Commit Graph
19870 Commits
Author SHA1 Message Date
Allen Houchins 13921dcc28 Add Tailscale as a Windows FMA (#36445) 2025-12-01 10:47:33 -06:00
Allen Houchins 902152b257 Add GitHub Desktop as a Windows FMA (#36444) 2025-12-01 10:12:51 -06:00
Allen Houchins 9e5496a73f Improve darwin version validation to handle shorter osquery versions (#36391)
Add reverse prefix check in validation logic to accept cases where the
expected version (from Homebrew) is longer than what osquery reports.
This allows removing version shorteners for Twingate and Citrix
Workspace that were only shortening dot-separated version strings. This
also allows for our FMA library on fleetdm.com to represent more
accurate version strings.

- Add HasPrefix check for expected version starting with found version
- Remove TwingateVersionShortener
- Remove CitrixWorkspaceVersionShortener
- Remove citrix_workspace_version_shortener_test.go
2025-12-01 10:03:24 -06:00
Victor Lyuboslavsky ef49ac35d9 Add policies.delete command to Android tool. (#36369)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36202
2025-12-01 10:01:15 -06:00
github-actions[bot]andlucasmrod 53039172cb Update versions of fleetd components in Fleet's TUF [automated] (#36478)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-12-01 12:26:11 -03:00
Mitch Francese 3cebee8e73 Add Fleet-managed app: Little Snitch for macOS (#36338)
- Add input manifest for little-snitch
- Generate output files
- Add description to apps.json
2025-12-01 08:58:16 -06:00
Lucas Manuel Rodriguez 924f0a6f52 Fix Entra conditional access integration docs (#36472) 2025-12-01 09:26:22 -05:00
Allen Houchins 55cc7cf465 Add Cisco Webex as Windows FMA (#36463) 2025-11-30 22:24:01 -06:00
Allen Houchins 5b8d596d2c Convert Google Chrome for Windows to msi installer (#36456) 2025-11-30 20:06:48 -06:00
fleet-releaseandmostlikelee e8c2ba6d6a Update Fleet-maintained apps (#36455)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-30 16:49:00 -06:00
Victor Lyuboslavsky 9482003394 Re-timestamping migrations due to 4.77 cherry-pick. (#36429)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677

20251112191443 -> 20251117020100
20251114102941 -> 20251117020200
2025-11-30 16:10:22 -06:00
a142fc4d87 Adding website KPIs/metrics dashboard (#35945)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves
#[13040](https://github.com/fleetdm/confidential/issues/13040)

This update to the handbook adds a section about the new looker
dashboard for website KPIs

---------

Co-authored-by: Irena Reedy <205901210+irenareedy@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 12:44:09 -06:00
fleet-release 1c0bada9a2 Update Fleet-maintained apps (#36447) 2025-11-29 12:06:12 -06:00
Tina OngandSam Pfluger 556f5fad4d Update README.md (#36122)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 11:42:13 -06:00
johnjeremiahandSam Pfluger e7a9674608 Add link to ritual addition tutorial video (#36433)
Adding a short video for how to add a ritual

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 10:36:40 -06:00
fleet-releaseandmostlikelee c3b9fd9d8e Update Fleet-maintained apps (#36446)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-29 08:17:30 -06:00
Allen Houchins 1dc0d5077c Add AnyDesk as a macOS FMA (#36441) 2025-11-28 21:50:44 -06:00
Allen Houchins 10e02b21fe Add Adobe Digital Editions as a macOS FMA (#36440) 2025-11-28 21:33:54 -06:00
fleet-releaseandmostlikelee 88d4a25284 Update Fleet-maintained apps (#36435)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-28 18:00:39 -06:00
Sam Pfluger 3d941b1024 Refactor CEO scheduling and contact process (#36437)
- Consolidated and clarified instructions for scheduling time with the
CEO, moving details from communications.md to leadership.md.
- Added explicit steps for requesting CEO on-site presence and updated
contact procedures to streamline communication and ensure proper
scheduling via the Executive Assistant.
2025-11-28 16:10:14 -06:00
Eric e81c25b867 Website: Add script to send emails for expired local Fleet Premium trials. (#36378)
Changes:
- Added a script that sends emails to users with a local Fleet Premium
trial that expired in the past 24 hours.
2025-11-28 11:42:24 -06:00
fleet-releaseandallenhouchins 9cb2750477 Update Fleet-maintained apps (#36415)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-11-27 21:23:38 -06:00
Allen Houchins 96ba1af696 Add Teleport Connect & Teleport Suite as macOS FMAs (#36413) 2025-11-27 21:09:03 -06:00
Lucas Manuel Rodriguez f332f61c97 Fixes to releaser.sh (fleetd TUF) (#36409) 2025-11-27 17:06:52 -03:00
Lucas Manuel Rodriguez bb07b47d12 Update changelog for fleetd 1.50.1 release (#36408) 2025-11-27 17:04:22 -03:00
Magnus Jensen 06761243d7 Optimize clean up apple profiles query (#36405)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35601 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2025-11-27 17:02:57 -03:00
github-actions[bot]andlucasmrod 8a14f7c066 Update versions of fleetd components in Fleet's TUF [automated] (#36407)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-11-27 16:24:37 -03:00
Mason Buettner aa0581176f Clarify reporting of specific software configuration vulnerabilities (#36299)
Added note about reporting vulnerabilities that impact specific software
configurations.
2025-11-27 11:57:43 -05:00
Noah Talerman 144904d652 Product Design handbook: Changes to the activity feed are closed instead of merged (#36399)
Example: https://github.com/fleetdm/fleet/pull/32481
2025-11-27 11:51:41 -05:00
Noah Talerman 847707fdac Revise quarterly roadmap blog post (#36154)
Some features are getting pushed to Q1 2026
2025-11-27 11:42:57 -05:00
Allen Houchins 46bdcaa6c0 Changing "macOS Setup Assistant" to "Setup Assistant" in frontend and guide (#36296)
We recently implemented this change:
https://github.com/fleetdm/fleet/pull/35782

I think it makes sense to capitalize Setup Assistant because it is a
proper noun. However, we should drop macOS from the name since the Setup
Assistant exists on iOS/iPadOS too and the skip panes functionality is
platform agnostic. Otherwise users may be confused on how they achieve
this on their iOS/iPadOS devices since this is so explicitly labeled as
macOS.
2025-11-27 08:16:00 -06:00
fleet-releaseandmostlikelee cd5e37bed9 Update Fleet-maintained apps (#36396)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-27 08:14:00 -06:00
Mike Thomas 0d91b75c6e Create a-new-chapter-for-device-management.md (#36392)
Publish "A new chapter for device management" blog post.
2025-11-27 19:50:09 +09:00
Mike McNeil c4dc63a5ef Add Ashish and John as auto-approvers for html edits (#36390) 2025-11-26 20:46:15 -06:00
johnjeremiah 40a2e79737 update announcement banner text jamf to fleet (#36358)
Responding to slack:
https://fleetdm.slack.com/archives/C01ALP02RB5/p1764178328924339
Doesn't mention jamf
=>Mike: TODO: Change to that, or something better and equally short.
2025-11-27 10:49:29 +09:00
jacobshandling 3ca1ff4754 Detect UpgradeCodes when adding Windows FMA software, and persist them when the user adds that software; Fix recently introduced issue with list host software (#35876)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35724 

- Fixes issues 1 and 2 of the referenced bug ticket
- Also fixes [this
issue](https://github.com/fleetdm/fleet/pull/35739/files#r2548349172)

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:
- [x] Alerted the release DRI if additional load testing is needed

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added upgrade code support to Windows maintained applications for
improved MSI installer tracking and management.

* **Documentation**
* Updated Windows onboarding instructions with more precise manifest
path guidance and concrete command examples for the maintained-apps
generator.

* **Tests**
* Added comprehensive test coverage for upgrade code association with
maintained applications.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-11-26 17:00:03 -08:00
Alex MitchellandSam Pfluger 5a10ff78f0 Update README.md (#33810)
Clarification of order forms and quotes

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-26 17:41:38 -06:00
Rachael Shaw a7177e466a Update permissions language about scripts (#36370)
For #28390
2025-11-26 16:52:30 -06:00
Eric 700825482c Website: Update header navigation. (#36368)
Changes:
- Updated the "Customers" dropdown links in the header navigation menus
to reflect the recent changes
(https://github.com/fleetdm/fleet/pull/36322) to a linked case study
article
2025-11-26 16:46:54 -06:00
Rachael Shaw cb621bdfef [UPDATED] #31719 API/YAML design (Add custom package that only contains a script) (#33648) 2025-11-26 16:43:31 -06:00
Rachael Shaw 3d34633dbc Website: Update hero image on fleetdm.com/better to match current styles (#36362)
Ended up making an updated version of the "My device" page preview for a
design I'm working on, so figured we may want to update the image on
fleetdm.com/better to reflect the latest designs.

<img width="1484" height="1060" alt="Screenshot 2025-11-26 at 2 54
54 PM"
src="https://github.com/user-attachments/assets/c0ffb4be-ce18-445f-b17a-dc1bd2fff2c6"
/>


@mike-j-thomas I added the image
[here](https://www.figma.com/design/3he8e72251IEnF6dBafKq1/%F0%9F%9A%A7-fleetdm.com--scratchpad-?node-id=23574-2557&t=YZtrglJzguX5VCvd-1)
in case you want to make changes!
2025-11-27 07:41:27 +09:00
Eric fddd4bac85 Website: Update create-compliance-partner-tenant error handling (#36366)
Closes: https://github.com/fleetdm/fleet/issues/36356

Changes:
- updated the website's `create-compliance-partner-tenant` microsoft
proxy endpoint to return a `connectionAlreadyExists` response when a
uniqueness error is returned by the database adapter.
2025-11-26 16:29:05 -06:00
Eric f8a3f09460 Website: Move Fleet subscription terms and privacy policy to the Fleet website. (#36001)
Closes: https://github.com/fleetdm/fleet/issues/32373

Changes:
- Added Markdown versions of the Fleet's subscription terms and privacy
policy Google docs to a new folder (`legal/`) inside the
`handbook/company/` folder. (Note: These pages are not accessible from
the handbook.)
- Added pages that display the two Markdown files rendered as HTML
(`/legal/terms` and `/legal/privacy`)
2025-11-26 16:27:37 -06:00
Jonathan Katz c1a42556bf 36332 Omit Android app configuration (#36348)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36332
This is a small followup to to #35493

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually
Testing the `GET /api/v1/fleet/software/titles/:id` endpoint
- android title, team id: shows configuration
- android title, no team id: doesn't show configuration at all
- ipados title, with/without team id: doesn't show configuration at all
2025-11-26 16:50:23 -05:00
Zay HanlonandSam Pfluger 261724f6a5 Updates on how to request infrastructure oncall assistance (#36205)
Updates on how to request infrastructure oncall assistance

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-26 14:07:56 -06:00
Sarah Gillespie 5850840d04 Fix references to enable-scripts flag in error messages and comments (#36340) 2025-11-26 13:53:57 -06:00
johnjeremiahandEric b696c19e5e Change Announcement banner to Migration Article (#36350)
Per Slack thread about Blue Announcment banner

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-11-26 13:04:27 -06:00
Steven PalmesanoandRachael Shaw 41a933ff52 Add Linux desktop environment support to docs (#35770)
I'm not 100% sure if these are the supported desktop environments, but I
figured this PR would kick off the discussion.

Brought up during a call with `customer-cisneros`: [Gong
snippet](https://us-65885.app.gong.io/call?id=6065255196915724079&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A654%2C%22to%22%3A1079%7D%5D)

[Here's](https://wiki.archlinux.org/title/Desktop_environment) the list
of desktop environments that the customer mentioned on the call to
highlight the fragmentation of the Linux world. 😆

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-11-26 12:38:28 -06:00
Marko Lisica 23b60d79d5 [Docs bug] team_id is not required (#36269)
Clarified the description of the 'team_id' parameter in the API
documentation. If not set default is no team
2025-11-26 12:23:52 -06:00
Harrison Ravazzolo 22034d7983 remove duplicate smallstep section from yaml reference (#36339)
Dupe blocks of code
2025-11-26 12:23:24 -06:00