Commit Graph
20079 Commits
Author SHA1 Message Date
Mike McNeil c0b3517f75 Add malicious package checking (Shai-Halud only) to website CI/CD test script (#36438) 2025-12-01 15:04:10 -06:00
Juan FernandezandLucas Manuel Rodriguez ec71fb814e Added missing detail column to host_certificate_templates (#36397)
**Related issue:** Resolves #36292 

- Allow clients to specify details about the certificate template status
change.
- Allow clients to see the details of the certificate template status
change.

---------

Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2025-12-01 14:46:14 -04:00
Magnus Jensen a986132dcd disable android proxy debug logging and redact auth header (#36498)
Part of QA finding, disables debug logging, since we have no good way of
toggling based on Fleet's total logging level, but also added the Auth
header redaction just for good measures.
2025-12-01 15:32:59 -03:00
Allen Houchins e95b4cf382 Add Sublime Text as a Windows FMA (#36448) 2025-12-01 11:56:01 -06:00
Tim Lee 21b2aee4fc Android SCEP client (#36139) 2025-12-01 10:43:26 -07:00
fleet-releaseandallenhouchins c286dd89e3 Update Fleet-maintained apps (#36497)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-01 11:35:54 -06:00
Mitch Francese a00ff175ed Add Android Studio as a macOS FMA (#36341)
- Add input manifest for android-studio
- Generate output files
- Add description to apps.json
2025-12-01 11:26:56 -06:00
Magnus Jensen 75a9170502 Always return fields for Windows MDM command result even if pending (#36483)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #31819 

I also ended up tweaking the return value for windows commands in the
`commands` endpoint, so it aligns everywhere.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

MDM Command result with a pending command:
<img width="770" height="334" alt="Screenshot 2025-12-01 at 12 36 55"
src="https://github.com/user-attachments/assets/51adb4bd-cc07-455c-8255-e1ec654521d2"
/>

MDM comman result with a result:
<img width="764" height="517" alt="Screenshot 2025-12-01 at 12 36 07"
src="https://github.com/user-attachments/assets/dec2f1c1-e756-4170-a1d0-5496dc8039b9"
/>
2025-12-01 13:53:22 -03:00
Gabriel HernandezandMagnus Jensen 37985e3df6 feat activity audit fancy search activities (#35825)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #29727

**new filters:**

<img width="720" height="931" alt="image"
src="https://github.com/user-attachments/assets/bba33904-24ae-4c12-b2ed-49152588e636"
/>

**new type filter**

<img width="411" height="433" alt="image"
src="https://github.com/user-attachments/assets/14b060df-f01b-48ce-8dff-ca01e5fad6d6"
/>

> NOTE: i will be doing a follow up PR for keyboard navigation

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
2025-12-01 16:48:43 +00:00
Allen Houchins 13921dcc28 Add Tailscale as a Windows FMA (#36445) 2025-12-01 10:47:33 -06:00
Allen Houchins 902152b257 Add GitHub Desktop as a Windows FMA (#36444) 2025-12-01 10:12:51 -06:00
Allen Houchins 9e5496a73f Improve darwin version validation to handle shorter osquery versions (#36391)
Add reverse prefix check in validation logic to accept cases where the
expected version (from Homebrew) is longer than what osquery reports.
This allows removing version shorteners for Twingate and Citrix
Workspace that were only shortening dot-separated version strings. This
also allows for our FMA library on fleetdm.com to represent more
accurate version strings.

- Add HasPrefix check for expected version starting with found version
- Remove TwingateVersionShortener
- Remove CitrixWorkspaceVersionShortener
- Remove citrix_workspace_version_shortener_test.go
2025-12-01 10:03:24 -06:00
Victor Lyuboslavsky ef49ac35d9 Add policies.delete command to Android tool. (#36369)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36202
2025-12-01 10:01:15 -06:00
github-actions[bot]andlucasmrod 53039172cb Update versions of fleetd components in Fleet's TUF [automated] (#36478)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-12-01 12:26:11 -03:00
Mitch Francese 3cebee8e73 Add Fleet-managed app: Little Snitch for macOS (#36338)
- Add input manifest for little-snitch
- Generate output files
- Add description to apps.json
2025-12-01 08:58:16 -06:00
Lucas Manuel Rodriguez 924f0a6f52 Fix Entra conditional access integration docs (#36472) 2025-12-01 09:26:22 -05:00
Allen Houchins 55cc7cf465 Add Cisco Webex as Windows FMA (#36463) 2025-11-30 22:24:01 -06:00
Allen Houchins 5b8d596d2c Convert Google Chrome for Windows to msi installer (#36456) 2025-11-30 20:06:48 -06:00
fleet-releaseandmostlikelee e8c2ba6d6a Update Fleet-maintained apps (#36455)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-30 16:49:00 -06:00
Victor Lyuboslavsky 9482003394 Re-timestamping migrations due to 4.77 cherry-pick. (#36429)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677

20251112191443 -> 20251117020100
20251114102941 -> 20251117020200
2025-11-30 16:10:22 -06:00
a142fc4d87 Adding website KPIs/metrics dashboard (#35945)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves
#[13040](https://github.com/fleetdm/confidential/issues/13040)

This update to the handbook adds a section about the new looker
dashboard for website KPIs

---------

Co-authored-by: Irena Reedy <205901210+irenareedy@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 12:44:09 -06:00
fleet-release 1c0bada9a2 Update Fleet-maintained apps (#36447) 2025-11-29 12:06:12 -06:00
Tina OngandSam Pfluger 556f5fad4d Update README.md (#36122)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 11:42:13 -06:00
johnjeremiahandSam Pfluger e7a9674608 Add link to ritual addition tutorial video (#36433)
Adding a short video for how to add a ritual

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 10:36:40 -06:00
fleet-releaseandmostlikelee c3b9fd9d8e Update Fleet-maintained apps (#36446)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-29 08:17:30 -06:00
Allen Houchins 1dc0d5077c Add AnyDesk as a macOS FMA (#36441) 2025-11-28 21:50:44 -06:00
Allen Houchins 10e02b21fe Add Adobe Digital Editions as a macOS FMA (#36440) 2025-11-28 21:33:54 -06:00
fleet-releaseandmostlikelee 88d4a25284 Update Fleet-maintained apps (#36435)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-28 18:00:39 -06:00
Sam Pfluger 3d941b1024 Refactor CEO scheduling and contact process (#36437)
- Consolidated and clarified instructions for scheduling time with the
CEO, moving details from communications.md to leadership.md.
- Added explicit steps for requesting CEO on-site presence and updated
contact procedures to streamline communication and ensure proper
scheduling via the Executive Assistant.
2025-11-28 16:10:14 -06:00
Eric e81c25b867 Website: Add script to send emails for expired local Fleet Premium trials. (#36378)
Changes:
- Added a script that sends emails to users with a local Fleet Premium
trial that expired in the past 24 hours.
2025-11-28 11:42:24 -06:00
fleet-releaseandallenhouchins 9cb2750477 Update Fleet-maintained apps (#36415)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-11-27 21:23:38 -06:00
Allen Houchins 96ba1af696 Add Teleport Connect & Teleport Suite as macOS FMAs (#36413) 2025-11-27 21:09:03 -06:00
Lucas Manuel Rodriguez f332f61c97 Fixes to releaser.sh (fleetd TUF) (#36409) 2025-11-27 17:06:52 -03:00
Lucas Manuel Rodriguez bb07b47d12 Update changelog for fleetd 1.50.1 release (#36408) 2025-11-27 17:04:22 -03:00
Magnus Jensen 06761243d7 Optimize clean up apple profiles query (#36405)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35601 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2025-11-27 17:02:57 -03:00
github-actions[bot]andlucasmrod 8a14f7c066 Update versions of fleetd components in Fleet's TUF [automated] (#36407)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-11-27 16:24:37 -03:00
Mason Buettner aa0581176f Clarify reporting of specific software configuration vulnerabilities (#36299)
Added note about reporting vulnerabilities that impact specific software
configurations.
2025-11-27 11:57:43 -05:00
Noah Talerman 144904d652 Product Design handbook: Changes to the activity feed are closed instead of merged (#36399)
Example: https://github.com/fleetdm/fleet/pull/32481
2025-11-27 11:51:41 -05:00
Noah Talerman 847707fdac Revise quarterly roadmap blog post (#36154)
Some features are getting pushed to Q1 2026
2025-11-27 11:42:57 -05:00
Allen Houchins 46bdcaa6c0 Changing "macOS Setup Assistant" to "Setup Assistant" in frontend and guide (#36296)
We recently implemented this change:
https://github.com/fleetdm/fleet/pull/35782

I think it makes sense to capitalize Setup Assistant because it is a
proper noun. However, we should drop macOS from the name since the Setup
Assistant exists on iOS/iPadOS too and the skip panes functionality is
platform agnostic. Otherwise users may be confused on how they achieve
this on their iOS/iPadOS devices since this is so explicitly labeled as
macOS.
2025-11-27 08:16:00 -06:00
fleet-releaseandmostlikelee cd5e37bed9 Update Fleet-maintained apps (#36396)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-27 08:14:00 -06:00
Mike Thomas 0d91b75c6e Create a-new-chapter-for-device-management.md (#36392)
Publish "A new chapter for device management" blog post.
2025-11-27 19:50:09 +09:00
Mike McNeil c4dc63a5ef Add Ashish and John as auto-approvers for html edits (#36390) 2025-11-26 20:46:15 -06:00
johnjeremiah 40a2e79737 update announcement banner text jamf to fleet (#36358)
Responding to slack:
https://fleetdm.slack.com/archives/C01ALP02RB5/p1764178328924339
Doesn't mention jamf
=>Mike: TODO: Change to that, or something better and equally short.
2025-11-27 10:49:29 +09:00
jacobshandling 3ca1ff4754 Detect UpgradeCodes when adding Windows FMA software, and persist them when the user adds that software; Fix recently introduced issue with list host software (#35876)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35724 

- Fixes issues 1 and 2 of the referenced bug ticket
- Also fixes [this
issue](https://github.com/fleetdm/fleet/pull/35739/files#r2548349172)

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:
- [x] Alerted the release DRI if additional load testing is needed

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added upgrade code support to Windows maintained applications for
improved MSI installer tracking and management.

* **Documentation**
* Updated Windows onboarding instructions with more precise manifest
path guidance and concrete command examples for the maintained-apps
generator.

* **Tests**
* Added comprehensive test coverage for upgrade code association with
maintained applications.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-11-26 17:00:03 -08:00
Alex MitchellandSam Pfluger 5a10ff78f0 Update README.md (#33810)
Clarification of order forms and quotes

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-26 17:41:38 -06:00
Rachael Shaw a7177e466a Update permissions language about scripts (#36370)
For #28390
2025-11-26 16:52:30 -06:00
Eric 700825482c Website: Update header navigation. (#36368)
Changes:
- Updated the "Customers" dropdown links in the header navigation menus
to reflect the recent changes
(https://github.com/fleetdm/fleet/pull/36322) to a linked case study
article
2025-11-26 16:46:54 -06:00
Rachael Shaw cb621bdfef [UPDATED] #31719 API/YAML design (Add custom package that only contains a script) (#33648) 2025-11-26 16:43:31 -06:00
Rachael Shaw 3d34633dbc Website: Update hero image on fleetdm.com/better to match current styles (#36362)
Ended up making an updated version of the "My device" page preview for a
design I'm working on, so figured we may want to update the image on
fleetdm.com/better to reflect the latest designs.

<img width="1484" height="1060" alt="Screenshot 2025-11-26 at 2 54
54 PM"
src="https://github.com/user-attachments/assets/c0ffb4be-ce18-445f-b17a-dc1bd2fff2c6"
/>


@mike-j-thomas I added the image
[here](https://www.figma.com/design/3he8e72251IEnF6dBafKq1/%F0%9F%9A%A7-fleetdm.com--scratchpad-?node-id=23574-2557&t=YZtrglJzguX5VCvd-1)
in case you want to make changes!
2025-11-27 07:41:27 +09:00