Commit Graph
20117 Commits
Author SHA1 Message Date
Allen Houchins 3d12840e98 Add Bruno as a macOS FMA (#36998)
This pull request adds support for the Bruno application to both the
backend maintained apps system and the frontend software page. The main
changes introduce Bruno's metadata, installation and uninstallation
scripts, and its icon for display in the UI.

**Backend: Bruno app integration**

* Added `bruno.json` input definition for Bruno, specifying its
installer format, unique identifier, and default categories.
* Updated `apps.json` output to include Bruno with its description,
platform, and slug.
* Created output file `bruno/darwin.json` with Bruno's version info,
installer and uninstall script references, SHA256 checksum, and
category.

**Frontend: Bruno icon and mapping**

* Added `Bruno.tsx` SVG icon component for Bruno.
* Imported Bruno icon in the icons index and mapped it in
`SOFTWARE_NAME_TO_ICON_MAP` for use on the software page.
[[1]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR25)
[[2]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR183)
2025-12-09 13:44:11 -06:00
Allen Houchins 4b7a0cec88 Add Arc as a macOS FMA (#36996)
This pull request adds support for the Arc browser to both the backend
maintained apps and the frontend software icons. The main changes
include adding Arc's metadata and install/uninstall scripts, updating
the apps listing, and providing a new SVG icon for Arc in the frontend.

**Backend: Arc browser support**
* Added Arc's metadata to `arc.json`, including its identifier,
installer format, and default categories.
* Created `arc/darwin.json` with version info, install/uninstall
scripts, and installer details for Arc on macOS.
* Updated `apps.json` to include Arc in the list of supported apps, with
a user-friendly description.

**Frontend: Arc browser icon**
* Added a new SVG icon component for Arc in `Arc.tsx`.
* Registered Arc in the icon index and mapped its name to the new icon
for use in the software page.
[[1]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR18)
[[2]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR175)
2025-12-09 13:38:57 -06:00
Allen Houchins 62807bd617 Add Blender as a macOS and Windows FMA (#36992)
This pull request adds support for managing Blender as a maintained app
on both macOS and Windows platforms. It includes new app definitions,
installation and uninstallation scripts, and integrates Blender’s icon
into the frontend for display.

**Blender app support (macOS & Windows):**
* Added input definitions for Blender in `homebrew/blender.json` (macOS)
and `winget/blender.json` (Windows), specifying installer formats and
metadata.
[[1]](diffhunk://#diff-891fa47f83954f81130e9a15f0fe60497916acb54a89b78478215cb08e9fb0e8R1-R8)
[[2]](diffhunk://#diff-69ce1c29dce360a4dd0033a269811880ea700530661b9b73c1f02bbc37145f91R1-R10)
* Updated `apps.json` to include Blender entries for both platforms,
with descriptions and unique identifiers.
* Created output manifests for Blender on macOS (`blender/darwin.json`)
and Windows (`blender/windows.json`), including version info, installer
URLs, SHA256 hashes, and install/uninstall scripts.
[[1]](diffhunk://#diff-10617b0d1fdc87b778d38cf37a7a3ba479561eedb55b9c6cf8f5128abb224de1R1-R21)
[[2]](diffhunk://#diff-a295dabd830631ee695b318097606d605b1d511cf32b46c9663c06ebbf24182bR1-R22)

**Frontend integration:**
* Added a new Blender SVG icon component (`Blender.tsx`) and registered
it in the software icon map for display on the Software Page.
[[1]](diffhunk://#diff-ba9ba14ef95d070975d2aa0e46b19d118bc9c167aeeb34b45ba48d2c1cc5848cR1-R14)
[[2]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR22)
[[3]](diffhunk://#diff-628095892e1d16090be1db6cc1a5c9cebc65248c32a8b1312385394818f2907bR179)
2025-12-09 13:31:10 -06:00
Robert Fairburn 4e11c574e2 Actively notify infra of exposed URLs via CODEOWNERS (#36980) 2025-12-09 12:45:01 -06:00
Zay Hanlon 6d3a2e910b Update notification to CS for things impacting managed cloud (#36971) 2025-12-09 10:40:38 -08:00
Allen Houchins bb403c3fc3 Fix Windows app icon mapping for generic programs (#36969)
This pull request updates the icon mapping for software sources in the
`SoftwarePage` component. The most important change is that the icon for
`programs` is now set to `WindowsAppRemote` instead of `WindowsApp`.

* Updated the `SOFTWARE_SOURCE_TO_ICON_MAP` in
`frontend/pages/SoftwarePage/components/icons/index.ts` to use
`WindowsAppRemote` for the `programs` key instead of `WindowsApp`.
2025-12-09 12:25:49 -06:00
Luke Heath 6108e1c959 Specify CEO approval for capacity allocation changes (#36982) 2025-12-09 12:00:37 -06:00
Victor Lyuboslavsky 0aa8076295 Update scorecards OSSF action to v2.4.3 (#36972) 2025-12-09 11:43:41 -06:00
Victor Lyuboslavsky ec61f2cd81 Added operation_type to host_certificate_templates (#36926)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36684 

This is a DB migration change as the first part of this story #36684

# Checklist for submitter

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added operation type tracking to host certificate templates, enabling
the system to better manage certificate operations during mobile device
management workflows.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-09 10:57:44 -06:00
Allen Houchins fcec4b8159 Disable calendar events for enrollment profile policy (#36964)
This pull request makes a minor change to the
`enrollment-profile-up-to-date.yml` policy by disabling calendar events
for the macOS platform.
2025-12-09 10:25:20 -06:00
Victor Lyuboslavsky 77f789ec4e Remove email from software.sql (#36963) 2025-12-09 10:18:47 -06:00
Allen Houchins 0c45429e13 Add icon for Wireshark Windows FMA (#36967) 2025-12-09 09:52:52 -06:00
Jahziel Villasana-Espinoza 4ce4828ba0 fix app store apps display names in gitops (#36913)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36700 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results

## New Fleet configuration settings

- [x] Verified that the setting is exported via `fleetctl
generate-gitops`
- [x] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
2025-12-09 10:42:04 -05:00
fleet-releaseandmostlikelee 2a0a3fed64 Update Fleet-maintained apps (#36959)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-09 08:54:57 -06:00
github-actions[bot]andallenhouchins 7a4782c50c Update macOS policy versions (#36956)
This PR automatically updates macOS version policies for dogfood.

The changes were generated automatically by the
[dogfood-automated-policy-updates
workflow](https://github.com/fleetdm/fleet/actions/workflows/dogfood-automated-policy-updates.yml).

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-09 07:57:35 -06:00
Brian Rotich 87faea21d9 Fix UI error message when adding duplicate software title to a team (#36394)
Resolves #36021. Fix the copy shown when a user adds a customer software to a team with a
duplicate title.
2025-12-09 08:48:10 -05:00
Magnus Jensen 525c173aff Ensure we only return a single result for a given MDM command (#36761)
A later fix for an issue discovered while working on Windows resending,
that the GetMDMCommandResults could return multiple rows if certain
conditions were met.
2025-12-09 08:32:50 -04:00
Victor Lyuboslavsky a70cd70d58 Removing jwt from software.sql (#36934)
Fixing https://github.com/fleetdm/fleet/security/code-scanning/1485
2025-12-09 00:32:24 -06:00
Luke Heath 67cafd951c Set permission level in FMA workflows (#36930) 2025-12-09 00:31:46 -06:00
fleet-releaseandallenhouchins 30dd5f8ecc Update Fleet-maintained apps (#36954)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-08 23:23:45 -06:00
Allen Houchins 6f580858f5 Add Wireshark as a Windows FMA (#36953)
This pull request adds support for managing Wireshark on Windows to the
maintained apps system. The main changes include introducing new input
and output files for Wireshark, updating the central apps manifest, and
providing installation and uninstallation scripts.

**Wireshark Windows support:**

* Added a new input manifest for Wireshark in `winget` format at
`ee/maintained-apps/inputs/winget/wireshark.json`.
* Created an output manifest for Wireshark on Windows at
`ee/maintained-apps/outputs/wireshark/windows.json`, including version
info, installer details, install/uninstall scripts, and metadata.
* Updated the central apps manifest
`ee/maintained-apps/outputs/apps.json` to include Wireshark for Windows
as a managed app.
2025-12-08 23:12:13 -06:00
Allen Houchins c68d8ad8c5 Fix VLC media player FMA grouping (#36950)
This pull request updates the naming conventions for the VLC app in both
input and output configuration files to ensure consistency and clarity.
The most important changes are:

Naming consistency updates:

* Changed the `name` field from "VLC" to "VLC media player" in
`ee/maintained-apps/inputs/winget/vlc.json` to better reflect the
application's full name.
* Updated the `name` field from "VLC" to "VLC media player" in
`ee/maintained-apps/outputs/apps.json` for the Windows platform entry,
ensuring the output matches the input and provides a more descriptive
app name.
2025-12-08 22:34:20 -06:00
Allen Houchins 0ca8ec46ed Add Twingate as a Windows FMA (#36949)
This pull request adds support for the Twingate Windows application to
the maintained apps system. The main changes include adding metadata and
installer information for Twingate on Windows, updating the aggregated
apps list, and providing install/uninstall scripts.

**Addition of Twingate Windows app:**

* Added a new input file `winget/twingate.json` with metadata for the
Twingate Windows app, including installer details and categorization.
* Created an output file `twingate/windows.json` specifying the
available version, installer URL, SHA256 hash, upgrade code, and
PowerShell scripts for install and uninstall operations.

**Updates to app listings:**

* Updated `apps.json` to include Twingate for Windows, with platform
information and description.
2025-12-08 22:29:39 -06:00
Allen Houchins 5d5485a1c1 Add Cisco Jabber as a Windows FMA (#36948)
This pull request adds support for the Cisco Jabber application on
Windows, including its metadata, installation, and uninstallation
details. It also corrects the ordering of the TablePlus app entry in the
output list. The most important changes are:

**New application support:**

* Added a new input manifest for Cisco Jabber in
`winget/cisco-jabber.json`, specifying its package details and default
category.
* Added Cisco Jabber to `apps.json` output, including its name, slug,
platform, and unique identifier.
* Created a new output file `cisco-jabber/windows.json` with version
information, installation/uninstallation scripts, installer URL, SHA256
hash, and upgrade code for Cisco Jabber.

**App list correction:**

* Corrected the ordering of the TablePlus entry in `apps.json` output to
ensure proper listing.
2025-12-08 22:03:17 -06:00
Steven Palmesano 5b1f971df7 Correct capitalization of macOS (#36905) 2025-12-09 12:32:05 +09:00
Eric 240d58b686 Website: Update article template (#36924)
Closes: #35379

Changes:
- Added "Last updated on" to the publish date on article pages and
updated the layout of the article details section on mobile devices
(<575px screen width).
2025-12-09 12:30:13 +09:00
Mitch FranceseandAllen Houchins d83c30761b Add Fleet-managed app: Tableau Desktop for Darwin (#36352)
- Add input manifest for tableau
- Generate output files for version 2025.2.4
- Add description to apps.json
- Installer format: pkg (via Homebrew)
- Bundle identifier: com.tableausoftware.Desktop.app

---------

Co-authored-by: Allen Houchins <allenhouchins@mac.com>
2025-12-08 21:23:30 -06:00
Allen Houchins f293f497c0 Support direct path to images in generate-icons script (#36946)
This pull request adds support for generating app icons from a PNG file
in addition to the existing `.app` bundle method. The changes update
both the documentation and the `generate-icons.sh` script to allow users
to specify either an app bundle or a PNG file, improving flexibility for
icon generation.

**Documentation and usage improvements:**

* Updated `README.md` to document the new `-i` option for PNG input,
clarified required arguments, and added usage examples for both `.app`
bundles and PNG files.

**Script enhancements for PNG support:**

* Modified argument parsing in `generate-icons.sh` to accept a new `-i`
option for PNG files, and added validation to ensure either `-a` or `-i`
is provided (but not both).
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44R295-R302)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L312-R381)
* Added logic to handle PNG input: verifies the PNG file, derives
component and display names from the slug, and integrates PNG processing
alongside the existing `.app` bundle workflow.
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L312-R381)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L412)
[[3]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44R508-R519)
* Adjusted SVG and component name generation to work appropriately for
both input methods, ensuring correct naming and file output.
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L465-R548)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L481-L483)
[[3]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L501-L507)
2025-12-08 21:15:08 -06:00
fleet-releaseandallenhouchins 742c9afd60 Update Fleet-maintained apps (#36945)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-08 20:35:26 -06:00
Allen Houchins 10ab229fc4 Add Cyberduck as a Windows FMA (#36944)
This pull request adds support for the Cyberduck application on Windows
to the maintained apps system. The changes introduce Cyberduck's
metadata, installation details, and scripts for managing the app
lifecycle.

**Addition of Cyberduck for Windows:**

* Added a new input manifest for Cyberduck in `winget/cyberduck.json`,
specifying package identifiers, installer details, and default
categories.
* Created an output manifest `cyberduck/windows.json` with version info,
install/uninstall scripts, installer URL, SHA256 hash, and upgrade code
for reliable management.
* Updated `apps.json` to include Cyberduck as a supported Windows app,
with platform, identifier, and description.
2025-12-08 19:42:35 -06:00
Mike Thomas 36da751891 Update fast-track.ejs (#36941)
Made some minor text changes with @nonpunctual.
2025-12-08 20:15:35 -05:00
Noah Talerman 6248d8e126 Fleet 4.77 release article: Okta conditional access is coming in 4.78 (#36668) 2025-12-08 17:14:45 -08:00
Allen Houchins b3b2754688 Add ClickUp as a Windows FMA (#36942)
This pull request adds support for the Windows version of ClickUp to the
maintained apps system. The changes introduce new metadata, installer
information, and management scripts for ClickUp on Windows, ensuring it
can be properly discovered, installed, and uninstalled through the
platform.

**Addition of ClickUp for Windows:**

* Added a new input manifest `clickup.json` for ClickUp in
`ee/maintained-apps/inputs/winget`, specifying package details and
default categories.
* Updated `apps.json` to include ClickUp for Windows, with platform
information and a descriptive entry for discoverability.

**Installer and management scripts:**

* Created `clickup/windows.json` in outputs, defining the available
version, installer URL, install/uninstall PowerShell scripts, SHA256
hash, and upgrade code for ClickUp on Windows.
2025-12-08 19:12:33 -06:00
Mike Thomas 7fca0f8ae8 Update a-new-chapter-for-device-management.md (#36393)
- fixed faulty parallelism in the bullets, without changing the meaning.
("With Fleet, you can community driven" does not make sense.)
- changed the order of the bullets to balance the suggested change
better.
2025-12-09 10:01:28 +09:00
Allen Houchins 88aff0b88f Add VLC as a Windows FMA (#36938) 2025-12-08 18:52:44 -06:00
Allen Houchins 4dc5aeff16 Add Transmit as a macOS FMA (#36933) 2025-12-08 17:59:21 -06:00
Luke Heath d43e667a73 Bump fleetctl dependencies to latest (#36920) 2025-12-08 16:37:18 -06:00
Luke Heath 70ab8c2925 Adding changes for Fleet v4.77.0 (#35382) (#36614) 2025-12-08 16:32:47 -06:00
Eric 3eb444473e Run website workflows for changes to Fleet maintained apps (#36775) 2025-12-08 16:27:55 -06:00
Victor Lyuboslavsky abe7306f67 Added fleet-gitops to eng metrics. (#36706) 2025-12-08 16:27:06 -06:00
Jonathan Katz b8d2ba371e Update replica db setup and guide (#36918)
**Related issue:** Resolves #35937
Changes:
- Fix `make db-replica-setup`
- mention the tool in
`docs/contributing/getting-started/testing-and-local-development.md`.
2025-12-08 17:07:04 -05:00
fleet-releaseandmostlikelee cfa55d8453 Update Fleet-maintained apps (#36922)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-08 15:32:10 -06:00
Allen Houchins 0813bfb9dd Add Raycast as a macOS FMA (#36916) 2025-12-08 15:01:29 -06:00
RachelElysia 87a8a64199 Fleet UI: Remove software header for fleet free (#36902) 2025-12-08 15:46:52 -05:00
Steven PalmesanoandNoah Talerman 7fb0ab105a Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Josh Roskos ed17e84d05 Update SSO configuration paths in documentation (#36894)
Updates from customer call today: 
  - Updated image to reference `Fleet users` callback URL
  - Updated *Fleet configuration* instructions for UI changes
2025-12-08 14:04:49 -06:00
Marko Lisica c9d997e69e Update URL for unsigning configuration profiles guide (#36860)
I tested this and link redirects to "Enforce" section. "Create
configuration profile" section has all the information about signed
profiles.

Related to: #26688

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
2025-12-08 21:00:27 +01:00
Mitch Francese 6c6cdbaf59 Add Fleet-managed app: KeePassXC for Windows (#36908) 2025-12-08 13:27:07 -06:00
RachelElysia b9dcf9f6cf Fleet UI: Fix Android link on SW details page (#36871) 2025-12-08 13:41:52 -05:00
Allen Houchins 002e248344 Disable the Cloudflare DNS over HTTPS configuration profile (#36904)
Slack thread:
https://fleetdm.slack.com/archives/C071NNMSP2R/p1765215959557429
2025-12-08 12:39:23 -06:00