Commit Graph
15208 Commits
Author SHA1 Message Date
Ian Littman 4792d0bf7b Map product/vendor for homebrew "pass" package, skip "jira" python package as it has no CVEs (#25626)
For #25597. Needs to be QA'd pre-merge /cc @jmwatts 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-21 15:34:44 -06:00
Dante Catalfamo 1ad76c5253 Fix upcoming activities for ABM-deleted hosts (#25530)
#22353
2025-01-21 15:26:00 -05:00
Eugene 443595e030 Update routes.js (#25628)
Added redirect to Apple Business Manager apps and books page.
2025-01-22 07:30:32 +13:00
Allen Houchins 15ac793238 Update translating-jamf-pro-terminology.md (#25491)
Formatting updates
2025-01-21 11:28:30 -06:00
Noah Talerman d87f41b5b3 Handbook: user story reviews (#25602) 2025-01-21 11:16:26 -06:00
Victor Lyuboslavsky d5e4825f0f Amend community PR process. (#25608) 2025-01-21 11:15:44 -06:00
Noah Talerman 7be88041e1 Update product-groups.md (#25598) 2025-01-21 11:11:40 -06:00
Noah Talerman 3109da7194 Handbook: design reviews (#25601) 2025-01-21 11:08:07 -06:00
Gabriel Hernandez 027bf09eac update message for failed windows disk encryption and dont show resend button (#25630)
For #21691

This fixes an issue for windows disk encryption profiles. We now disable
to resend button and add some messaging to the user that this will retry
automatically.


![image](https://github.com/user-attachments/assets/58eb57cb-1e28-4820-ba91-fdd7513a7b00)

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Manual QA for all new/changed functionality
2025-01-21 17:07:44 +00:00
Victor Lyuboslavsky 086099631e Fix issue where Windows MDM profiles are not sent to offline hosts (#25619)
For #25615 

The actual fix is these two lines, where we only delete the command from
the queue for the specific host we're processing:
```
const dequeueCommandsStmt = `DELETE FROM windows_mdm_command_queue WHERE enrollment_id = ? AND command_uuid IN (?)`
stmt, params, err = sqlx.In(dequeueCommandsStmt, enrolledDevice.ID, matchingUUIDs)
```

Everything else is tests, cleanup, refactoring for readability.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-21 09:59:32 -06:00
Ian Littman 65f9ef4967 Bump Node version to 20.18.1 (#25591)
For #25590.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2025-01-20 15:50:28 -06:00
Eric 12d8017ff9 Update node version used in website workflows. (#25605)
Changes:
- Bumped the node version used in the "Deploy Fleet website" and "Test
Fleet website" workflows (`16.x` » `20.x`) to fix an [error with the
upgraded version of
Storybook](https://github.com/fleetdm/fleet/actions/runs/12872094872/job/35886819520?pr=25601)
(which requires node 18 or higher).
2025-01-20 14:33:43 -06:00
Ian Littman 66045dbb26 Allow software installers with unknown versions through rather than failing the upload (#25426)
For #25201.

<img width="435" alt="image"
src="https://github.com/user-attachments/assets/c499902b-d461-4621-b2fc-7cb845ce71c4"
/>

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-20 11:49:52 -06:00
Ian Littman a3d83f47b9 Update endpoint docs for VPP app batch set (#25585)
Changes implemented in the VPP automation GitOps PR (for #23531); docs
split to another PR for easier review.
2025-01-20 11:23:29 -06:00
Ian LittmanandMarko Lisica 99f4faff51 Mention policy automation side effects of VPP token deletion/reassignment (#25584)
For #23115. Review requested from @marko-lisica per @noahtalerman's
[response](https://github.com/fleetdm/fleet/issues/23115#issuecomment-2599192980)
to @jmwatts's comment on the ticket.

Skipping changes file as this is part of the larger feature and treated
as an unreleased bug for change management purposes, assuming the copy
revision looks good (or the copy revision looks good after more
modifications). Will assign a dev reviewer once copy looks good, if we
decide we want the copy here (vs. in docs).

@marko-lisica set for review to confirm whether we need this/whether the
copy looks good. @jmwatts set for review to confirm this is what she had
in mind for feedback. Of note, deleting a VPP token does _not_ cancel
pending installs since at that point the MDM command is already sent, so
we don't need that verbiage here.

## Edit VPP token teams

### Before

<img width="751" alt="image"
src="https://github.com/user-attachments/assets/31154fed-abf5-4b36-9ebf-7d66dcab4694"
/>

### After

<img width="822" alt="image"
src="https://github.com/user-attachments/assets/d95b68a6-3c0c-4576-9c41-9253be61e77b"
/>

## Delete VPP token

### Before

<img width="662" alt="image"
src="https://github.com/user-attachments/assets/414dc1b2-6837-47a7-987b-439bd17be224"
/>

### After

<img width="665" alt="image"
src="https://github.com/user-attachments/assets/423f1e11-3ecf-40cb-aa0d-479cef82623c"
/>

# Checklist for submitter
- [ ] Manual QA for all new/changed functionality

---------

Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
2025-01-20 10:27:48 -06:00
Gabriel Hernandez 8168ff3655 update storybook to 8.4.7 (#25451)
For #25349

This updates storybook and its addons to 8.4.7. This is done to remove
the transitive dependency on path-to-regexp,
which is no longer used in this version of storybook.

This will fix the original vulnerability issue for `path-to-regexp`
2025-01-20 16:17:33 +00:00
Noah Talerman ba665d211f Fix broken link in LinkedIn post (#25599)
Add redirect for broken link in this LinkedIn post (image):
https://www.linkedin.com/posts/fleetdm_fleet-how-to-use-secret-variables-in-fleet-activity-7285712339541082114-E7rH?utm_source=share&utm_medium=member_desktop
2025-01-20 16:38:12 +01:00
Ian Littman c1b2bc06e5 Fix missing actor for policy-initiated app store installs (#25592)
For #25481 (unreleased).

Had updated the logic for webhooks but missed it for inserting the
activity because we have to change things in two places.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-20 09:37:54 -06:00
Victor Lyuboslavsky a7b5aee6c2 Allow Windows SessionID=0 (#25582)
For #25581 

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-01-20 09:12:33 -06:00
Mike Thomas 09f175e9a0 Update pricing-features-table.yml (#25594)
Closes https://github.com/fleetdm/fleet/issues/23964
2025-01-20 10:10:06 -05:00
Gabriel Hernandez cdefa0c9e9 Chore rework UI activities (#25539)
For #23912

new UI for activities on the global, past, and upcoming feeds. These are
the same changes in [this
PR](https://github.com/fleetdm/fleet/pull/25329), except we are
reverting the changes around fleet initiated activities as that is not
in the current activities API.

We are doing this so that the new activities can go out in a release
while the backend is still being built and will be ready later.

> NOTE: this does contain the code for cancel activity functionality but
it hidden from the user.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-01-20 10:39:46 +00:00
Jahziel Villasana-Espinoza 3f98d257ac fix: add special handling for names we might get wrong (#25570)
> For #25467

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-18 12:04:25 -05:00
Sam Pfluger 180159138f Remove auto-issue from ritual (#25586) 2025-01-18 02:03:25 -06:00
Eric 603e01d744 Website: add support for optional onTargetEarnings value in open positions YAML. (#25576)
Closes: https://github.com/fleetdm/confidential/issues/9378

Changes:
- Added support for `onTargetEarnings` in open-positons.yml
- Updated the build-static-content script to validate `onTargetEarnings`
values, and to replace the default compensation range on the page
template with an `onTargetEarnings` value if one is provided.
- Updated the "Creating a new position" section of the leadership
handbook to document the new key in the open positions yaml
2025-01-18 02:00:49 -06:00
Eric 240c131967 Website: move yaml back to devDependencies (#25577)
Changes:
- Moved the website's `yaml` dependency to devDependencies. (Reverts the
change from https://github.com/fleetdm/fleet/pull/25277)
2025-01-17 16:09:38 -06:00
Noah Talerman 928523fbd3 Disk encryption guide: Ubuntu 20.04 is supported (#25447)
Addressed in this bug here: #24215
2025-01-17 17:02:16 -05:00
Luke Heath 7a04f879f8 Remove 4.62.2 change files (#25573) 2025-01-17 15:16:21 -06:00
Noah Talerman 478a85a73a Update product-groups.md (#25516)
- Column is called "User story review"
2025-01-17 15:12:05 -06:00
Noah Talerman e76fb1f5ad Update product-groups.md (#25513)
Fix broken link
2025-01-17 15:11:17 -06:00
Victor Lyuboslavsky e6e7c3fa06 Fixes issue verifying Windows CSP profiles that contain ADMX policies. (#25528)
For #24790 

Support verifying Windows CSPs with ADMX policies.

https://learn.microsoft.com/en-us/windows/client-management/understanding-admx-backed-policies

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] Manual QA for all new/changed functionality
2025-01-17 14:56:25 -06:00
Luke Heath ce012687cc Adding changes for Fleet v4.62.2 (#25564) 2025-01-17 14:55:09 -06:00
George Karr 5cbf1fa3fc Update publish_release.sh (#25435)
Just updating publish script to fix new qa and teams
2025-01-17 14:38:39 -06:00
Noah Talerman c1a4e845e7 Update hiding secrets guide (#25439)
Update guide to be more explicit: this feature is to hide secrets in
profiles in scripts.
2025-01-17 14:31:55 -05:00
Noah Talerman c9c9a93c1e Update README.md (#25517)
New product groups
2025-01-17 14:31:31 -05:00
Harrison Ravazzolo a7a9a41390 Update enroll-hosts.md to include arch64 note (#25518) 2025-01-17 10:41:39 -08:00
Lucas Manuel Rodriguez 14d7749138 Migration script to support multiple hosts and rpm and arm64 (#25542) 2025-01-17 14:13:27 -03:00
Ian Littman 9a5d74cfc6 Exempt bootstrap package uploads from server-side request timeout (#25536)
For #25533

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-17 10:39:59 -06:00
Scott Gress e8b1ec69ec replace node-sass with sass (#25493)
The [current node-sass
dependency](https://www.npmjs.com/package/node-sass) in the front end is
unmaintained:

<img width="842" alt="image"
src="https://github.com/user-attachments/assets/ebcdeda3-21c0-44a7-95a3-2b48c3894dde"
/>

and has caused some build issues. I've tested the suggested replacement
and was able to build the frontend bundle as well as Storybook with no
problems.
2025-01-17 10:28:57 -06:00
RachelElysia 3420e3f14d Fleet UI: Missing the (#25550) 2025-01-17 11:17:06 -05:00
Scott GressandDrew Baker bb5ec47ec0 Add SLSA guide (#25423)
This PR adds an article about the software attestations Fleet now adds
to release artifacts.

---------

Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2025-01-17 09:38:37 -06:00
Noah Talerman e371b5e0f1 Update product-design.rituals.yml (#25543) 2025-01-17 10:10:35 -05:00
Gabriel Hernandez 22baa5af94 bump action/cache to version 4.2.0 (#25508)
For #25507

A bump to the latest version to the github `cache` action to 4.2.0. our
current version (v2) was deprecated. more info for the deprecation can
be found here https://github.com/actions/cache/discussions/1510

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
2025-01-17 15:01:27 +00:00
Lucas Manuel Rodriguez 88a58041a9 Add update_url column to orbit_info (#25532)
Adding new column to ease TUF migration QA and deployment.

![Screenshot 2025-01-17 at 8 24
56 AM](https://github.com/user-attachments/assets/3565fa4c-4bb4-4218-8122-5f3402e02d99)
2025-01-17 11:52:21 -03:00
github-actions[bot]andlucasmrod 732f46cca7 Update versions of fleetd components in Fleet's TUF [automated] (#25534)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-01-17 08:28:46 -03:00
Jahziel Villasana-Espinoza 8407aefc73 fix: add translation for iterm2 (#25477)
> For #25130 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-16 20:17:10 -05:00
Victor Lyuboslavsky 7c6e0cb6d8 Refactoring VerifyHostMDMProfiles (#25515)
For #24790 

No functional changes.

Refactoring VerifyHostMDMProfiles to speed up current and future changes
and bug fixes.
2025-01-16 18:17:09 -06:00
Rebecca Cowart 289e66a568 Update rest-api.md (#25527)
Added context to the `additional_info_filters` parameter.
2025-01-16 16:12:11 -06:00
Rebecca Cowart 2f20f13246 Update yaml-files.md (#25526)
Added ai_features_disabled to the list of server_settings. Fixed two
spelling issues. Made the grammar surrounding each "(default:...)" text
consistent within that section.
2025-01-16 16:04:53 -06:00
Noah Talerman e9ba7303cb Update story issue template (#25521)
User stories that are yet to be prioritized are clogging up the "New
requests" column on the drafting board. Only new feature requests should
show up in this column
2025-01-16 16:01:54 -06:00
jacobshandlingandJacob Shandling 725ccf6ebc Docs: fix type (#25523)
This parameter should be a string

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-01-16 15:52:37 -06:00