Commit Graph
21899 Commits
Author SHA1 Message Date
Marko Lisica 3a032b5e8f Fix broken link in YAML docs (#40411) 2026-02-25 17:55:38 -06:00
Noah Talerman 0b89f16456 Software title page > View YAML: Simplify copy (#40353)
For the following quick win:
- https://github.com/fleetdm/fleet/issues/40354
2026-02-25 18:43:23 -05:00
Ashish Kuthiala 53ea98cb74 Add Fleet Champions Community page (#40566) 2026-02-25 16:58:15 -06:00
Eric af4c112454 Website: Update article meta tags to fix failing website deploy (#40559)
Changes:
- Updated the meta tags in rethinking-endpoint-management.md to fix the
website's failing deploy workflow
2026-02-25 16:36:09 -06:00
Brock Walters c210f053f5 Create rethinking-endpoint-management.md (#40556)
has brock's edits.
2026-02-25 16:19:42 -06:00
Victor Lyuboslavsky 047d116595 Fixed python package false positives on Ubuntu (#40199)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40021 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Bug Fixes**
* Fixed false positive detections for Python packages on Ubuntu systems,
addressing misclassification scenarios that were affecting package
detection accuracy on Ubuntu 20.04 and other versions.
* Enhanced handling of duplicate Python package entries to correctly
identify and consolidate multiple occurrences, preventing incorrect
over-reporting of installed packages.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-25 15:52:09 -06:00
Nico e8152e53fc Log response body in PostJSONWithTimeout error case (#40509)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
# Checklist for submitter


- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [ ] QA'd all new/changed functionality manually
2026-02-25 15:35:29 -06:00
Scott Gress b0a0c0cb6f Flaky test fix: Skip worker jobs to avoid race conditions in tests (#40536)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40535

Fixes a flaky test (and possibly others) by turning off worker jobs
while the test is running. @gillespi314 did a similar fix recently in
https://github.com/fleetdm/fleet/pull/39106; this adds it to other
vulnerable tests including
`TestSetupExperienceFlowWithRequiredSoftwareVPP` which I recently got a
failure on in CI.
2026-02-25 15:20:40 -06:00
Eric 0693041f13 Website: Update attribution cookie (#40532)
Closes: https://github.com/fleetdm/confidential/issues/14391

Changes:
- Updated the attribution cookie set in the website's custom hook to
include the value of a user's `gclid` query parameter (if it is set)
- Updated the updateOrCreateContactAndAccount helper to set this value
on created Contact records.
2026-02-25 15:18:14 -06:00
fleet-releaseandallenhouchins 8c22ad0284 Update Fleet-maintained apps (#40534)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2026-02-25 15:08:18 -06:00
Nico 09d86aa5f0 Batch select query in CleanupExcessQueryResultRows (#40491)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40476

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

Before:
- inserted 70k queries to my local DB, saw the cron failing:

<img width="864" height="120" alt="Screenshot 2026-02-25 at 12 54 31 PM"
src="https://github.com/user-attachments/assets/d1e19aa8-56aa-46a2-a437-7ae5da1e5b1e"
/>

- ran new test without code fix, it failed with the same error in the
issue:

<img width="920" height="324" alt="Screenshot 2026-02-25 at 12 45 41 PM"
src="https://github.com/user-attachments/assets/c7342d81-f223-449e-a861-c7bae58bbe9e"
/>

After: ran test again, it passed

<img width="1556" height="174" alt="Screenshot 2026-02-25 at 12 45
04 PM"
src="https://github.com/user-attachments/assets/9eed3e6e-3ce6-4d69-aa70-9ebcfcf07623"
/>
2026-02-25 18:01:47 -03:00
Eric e7043b45dc Website: Update meta description of mac-device-security.md (#40542)
Changes:
- Updated the meta description and title of an article to fix the
website's failing deploy workflow.
2026-02-25 14:58:20 -06:00
Brock Walters 7f8f38ffaa Update how-we-deployed-santa-at-fleet.md (#40507)
modifying guide vs. article.
2026-02-25 15:55:14 -05:00
Magnus Jensen c44998baa9 migrate failed due to osquery and verifiying profiles to verified (#40490)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #39672

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information. (Will add in the next task, the bigger piece of
work)

## Testing

- [ ] Added/updated automated tests
- [x] QA'd all new/changed functionality manually


## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2026-02-25 15:38:17 -05:00
Victor Lyuboslavsky 913a5904c8 Move NewActivity to activity bounded context (#39521)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #38536 

This PR moves all logic to create new activities to activity bounded
context.
The old service and ActivityModule methods are not facades that route to
the new activity bounded context. The facades will be removed in a
subsequent PR.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added webhook support for activity events with configurable endpoint
and enable/disable settings.
* Enhanced automation-initiated activity creation without requiring a
user context.
* Improved activity service architecture with centralized creation and
management.

* **Improvements**
* Refactored activity creation to use a dedicated service layer for
better separation of concerns.
* Added support for host-specific and automation-originated activities.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-25 14:11:03 -06:00
Allen Houchins 7817d93da1 Add Claude as Windows FMA (#40530)
This pull request adds support for the Windows version of the Claude
desktop app to the maintained apps system. The changes include new
metadata, installation and uninstallation scripts, and integration into
the outputs that track available apps and versions.

Integration of Claude for Windows:

* Added `claude/windows` entry to the maintained apps outputs
(`ee/maintained-apps/outputs/apps.json`) to make the Windows version of
Claude discoverable and manageable.
* Introduced version tracking and metadata for `claude/windows`,
including installer URL, install/uninstall scripts, and SHA256 hash in
`ee/maintained-apps/outputs/claude/windows.json`.

Install/uninstall scripting:

* Added a PowerShell install script
(`ee/maintained-apps/inputs/winget/scripts/claude_install.ps1`) that
runs the Claude installer in silent mode and handles errors gracefully.
* Added a PowerShell uninstall script
(`ee/maintained-apps/inputs/winget/scripts/claude_uninstall.ps1`) that
locates the Claude uninstall entry, parses uninstall arguments, ensures
silent uninstallation, and terminates running processes.

Metadata for Windows app management:

* Created `claude.json` metadata file for Windows app management,
specifying installer details, script paths, and default categories.
2026-02-25 14:04:40 -06:00
Scott Gress 9da7008765 Update backend error messages (#40364)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** For #40348

# Details

This PR updates a number of error message on the server to use `fleet`
and `report` instead of `team` or `query` where applicable.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
this is all internal, i don't think it warrants a changelog

## Testing

- [X] Added/updated automated tests
- [ ] QA'd all new/changed functionality manually
I did not go trying to trigger all these errors.  It's text changes.
2026-02-25 13:54:45 -06:00
Software Developer | AI/ML | LLM | RAGandBrock Walters 7b7839b7a4 Mac zero-touch deployment: How to automate device provisioning with ADE (#40524)
New Article by Team GrowthX

cc @nonpunctual @ireedy @johnjeremiah 

Date: 26-02-2026

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2026-02-25 13:46:43 -06:00
fleet-releaseandmostlikelee 155309e77a Update Fleet-maintained apps (#40485)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2026-02-25 13:32:17 -06:00
Software Developer | AI/ML | LLM | RAGandBrock Walters ea9d797bab What is Apple's Device Enrollment Program (DEP)? (#40526)
New Article by Team GrowthX

Date: 26-02-2026

cc @nonpunctual @ireedy @johnjeremiah

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2026-02-25 13:31:23 -06:00
Software Developer | AI/ML | LLM | RAGandBrock Walters c065ed1c47 Managing Macs globally: Apple ecosystem deployment and security (#40523)
New Article by Team GrowthX

Date: 26-02-2026

cc @nonpunctual @ireedy @nonpunctual

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2026-02-25 13:30:21 -06:00
Steven PalmesanoandBrock Walters c190f25ed7 Use raw text instead of images (#40522)
It feels odd looking at images that are completely text, instead of just
having the text on the page.

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2026-02-25 13:26:25 -06:00
Brock Walters e217506e51 Create the-confidence-gap.md (#40516)
1st iteration. Need to fix links to case studies.
2026-02-25 13:20:28 -06:00
Brock Walters 79f2ece886 Update deploy-santa-with-fleet-gitops-and-skip-the-sync-server.md (#40508)
modifying guide vs. article.
2026-02-25 13:05:31 -06:00
Software Developer | AI/ML | LLM | RAG 1f587f4b8b Apple MDM: A complete guide (#40512)
New Article by Team GrowthX

Date: 25-02-2026

cc @nonpunctual @ireedy @johnjeremiah
2026-02-25 13:04:00 -06:00
Software Developer | AI/ML | LLM | RAG 33ec132664 Mac endpoint security: Protecting macOS devices in the enterprise (#40514)
New Article by Team GrowthX

Date: 25-02-2026

cc @nonpunctual @ireedy @johnjeremiah
2026-02-25 13:03:24 -06:00
Allen Houchins 82d191f0e1 Fix typo in query name for Chrome extensions (#40494) 2026-02-25 13:00:56 -06:00
Software Developer | AI/ML | LLM | RAG 1103d1b641 Mac inventory management: A complete guide (#40517)
New Article by Team GrowthX

Date: 25-02-2026

cc @nonpunctual @ireedy @johnjeremiah
2026-02-25 12:59:15 -06:00
Scott Gress 824a0f0cc4 Use "unassigned" in addition to / in place of "no teams" in back end checks and messages (#40351)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** For #40348

# Details

This PR replaces the use of "No team" with "Unassigned" and "All teams"
with "All fleets" in appropriate checks and error messages. Specifically
it restricts using "All fleets" or "Unassigned" as team names

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
n/a

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
* tested attempting to add "no team", "all teams", "unassigned" and "all
fleets" as teams and saw appropriate error message
2026-02-25 12:28:04 -06:00
Jonathan Katz 60152bac45 Followup for enforcing manual agent install restrictions in gitops (#40503)
**Related issue:** Resolves #40412 

## Testing

- [x] Added/updated automated tests


- [x] QA'd all new/changed functionality manually

- Individually or together setting vpp, software installers, or fleet
maintained apps will send the correct error now when applied to no team
with manual_agent_install enabled.
2026-02-25 13:26:17 -05:00
George Karr 3a1459b7f1 Adding changes for Fleet v4.80.2 (#39719) 2026-02-25 12:05:51 -06:00
Victor Lyuboslavsky 6dd1848d6b Refactoring test-go workflows to be more maintainable (#40404)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #38538

This PR is just refactoring GitHub workflows. No significant functional
differences.

In this PR, we create a reusable workflow for running a single Go test
suite. This eliminates/reduces the complex and hard to maintain strategy
matrix from the original job.

This is pre-work before splitting off activity bounded context tests
into their own job.
2026-02-25 10:45:24 -06:00
Brock WaltersandEric 5593b64ce9 4 files for How we implemented Santa at Fleet article (#40470)
How we implemented Santa at Fleet article.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2026-02-25 10:31:33 -06:00
Ashish Kuthiala c2b8d2e8e2 Refactor marketing README to streamline content (#40500)
Moved sections on marketing enablement assets, case studies, articles,
and guides to its own handbook page under marketing
2026-02-25 10:23:39 -06:00
Ashish Kuthiala d6a140216f Add marketing and enablement assets section (#40499)
Added a comprehensive list of marketing and enablement assets, including
case studies, articles, guides, and release notes with their respective
use cases and last updated dates.
2026-02-25 10:20:53 -06:00
Sam Pfluger d5a0beebda Update functionality of "Attributed to" field (#40461) 2026-02-25 10:13:06 -06:00
Ashish Kuthiala adeec0a55e Rename marketing-assets to marketing-assets.md (#40497)
Rename marketing-assets to marketing-assets.md
2026-02-25 10:00:02 -06:00
cesarvillasana 2d5b51628a Fix typo in event execution objective (#39985)
Corrected a typo in the objective description for event management.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))
2026-02-25 09:48:22 -06:00
Rachael Shaw 8b70931737 Fix capitalization in boilerplate marketing text (#40318)
Security [doesn't need to be
capitalized](https://fleetdm.com/handbook/company/why-this-way#why-does-fleet-use-sentence-case)
2026-02-25 09:46:25 -06:00
johnjeremiah a6070a3910 Update marketing label colors (#40482)
In order to differentiate issues on the marketing board, adding color
definitions for our label scheme
2026-02-25 09:45:19 -06:00
johnjeremiah a3166c4486 Fixing broken link on deploy page (#40487)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
The deployment page had a broken link to the docs page.
2026-02-25 08:41:44 -06:00
Allen HouchinsandJuan Fernandez 91301a03fc Add Fleet-maintained apps to usage statistics payload (#38779)
Extended the statistics payload to include arrays of Fleet-maintained
app slugs in use on macOS and Windows. Updated the datastore to query
and populate these fields, and documented the new fields in the usage
statistics article.

---------

Co-authored-by: Juan Fernandez <juan@fleetdm.com>
2026-02-25 09:43:08 -04:00
Irena Reedy a3c7c5c6f4 Update Marketing page with event proposal README.md (#40447)
Update propose an event section
2026-02-25 07:28:39 -05:00
Nico 1f662ca549 Follow-up: Queries and Policies page "Manage Automations" buttons not visible as admin (#40435)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #25080 (specifically this comment
https://github.com/fleetdm/fleet/issues/25080#issuecomment-3954353740)

# Checklist for submitter

- [x] Changes file added (has already been added as part of previous
PRs).

## Testing

- [x] QA'd all new/changed functionality manually



https://github.com/user-attachments/assets/e9d1e38c-8a6d-4cc9-9af2-a1466ba3454f
2026-02-25 08:49:07 -03:00
johnjeremiah ed87eafbd1 add qualified member status to framework (#40462)
Adding Qualified chat status to our campaign member status framework
2026-02-24 23:45:35 -06:00
Irena Reedy e2d9873b23 Create establishing-visibility-in-a-distributed-hybrid-environment.md (#40336) 2026-02-24 23:44:39 -06:00
Ashish Kuthiala c387b47f28 Add separate page for marketing assets in handbook (#40475)
Document the marketing assets and guidelines for updates.
2026-02-24 23:25:21 -06:00
Eric 08d3e57759 Website: add /deployment page (#40455)
Closes: https://github.com/fleetdm/confidential/issues/14327

Changes:
- Added a /deployment page
- Added a link to the page in the "Solutions" navigation dropdown.
2026-02-25 13:34:18 +09:00
Brock WaltersandMike Thomas 480acdf159 Create how-we-deployed-santa-at-fleet.md (#40473)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2026-02-25 13:33:34 +09:00
Noah Talerman 830e565300 Smallstep: Jamf connector is the current best practice (#40304)
- Until we test the Fleet connector:
https://github.com/fleetdm/fleet/issues/39558
2026-02-25 13:27:02 +09:00