diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8950810a6a..cc53bea08c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,82 @@
+## Fleet 4.65.0 (Mar 14, 2025)
+
+## Security engineering
+- Added UI for viewing certificate details on the host details and my device pages.
+- Added new features to include certificates in host vitals for macOS, iOS, and iPadOS.
+- Added the list host certificates (and list device's certificates) endpoints.
+- Improved the copy for the delete and transfer host modal to be more clear about the disk encryption key behavior.
+- Permit setting SSO metadata and metadata_url in gitops and UI.
+- Fixed an issue where the Show Query modal would truncate large queries.
+
+## Vulnerability management
+- Fixed Python for Windows software version mutation to avoid panics on software ingestion in some cases.
+- Prevented an invalid `FLEET_VULNERABILITIES_MAX_CONCURRENCY` value from causing deadlocks during vulnerability processing.
+- Updated default for vulnerabilities max concurrency from 5 to 1.
+- Updated CPE generation to more closely align with CPEs use in vulnerability feeds.
+- Changed software version CVE resolved in version parsing and comparison to use custom code rather than semver.
+- Added new (as of 2025-03-07) archives page to data source for MS Mac Office vulnerability feed (applies to vulnerabilities feed rather than a specific Fleet release).
+- Fixed an issue with Fleet's processing of Python versions to ensure that the correct CPEs are checked for vulnerabilities.
+- Fixed an issue with increased resource usage during vulnerabilities processing by adding database indexes.
+- Fixed false-positives on released PowerShell versions for CVE-2025-21171 and all PowerShell versions on CVE-2023-48795.
+
+## IT engineering
+- Implemented GitOps mode that locks settings in the UI that are managed by GitOps.
+- Allowed VPP apps to be automatically installed via a Fleet-created policy. 
+- Added ability for users to automatically install App Store Apps without writing a policy in the Fleet UI.
+- Updated the UI for adding and editing software for a cleaner, cohesive experience.
+- Added auto-install to FMA via the API, replacing a more brittle client-side implementation.
+- Added pagination inside each of the Manage Automations modals for policies.
+- Added script execution to the new `upcoming_activities` table.
+- Added software installs to the new `upcoming_activities` table.
+- Added vpp apps installs to the new `upcoming_activities` table.
+- Updated the list upcoming activities endpoint to use the new `upcoming_activities` table as source of truth.
+- Added support to activate the next activity when one is enqueued or when one is completed.
+- Added UI to the BYOD enrollment page to support enrolling Android devices into Fleet MDM.
+- Added UI to turn on and off Android MDM.
+- Added Android MDM activities.
+> **NOTE:** Android features are currently experimental and disabled by default. To enable, set `ANDROID_FEATURE_ENABLED=1`.
+- Updated UI for device user page with improved instructions for turning on MDM.
+- Added `PATCH /api/latest/fleet/software/titles/:id/name` endpoint for cleaning up incorrect software titles for software that has a bundle ID.
+- Added a daily job that keeps the App Store app version displayed in Fleet in sync with the actual latest version.
+- Properly re-routed deleting a app on no team to no team software page insteal of all teams software page.
+- Added a DB migration to migrate existing pending activities to the new unified queue.
+- Added created_at timestamp for when a VPP app was added to a specific team.
+> **NOTE:** The database migration for the above hydrates timestamps for existing VPP app team associations based on when the associated VPP apps were first added to the database. To hydrate more accurate timestamps by pulling from VPP app add/edit activities, you can run the following query manually. It is not included in migrations as it requires full table scans of the `activities` table, which may result in long migration times.
+```sql
+UPDATE vpp_apps_teams vat
+LEFT JOIN (SELECT MAX(created_at) added_at, details->>"$.app_store_id" adam_id, details->>"$.platform" platform, details->>"$.team_id" team_id
+    	FROM activities WHERE activity_type = 'added_app_store_app' GROUP BY adam_id, platform, team_id) aa ON
+	vat.global_or_team_id = aa.team_id AND vat.adam_id = aa.adam_id AND vat.platform = aa.platform
+LEFT JOIN (SELECT MAX(created_at) edited_at, details->>"$.app_store_id" adam_id, details->>"$.platform" platform, details->>"$.team_id" team_id
+		FROM activities WHERE activity_type = 'edited_app_store_app' GROUP BY adam_id, platform, team_id) ae ON
+	vat.global_or_team_id = ae.team_id AND vat.adam_id = ae.adam_id AND vat.platform = ae.platform
+SET vat.created_at = COALESCE(added_at, vat.created_at), vat.updated_at = COALESCE(edited_at, added_at, vat.updated_at);
+```
+- Fixed an issue with assigning Windows MDM profiles to large numbers (> 65k) of hosts by batching the relevant database queries.
+- Fixed policy software automation that falsely reported success in UI when updates actually failed. Users will now be properly notified of failed automation saves.
+- Fixed a bug where uploading a macOS installer could prevent the software from being inventoried.
+- Fixed a bug where target selector was present in a premature stage.
+- Fixed a bug that caused macOS App Store apps to show up in Fleet as Windows apps if the Windows ersion of the app was already in Fleet.
+- Fixed an issue where the ABM token teams were being reset when making updates to the app config.
+- Fixed parsing of relative paths for MDM profiles in gitops `no-team.yml`.
+- Fixed a bug where new `fleetd` could not install software from old fleet server.
+- Fixed issue where `fleetctl gitops` was NOT deleting macOS setup experience bootstrap package and enrollment profile. GitOps should clear all settings that are not explicitly set in YAML config files.
+
+## Bug fixes and improvements
+- Set collation and character set explicitly on database tables that were missing explicit values.
+- Updated the copy printed on successful runs of `fleetctl package`.
+- Enabled redis cluster follow redierctions by default.
+- Switched to a simpler, more reliable query for checking if an initial admin user has been added.
+- Updated the styling of the "Used by" line on host details page to be easier to read and include more data in the tooltip.
+- Added constistent behavior for table overflow and not hiding badges when user names overflow table cell.
+- Updated wine to version 10.0 to improve support macOS-to-Windows installer creation on M1 chips.
+- Updated UI to always show "Manage Automations" to permitted users.
+- Fixed clicking "Show details" to open the software details modal on the My device page. 
+- Fixed an issue where link protection services would prematurely redeem MFA links.
+- Fixed several links that were dropping team_id parameters resetting team to all teams.
+- Fixed password authentication getting disabled when SMTP isn't configured.
+- Fixed an issue where restarting the desktop manager on Ubuntu would cause the Fleet Desktop tray icon to disappear and not return.
+
 ## Fleet 4.64.2 (Mar 05, 2025)
 
 ### Bug fixes
diff --git a/changes/22791-redis-default-follow-redirect b/changes/22791-redis-default-follow-redirect
deleted file mode 100644
index 0a4a6b1a47..0000000000
--- a/changes/22791-redis-default-follow-redirect
+++ /dev/null
@@ -1 +0,0 @@
-- Enabled redis cluster follow redierctions by default
diff --git a/changes/23235-host-certificates b/changes/23235-host-certificates
deleted file mode 100644
index e63315609f..0000000000
--- a/changes/23235-host-certificates
+++ /dev/null
@@ -1 +0,0 @@
-- Added new features to include certificates in host vitals for macOS, iOS, and iPadOS.
diff --git a/changes/23243-add-pagination-to-policy-modals b/changes/23243-add-pagination-to-policy-modals
deleted file mode 100644
index ab25826121..0000000000
--- a/changes/23243-add-pagination-to-policy-modals
+++ /dev/null
@@ -1 +0,0 @@
-- Added pagination inside each of the Manage Automations modals for policies
\ No newline at end of file
diff --git a/changes/23243-manage-automations-updates b/changes/23243-manage-automations-updates
deleted file mode 100644
index 3d8954c53d..0000000000
--- a/changes/23243-manage-automations-updates
+++ /dev/null
@@ -1 +0,0 @@
-* Always show "Manage Automations" to permitted users
\ No newline at end of file
diff --git a/changes/23744-automatic-install-vpp b/changes/23744-automatic-install-vpp
deleted file mode 100644
index 8dd7073234..0000000000
--- a/changes/23744-automatic-install-vpp
+++ /dev/null
@@ -1,2 +0,0 @@
-Fleet UI: Added ability for users to automatically install App Store Apps without writing a policy
-Fleet UI: Updated the UI for adding and editing software for a cleaner, cohesive experience
diff --git a/changes/23744-vpp-automatic-install b/changes/23744-vpp-automatic-install
deleted file mode 100644
index 7d5c8c26b7..0000000000
--- a/changes/23744-vpp-automatic-install
+++ /dev/null
@@ -1 +0,0 @@
-* Allowed VPP apps to be automatically installed via a Fleet-created policy. Also added auto-install to FMA via the API, replacing a more brittle client-side implementation.
diff --git a/changes/23744-vpp-timestamps b/changes/23744-vpp-timestamps
deleted file mode 100644
index 062e8153a8..0000000000
--- a/changes/23744-vpp-timestamps
+++ /dev/null
@@ -1,16 +0,0 @@
-* Added created_at timestamp for when a VPP app was added to a specific team.
-
-NOTE: The database migration for the above hydrates timestamps for existing VPP app team associations based on when the associated VPP apps were first added to the database. To hydrate more accurate timestamps by pulling from VPP app add/edit activities, you can run the following query manually:
-
-```sql
-UPDATE vpp_apps_teams vat
-LEFT JOIN (SELECT MAX(created_at) added_at, details->>"$.app_store_id" adam_id, details->>"$.platform" platform, details->>"$.team_id" team_id
-    	FROM activities WHERE activity_type = 'added_app_store_app' GROUP BY adam_id, platform, team_id) aa ON
-	vat.global_or_team_id = aa.team_id AND vat.adam_id = aa.adam_id AND vat.platform = aa.platform
-LEFT JOIN (SELECT MAX(created_at) edited_at, details->>"$.app_store_id" adam_id, details->>"$.platform" platform, details->>"$.team_id" team_id
-		FROM activities WHERE activity_type = 'edited_app_store_app' GROUP BY adam_id, platform, team_id) ae ON
-	vat.global_or_team_id = ae.team_id AND vat.adam_id = ae.adam_id AND vat.platform = ae.platform
-SET vat.created_at = COALESCE(added_at, vat.created_at), vat.updated_at = COALESCE(edited_at, added_at, vat.updated_at);
-```
-
-The above query is not included in migrations as it requires full table scans of the `activities` table, which may take awhile.
\ No newline at end of file
diff --git a/changes/23851-ui-turn-on-mdm-modal b/changes/23851-ui-turn-on-mdm-modal
deleted file mode 100644
index 0da2961a6a..0000000000
--- a/changes/23851-ui-turn-on-mdm-modal
+++ /dev/null
@@ -1 +0,0 @@
-- Updated UI for device user page with improved instructions for turning on MDM.
diff --git a/changes/23913-upcoming-activities-handle-scripts b/changes/23913-upcoming-activities-handle-scripts
deleted file mode 100644
index 2e4f31c02f..0000000000
--- a/changes/23913-upcoming-activities-handle-scripts
+++ /dev/null
@@ -1,5 +0,0 @@
-* Added script execution to the new `upcoming_activities` table.
-* Added software installs to the new `upcoming_activities` table.
-* Added vpp apps installs to the new `upcoming_activities` table.
-* Updated the list upcoming activities endpoint to use the new `upcoming_activities` table as source of truth.
-* Added support to activate the next activity when one is enqueued or when one is completed.
diff --git a/changes/24222-update-versions b/changes/24222-update-versions
deleted file mode 100644
index 449761fe66..0000000000
--- a/changes/24222-update-versions
+++ /dev/null
@@ -1,2 +0,0 @@
-- Adds a daily job that keeps the App Store app version displayed in Fleet in sync with the actual
-  latest version.
\ No newline at end of file
diff --git a/changes/24810-cve-no-semver b/changes/24810-cve-no-semver
deleted file mode 100644
index ddab13fed4..0000000000
--- a/changes/24810-cve-no-semver
+++ /dev/null
@@ -1 +0,0 @@
-* Changed software version cve resolved in version parsing and comparison to use custom code rather than semver,
\ No newline at end of file
diff --git a/changes/25283-update-device-users-tooltip b/changes/25283-update-device-users-tooltip
deleted file mode 100644
index 13af835f1e..0000000000
--- a/changes/25283-update-device-users-tooltip
+++ /dev/null
@@ -1 +0,0 @@
-- Updated the styling of the "Used by" line on host details page to be easier to read and include more data in the tooltip
diff --git a/changes/25353-collation b/changes/25353-collation
deleted file mode 100644
index 8d9060d11e..0000000000
--- a/changes/25353-collation
+++ /dev/null
@@ -1 +0,0 @@
-* Set collation and character set explicitly on database tables that were missing explicit values.
diff --git a/changes/25460-add-list-host-certificates-endpoint b/changes/25460-add-list-host-certificates-endpoint
deleted file mode 100644
index 7663b3f98e..0000000000
--- a/changes/25460-add-list-host-certificates-endpoint
+++ /dev/null
@@ -1 +0,0 @@
-* Added the list host certificates (and list device's certificates) endpoints.
diff --git a/changes/25478-GitOps-Mode b/changes/25478-GitOps-Mode
deleted file mode 100644
index f1c016fcf5..0000000000
--- a/changes/25478-GitOps-Mode
+++ /dev/null
@@ -1 +0,0 @@
-* Implement GitOps Mode
diff --git a/changes/25637-error-policy-software-automation b/changes/25637-error-policy-software-automation
deleted file mode 100644
index 417b81452c..0000000000
--- a/changes/25637-error-policy-software-automation
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Fixed policy software automation that falsely reported success when updates actually failed. Users will now be properly notified of failed automation saves.
diff --git a/changes/25648-gitops-bootstrap-profile b/changes/25648-gitops-bootstrap-profile
deleted file mode 100644
index c8361e7355..0000000000
--- a/changes/25648-gitops-bootstrap-profile
+++ /dev/null
@@ -1 +0,0 @@
-Fixed issue where `fleetctl gitops` was NOT deleting macOS setup experience bootstrap package and enrollment profile. GitOps should clear all settings that are not explicitly set in YAML config files.
diff --git a/changes/25651-vpp-title b/changes/25651-vpp-title
deleted file mode 100644
index 1cfdeb2cb8..0000000000
--- a/changes/25651-vpp-title
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed a bug that caused macOS App Store apps to show up in Fleet as Windows apps if the Windows
-  version of the app was already in Fleet.
\ No newline at end of file
diff --git a/changes/25682-migrate-pending-existing-activities b/changes/25682-migrate-pending-existing-activities
deleted file mode 100644
index 12de643228..0000000000
--- a/changes/25682-migrate-pending-existing-activities
+++ /dev/null
@@ -1 +0,0 @@
-* Added a DB migration to migrate existing pending activities to the new unified queue.
diff --git a/changes/25770-relative-profile-path-in-no-team b/changes/25770-relative-profile-path-in-no-team
deleted file mode 100644
index 8a5043f609..0000000000
--- a/changes/25770-relative-profile-path-in-no-team
+++ /dev/null
@@ -1 +0,0 @@
-Fixed parsing of relative paths for MDM profiles in gitops no-team.yml
diff --git a/changes/25834-always-allow-passwords b/changes/25834-always-allow-passwords
deleted file mode 100644
index aa11717ed9..0000000000
--- a/changes/25834-always-allow-passwords
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed password authentication getting disabled when SMTP isn't configured
diff --git a/changes/25872-fleetctl-update-wine-10 b/changes/25872-fleetctl-update-wine-10
deleted file mode 100644
index 229901a3fa..0000000000
--- a/changes/25872-fleetctl-update-wine-10
+++ /dev/null
@@ -1 +0,0 @@
-- Updated wine to version 10.0 to improve support macOS-to-Windows installer creation on M1 chips.
diff --git a/changes/25882-update b/changes/25882-update
deleted file mode 100644
index ff333d0f22..0000000000
--- a/changes/25882-update
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed CPE generation to more closely align with CPEs use in vulnerability feeds.
\ No newline at end of file
diff --git a/changes/25921-fix-show-query-truncation b/changes/25921-fix-show-query-truncation
deleted file mode 100644
index 968ae038cc..0000000000
--- a/changes/25921-fix-show-query-truncation
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where the Show Query modal would truncate large queries.
diff --git a/changes/25991-pre-python b/changes/25991-pre-python
deleted file mode 100644
index e193694896..0000000000
--- a/changes/25991-pre-python
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed an issue with Fleet's processing of Python versions to ensure that the correct CPEs are
-  checked for vulnerabilities.
\ No newline at end of file
diff --git a/changes/26011-setup-select b/changes/26011-setup-select
deleted file mode 100644
index 6272c40dc9..0000000000
--- a/changes/26011-setup-select
+++ /dev/null
@@ -1 +0,0 @@
-* Switched to a simpler, more reliable query for checking if an initial admin user has been added.
diff --git a/changes/26040-delete-app-reroute-bug b/changes/26040-delete-app-reroute-bug
deleted file mode 100644
index 8de50e3031..0000000000
--- a/changes/26040-delete-app-reroute-bug
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Properly re-routed deleting a app on no team to no team software page insteal of all teams software page
diff --git a/changes/26049-only-show-policy-targets-in-modal b/changes/26049-only-show-policy-targets-in-modal
deleted file mode 100644
index a18871f0d6..0000000000
--- a/changes/26049-only-show-policy-targets-in-modal
+++ /dev/null
@@ -1 +0,0 @@
-- Fix a bug where target selector was present in a premature stage
diff --git a/changes/26073-powershell-cve b/changes/26073-powershell-cve
deleted file mode 100644
index 0659f692c3..0000000000
--- a/changes/26073-powershell-cve
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed false-positives on released PowerShell versions for CVE-2025-21171 and all PowerShell versions on CVE-2023-48795.
diff --git a/changes/26075-set-metadata_url-and-metadata b/changes/26075-set-metadata_url-and-metadata
deleted file mode 100644
index b67415e9f3..0000000000
--- a/changes/26075-set-metadata_url-and-metadata
+++ /dev/null
@@ -1 +0,0 @@
-- Permit setting SSO metadata and metadata_url in gitops and UI
diff --git a/changes/26136-user-table-cleanup b/changes/26136-user-table-cleanup
deleted file mode 100644
index 74824d55b1..0000000000
--- a/changes/26136-user-table-cleanup
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Constistent behavior for table overflow and not hiding badges when user names overflow table cell
diff --git a/changes/26177-max-conc b/changes/26177-max-conc
deleted file mode 100644
index 1cab5f65b0..0000000000
--- a/changes/26177-max-conc
+++ /dev/null
@@ -1,2 +0,0 @@
-- Prevented an invalid `FLEET_VULNERABILITIES_MAX_CONCURRENCY` value from causing deadlocks during
-  vulnerability processing.
\ No newline at end of file
diff --git a/changes/26178-fix-2 b/changes/26178-fix-2
deleted file mode 100644
index affd5e8bf0..0000000000
--- a/changes/26178-fix-2
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed an issue with increased resource usage during vulnerabilities processing by adding
-  database indexes.
\ No newline at end of file
diff --git a/changes/26283-software-stuck-pending b/changes/26283-software-stuck-pending
deleted file mode 100644
index 030ea3a8e1..0000000000
--- a/changes/26283-software-stuck-pending
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed a bug where new fleetd could not install software from old fleet server
diff --git a/changes/26373-uploaded-pkg-source b/changes/26373-uploaded-pkg-source
deleted file mode 100644
index fa6fd3166d..0000000000
--- a/changes/26373-uploaded-pkg-source
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed a bug where uploading a macOS installer could prevent the software from being inventoried.
diff --git a/changes/26489-fleetctl-output-copy-updates b/changes/26489-fleetctl-output-copy-updates
deleted file mode 100644
index 2ccde3bcb8..0000000000
--- a/changes/26489-fleetctl-output-copy-updates
+++ /dev/null
@@ -1 +0,0 @@
-- Update the copy printed on successful runs of `fleetctl package`
diff --git a/changes/26525-drop-macos-thirteen b/changes/26525-drop-macos-thirteen
deleted file mode 100644
index 0c48be9d39..0000000000
--- a/changes/26525-drop-macos-thirteen
+++ /dev/null
@@ -1 +0,0 @@
-Drop support for macOS 13.x.
diff --git a/changes/26569-team-id-dropping-bug b/changes/26569-team-id-dropping-bug
deleted file mode 100644
index 378a8ff17b..0000000000
--- a/changes/26569-team-id-dropping-bug
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Fixed several links that were dropping team_id parameters resetting team to All teams
diff --git a/changes/26617-show-device-software-details b/changes/26617-show-device-software-details
deleted file mode 100644
index f7bab3f025..0000000000
--- a/changes/26617-show-device-software-details
+++ /dev/null
@@ -1 +0,0 @@
-- My device page > Software > Software table: Fixed clicking "Show details" to open the software details modal
diff --git a/changes/26918-placeholders-windows b/changes/26918-placeholders-windows
deleted file mode 100644
index 66c8f170cf..0000000000
--- a/changes/26918-placeholders-windows
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed an issue with assigning Windows MDM profiles to large numbers (> 65k) of hosts by batching
-  the relevant database queries.
\ No newline at end of file
diff --git a/changes/26933-software-name-edit b/changes/26933-software-name-edit
deleted file mode 100644
index 4eb0aba93c..0000000000
--- a/changes/26933-software-name-edit
+++ /dev/null
@@ -1 +0,0 @@
-* Added `PATCH /api/latest/fleet/software/titles/:id/name` endpoint for cleaning up incorrect software titles for software that has a bundle ID.
diff --git a/changes/26976-mfa-fe-tweaks b/changes/26976-mfa-fe-tweaks
deleted file mode 100644
index dc9b65b603..0000000000
--- a/changes/26976-mfa-fe-tweaks
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed an issue where link protection services would prematurely redeem MFA links.
diff --git a/changes/26977-macoffice-archives b/changes/26977-macoffice-archives
deleted file mode 100644
index 065ad4887c..0000000000
--- a/changes/26977-macoffice-archives
+++ /dev/null
@@ -1 +0,0 @@
-* Added new (as of 2025-03-07) archives page to data source for MS Mac Office vulnerability feed (applies to vulnerabilities feed rather than a specific Fleet release).
diff --git a/changes/9778-saml-validation-workflow b/changes/9778-saml-validation-workflow
deleted file mode 100644
index d498ac81dc..0000000000
--- a/changes/9778-saml-validation-workflow
+++ /dev/null
@@ -1 +0,0 @@
-* Improved SAML validation workflow.
diff --git a/changes/issue-24040-fix-abm-token-team-resetting b/changes/issue-24040-fix-abm-token-team-resetting
deleted file mode 100644
index e14b8542c3..0000000000
--- a/changes/issue-24040-fix-abm-token-team-resetting
+++ /dev/null
@@ -1 +0,0 @@
-- fix an issue where the abm token teams were being reset when making updates to the app config.
diff --git a/changes/issue-25464-ui-host-certs b/changes/issue-25464-ui-host-certs
deleted file mode 100644
index 200d8c6dad..0000000000
--- a/changes/issue-25464-ui-host-certs
+++ /dev/null
@@ -1 +0,0 @@
-- add UI for viewing certificate details on the host details and my device pages
diff --git a/changes/issue-25656-change-host-modal-copy b/changes/issue-25656-change-host-modal-copy
deleted file mode 100644
index 8f98de606c..0000000000
--- a/changes/issue-25656-change-host-modal-copy
+++ /dev/null
@@ -1,2 +0,0 @@
-- changed the copy for the delete and transfer host modal to be more clear about the disk encryption
-  key behavior
diff --git a/changes/issue-26207-ui-for-turn-on-off-android-mdm b/changes/issue-26207-ui-for-turn-on-off-android-mdm
deleted file mode 100644
index d64e776404..0000000000
--- a/changes/issue-26207-ui-for-turn-on-off-android-mdm
+++ /dev/null
@@ -1 +0,0 @@
-- add UI to turn on and and off android mdm
diff --git a/changes/issue-26209-android-mdm-acitivites b/changes/issue-26209-android-mdm-acitivites
deleted file mode 100644
index 7c5da573cc..0000000000
--- a/changes/issue-26209-android-mdm-acitivites
+++ /dev/null
@@ -1 +0,0 @@
-- add android mdm activities
diff --git a/changes/issue-26211-byod-android-ui b/changes/issue-26211-byod-android-ui
deleted file mode 100644
index 1eb521aa7d..0000000000
--- a/changes/issue-26211-byod-android-ui
+++ /dev/null
@@ -1 +0,0 @@
-- add UI to the BYOD enrollment page to support enrolling android devices into fleet mdm.
diff --git a/changes/vulns-max-concurrency b/changes/vulns-max-concurrency
deleted file mode 100644
index d4ab64980d..0000000000
--- a/changes/vulns-max-concurrency
+++ /dev/null
@@ -1 +0,0 @@
-* Updated default for vulnerabilities max concurrency from 5 to 1.
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
index c985998761..abe7570839 100644
--- a/charts/fleet/Chart.yaml
+++ b/charts/fleet/Chart.yaml
@@ -4,11 +4,11 @@ name: fleet
 keywords:
   - fleet
   - osquery
-version: v6.4.3-1
+version: v6.4.4
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.64.2
+appVersion: v4.65.0
 dependencies:
   - name: mysql
     condition: mysql.enabled
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index 82caa652d4..5135805110 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.64.2 # Version of Fleet to deploy
+imageTag: v4.65.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAnnotations: {} # Additional annotations to add to the Fleet service
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
index 9972727df7..303fa54e56 100644
--- a/infrastructure/dogfood/terraform/aws/variables.tf
+++ b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.64.2"
+  default     = "fleetdm/fleet:v4.65.0"
 
 variable "software_inventory" {
   description = "enable/disable software inventory (default is enabled)"
diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
index 2bbecc9790..6d9bc02e29 100644
--- a/infrastructure/dogfood/terraform/gcp/variables.tf
+++ b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,7 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.64.2"
+  default = "fleetdm/fleet:v4.65.0"
 }
 
 variable "software_installers_bucket_name" {
diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
index 58be9705d6..b228ab5dd7 100644
--- a/tools/fleetctl-npm/package.json
+++ b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.64.2",
+  "version": "v4.65.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"