dev/null
@@ -1 +0,0 @@
-- Left-aligned "Critical" checkbox in Save policy form.
diff --git a/changes/39437-tarballs-ui-status b/changes/39437-tarballs-ui-status
deleted file mode 100644
index cdf662e235..0000000000
--- a/changes/39437-tarballs-ui-status
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Fix install/uninstall tarballs package to skip recently updated status that is waiting for a change in software inventory
diff --git a/changes/39522-build-workflow b/changes/39522-build-workflow
deleted file mode 100644
index 60cde8513d..0000000000
--- a/changes/39522-build-workflow
+++ /dev/null
@@ -1 +0,0 @@
-* Added automatic tagging of prerelease/post-release versions on local build based on branch name
diff --git a/changes/39608-server-worker b/changes/39608-server-worker
deleted file mode 100644
index 01b213670d..0000000000
--- a/changes/39608-server-worker
+++ /dev/null
@@ -1 +0,0 @@
-Reworked how we handle server/worker delays to fix flaky tests.
diff --git a/changes/39613-host-name-not-displayed-hostpage-software-tab b/changes/39613-host-name-not-displayed-hostpage-software-tab
deleted file mode 100644
index 615f82750c..0000000000
--- a/changes/39613-host-name-not-displayed-hostpage-software-tab
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed matching logic on App component for pages titles.
diff --git a/changes/39737-dup-kernel b/changes/39737-dup-kernel
deleted file mode 100644
index 65d73c017f..0000000000
--- a/changes/39737-dup-kernel
+++ /dev/null
@@ -1 +0,0 @@
-- resolved issue where duplicate kernels were reported in the OS versions API for RHEL-family distributions (RHEL, AlmaLinux, CentOS, Rocky, Fedora)
\ No newline at end of file
diff --git a/changes/39745-notepad-cve b/changes/39745-notepad-cve
deleted file mode 100644
index e0ba5531aa..0000000000
--- a/changes/39745-notepad-cve
+++ /dev/null
@@ -1 +0,0 @@
-Fixed false negative CVE-2026-20841 on Windows Notepad.
diff --git a/changes/39794-alphabetize-host-vitals b/changes/39794-alphabetize-host-vitals
deleted file mode 100644
index dbf9f05951..0000000000
--- a/changes/39794-alphabetize-host-vitals
+++ /dev/null
@@ -1 +0,0 @@
-- Dynamically alphabetized vitals on the host details page.
diff --git a/changes/39858-use-upgrade-code-for-title-matching b/changes/39858-use-upgrade-code-for-title-matching
deleted file mode 100644
index 2c2774ff25..0000000000
--- a/changes/39858-use-upgrade-code-for-title-matching
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed adding Windows Fleet maintained apps failing when a software title with the same upgrade code already exists.
diff --git a/changes/39871-dep-profile-removed b/changes/39871-dep-profile-removed
deleted file mode 100644
index 770b24ffbd..0000000000
--- a/changes/39871-dep-profile-removed
+++ /dev/null
@@ -1 +0,0 @@
-* Updated the DEP syncer to properly reassign a profile when ABM unilaterally removes it
diff --git a/changes/39921-fix-slow-queries-spec-teams b/changes/39921-fix-slow-queries-spec-teams
deleted file mode 100644
index a0f690dd5e..0000000000
--- a/changes/39921-fix-slow-queries-spec-teams
+++ /dev/null
@@ -1 +0,0 @@
-* Removed unnecessary calls to `svc.ds.BulkSetPendingMDMHostProfiles` in `POST /api/latest/fleet/spec/fleets`.
diff --git a/changes/40028-otel-client-errors b/changes/40028-otel-client-errors
deleted file mode 100644
index 28e8a4f45e..0000000000
--- a/changes/40028-otel-client-errors
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry.
diff --git a/changes/40124-add-log-topics b/changes/40124-add-log-topics
deleted file mode 100644
index d41b082cee..0000000000
--- a/changes/40124-add-log-topics
+++ /dev/null
@@ -1 +0,0 @@
-- Added ability to enable/disable logs by topic
diff --git a/changes/40189-update-used-by-heading b/changes/40189-update-used-by-heading
deleted file mode 100644
index 4d70bb9711..0000000000
--- a/changes/40189-update-used-by-heading
+++ /dev/null
@@ -1 +0,0 @@
-* Updated the "Used by" column heading on the hosts page to "User email"
\ No newline at end of file
diff --git a/changes/40433-deprecate-no-team-yml b/changes/40433-deprecate-no-team-yml
deleted file mode 100644
index c64232cb1a..0000000000
--- a/changes/40433-deprecate-no-team-yml
+++ /dev/null
@@ -1 +0,0 @@
-- Deprecated no-team.yml in GitOps in favor of unassigned.yml.
\ No newline at end of file
diff --git a/changes/40476-fix-query-results-cleanup-placeholder-limit b/changes/40476-fix-query-results-cleanup-placeholder-limit
deleted file mode 100644
index 59831517b7..0000000000
--- a/changes/40476-fix-query-results-cleanup-placeholder-limit
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause.
diff --git a/changes/40606-invalidate-software-titles b/changes/40606-invalidate-software-titles
deleted file mode 100644
index a5b142d60b..0000000000
--- a/changes/40606-invalidate-software-titles
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed stale software titles list after deleting a software installer.
diff --git a/changes/40725-fix-macos-setup b/changes/40725-fix-macos-setup
deleted file mode 100644
index edb3d23dd9..0000000000
--- a/changes/40725-fix-macos-setup
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed a bug where macOS systems previous enrolled in fleet wouldn't always go through setup experience after a wipe
diff --git a/changes/40807-fix-label-edits-not-reflected-until-refresh b/changes/40807-fix-label-edits-not-reflected-until-refresh
deleted file mode 100644
index c173494df4..0000000000
--- a/changes/40807-fix-label-edits-not-reflected-until-refresh
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed label edits not reflected until page refresh.
diff --git a/changes/40811-fix-software-edit-not-reflected-until-refresh b/changes/40811-fix-software-edit-not-reflected-until-refresh
deleted file mode 100644
index 8412613421..0000000000
--- a/changes/40811-fix-software-edit-not-reflected-until-refresh
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed software appearance edits not reflected until page refresh.
diff --git a/changes/40813-increase-osquery-log-endpoint-body-size b/changes/40813-increase-osquery-log-endpoint-body-size
deleted file mode 100644
index 37af6546c0..0000000000
--- a/changes/40813-increase-osquery-log-endpoint-body-size
+++ /dev/null
@@ -1,2 +0,0 @@
-* Added configurable body size limits for the `/api/osquery/log` and `/api/osquery/distributed/write` endpoints.
-* Fixed false positive `PayloadTooLargeError` errors.
\ No newline at end of file
diff --git a/changes/40855-policy-replica-lag b/changes/40855-policy-replica-lag
deleted file mode 100644
index a9481ebdd2..0000000000
--- a/changes/40855-policy-replica-lag
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed issue where policy automation retries were potentially reading stale data from replica database.
\ No newline at end of file
diff --git a/changes/41233-host-software-has-results b/changes/41233-host-software-has-results
deleted file mode 100644
index 9f956018e0..0000000000
--- a/changes/41233-host-software-has-results
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed pagination on the host software page incorrectly disabling the "Next" button when a software title has multiple installer versions.
diff --git a/changes/41242-jit-technician-role b/changes/41242-jit-technician-role
deleted file mode 100644
index 1a83261592..0000000000
--- a/changes/41242-jit-technician-role
+++ /dev/null
@@ -1 +0,0 @@
-* Added support for JIT provisioning of the Technician role via SSO SAML attributes.
diff --git a/changes/41290-invalidate-software-titles-cache-after-add b/changes/41290-invalidate-software-titles-cache-after-add
deleted file mode 100644
index 6109d81e15..0000000000
--- a/changes/41290-invalidate-software-titles-cache-after-add
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed stale software titles list after adding a VPP or fleet-maintained app by invalidating the query cache on success.
diff --git a/changes/41374-unused-software b/changes/41374-unused-software
deleted file mode 100644
index ff8ecdff39..0000000000
--- a/changes/41374-unused-software
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed DB lock contention during vulnerability cron's software cleanup that caused failures under load.
diff --git a/changes/fix-query-results-cleanup-placeholder-limit b/changes/fix-query-results-cleanup-placeholder-limit
deleted file mode 100644
index 59831517b7..0000000000
--- a/changes/fix-query-results-cleanup-placeholder-limit
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause.
diff --git a/changes/fix-report-creation-timestamps b/changes/fix-report-creation-timestamps
deleted file mode 100644
index 320cee87d0..0000000000
--- a/changes/fix-report-creation-timestamps
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed report creation API returning zero timestamps for `created_at` and `updated_at` fields.
diff --git a/changes/increase-script-timeout-to-5-hours b/changes/increase-script-timeout-to-5-hours
deleted file mode 100644
index 3891516dc5..0000000000
--- a/changes/increase-script-timeout-to-5-hours
+++ /dev/null
@@ -1 +0,0 @@
-* Increased the maximum script execution timeout from 1 hour (3600 seconds) to 5 hours (18000 seconds).
diff --git a/changes/issue-14401-update-auth-token-storage b/changes/issue-14401-update-auth-token-storage
deleted file mode 100644
index 0e3ecda2e3..0000000000
--- a/changes/issue-14401-update-auth-token-storage
+++ /dev/null
@@ -1 +0,0 @@
-- update storage of the auth token used in the UI; move if from local storage to a cookie.
diff --git a/changes/issue-38654-table-wrapping-mdm-card b/changes/issue-38654-table-wrapping-mdm-card
deleted file mode 100644
index 676e1c4933..0000000000
--- a/changes/issue-38654-table-wrapping-mdm-card
+++ /dev/null
@@ -1 +0,0 @@
-- fixed issue where the status name was wrapping at smaller viewport witdths on the mdm card on the Dashboard page
diff --git a/changes/issue-39266-update-ui-for-multiple-entra-tenant-ids b/changes/issue-39266-update-ui-for-multiple-entra-tenant-ids
deleted file mode 100644
index 2bafe27528..0000000000
--- a/changes/issue-39266-update-ui-for-multiple-entra-tenant-ids
+++ /dev/null
@@ -1 +0,0 @@
-- update UI to enable adding/removing multiple Microsoft Entra tenant ids
diff --git a/changes/issue-41262-update-authtoken-expiry b/changes/issue-41262-update-authtoken-expiry
deleted file mode 100644
index aa919c4a8e..0000000000
--- a/changes/issue-41262-update-authtoken-expiry
+++ /dev/null
@@ -1 +0,0 @@
-- Updated expiration date of the auth token cookie to match the fleet session duration
diff --git a/changes/nats-bump b/changes/nats-bump
deleted file mode 100644
index e23e9ffe1a..0000000000
--- a/changes/nats-bump
+++ /dev/null
@@ -1 +0,0 @@
-* Updated nats-server dependency to resolve dependency vulnerabilities
diff --git a/changes/rds-iam-custom-ca-tls b/changes/rds-iam-custom-ca-tls
deleted file mode 100644
index e71bcb8a87..0000000000
--- a/changes/rds-iam-custom-ca-tls
+++ /dev/null
@@ -1 +0,0 @@
-Fixed issue where MySQL IAM authentication could fail when a custom TLS CA/TLS config was set (for example, GovCloud), by ensuring Fleet includes the configured TLS mode in IAM DSNs.
diff --git a/changes/rdsmysql-govcloud-certs b/changes/rdsmysql-govcloud-certs
deleted file mode 100644
index 404649e549..0000000000
--- a/changes/rdsmysql-govcloud-certs
+++ /dev/null
@@ -1 +0,0 @@
-* Added AWS GovCloud RDS CA certificates to the RDS MySQL TLS bundle, enabling IAM authentication for Fleet deployments connecting to RDS in AWS GovCloud regions (us-gov-east-1, us-gov-west-1).
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
index 07ed9d581b..223d4cc1fd 100644
--- a/charts/fleet/Chart.yaml
+++ b/charts/fleet/Chart.yaml
@@ -4,11 +4,11 @@ name: fleet
 keywords:
   - fleet
   - osquery
-version: v6.8.3
+version: v6.8.5
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.81.2
+appVersion: v4.82.0
 dependencies:
   - name: mysql
     condition: mysql.enabled
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index c708ed5d3e..4a4b98c9bb 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -4,7 +4,7 @@ hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 revisionHistoryLimit: 10 # Number of old ReplicaSets for Fleet deployment to retain for rollback (set to 0 for unlimited)
 imageRepository: fleetdm/fleet
-imageTag: v4.81.2 # Version of Fleet to deploy
+imageTag: v4.82.0 # Version of Fleet to deploy
 # imagePullSecrets is optional.
 # imagePullSecrets:
 #   - name: docker
diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
index 92af0f61fd..f4a15c22a6 100644
--- a/infrastructure/dogfood/terraform/aws/variables.tf
+++ b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.81.2"
+  default     = "fleetdm/fleet:v4.82.0"
 }
 
 variable "software_inventory" {
diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
index 4f0a96a46f..f533fb2449 100644
--- a/infrastructure/dogfood/terraform/gcp/variables.tf
+++ b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,7 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.81.2"
+  default = "fleetdm/fleet:v4.82.0"
 
 variable "software_installers_bucket_name" {
   default = "fleet-software-installers"
diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
index 253aca4fbc..28c3785ec7 100644
--- a/tools/fleetctl-npm/package.json
+++ b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.81.2",
+  "version": "v4.82.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"