Commit Graph
20093 Commits
Author SHA1 Message Date
Steven Palmesano 5b1f971df7 Correct capitalization of macOS (#36905) 2025-12-09 12:32:05 +09:00
Eric 240d58b686 Website: Update article template (#36924)
Closes: #35379

Changes:
- Added "Last updated on" to the publish date on article pages and
updated the layout of the article details section on mobile devices
(<575px screen width).
2025-12-09 12:30:13 +09:00
Mitch FranceseandAllen Houchins d83c30761b Add Fleet-managed app: Tableau Desktop for Darwin (#36352)
- Add input manifest for tableau
- Generate output files for version 2025.2.4
- Add description to apps.json
- Installer format: pkg (via Homebrew)
- Bundle identifier: com.tableausoftware.Desktop.app

---------

Co-authored-by: Allen Houchins <allenhouchins@mac.com>
2025-12-08 21:23:30 -06:00
Allen Houchins f293f497c0 Support direct path to images in generate-icons script (#36946)
This pull request adds support for generating app icons from a PNG file
in addition to the existing `.app` bundle method. The changes update
both the documentation and the `generate-icons.sh` script to allow users
to specify either an app bundle or a PNG file, improving flexibility for
icon generation.

**Documentation and usage improvements:**

* Updated `README.md` to document the new `-i` option for PNG input,
clarified required arguments, and added usage examples for both `.app`
bundles and PNG files.

**Script enhancements for PNG support:**

* Modified argument parsing in `generate-icons.sh` to accept a new `-i`
option for PNG files, and added validation to ensure either `-a` or `-i`
is provided (but not both).
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44R295-R302)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L312-R381)
* Added logic to handle PNG input: verifies the PNG file, derives
component and display names from the slug, and integrates PNG processing
alongside the existing `.app` bundle workflow.
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L312-R381)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L412)
[[3]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44R508-R519)
* Adjusted SVG and component name generation to work appropriately for
both input methods, ensuring correct naming and file output.
[[1]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L465-R548)
[[2]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L481-L483)
[[3]](diffhunk://#diff-3efaab61495d01f6ff77a1e75195bd8b009e71c9ea53e3278274cb5edf929c44L501-L507)
2025-12-08 21:15:08 -06:00
fleet-releaseandallenhouchins 742c9afd60 Update Fleet-maintained apps (#36945)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-08 20:35:26 -06:00
Allen Houchins 10ab229fc4 Add Cyberduck as a Windows FMA (#36944)
This pull request adds support for the Cyberduck application on Windows
to the maintained apps system. The changes introduce Cyberduck's
metadata, installation details, and scripts for managing the app
lifecycle.

**Addition of Cyberduck for Windows:**

* Added a new input manifest for Cyberduck in `winget/cyberduck.json`,
specifying package identifiers, installer details, and default
categories.
* Created an output manifest `cyberduck/windows.json` with version info,
install/uninstall scripts, installer URL, SHA256 hash, and upgrade code
for reliable management.
* Updated `apps.json` to include Cyberduck as a supported Windows app,
with platform, identifier, and description.
2025-12-08 19:42:35 -06:00
Mike Thomas 36da751891 Update fast-track.ejs (#36941)
Made some minor text changes with @nonpunctual.
2025-12-08 20:15:35 -05:00
Noah Talerman 6248d8e126 Fleet 4.77 release article: Okta conditional access is coming in 4.78 (#36668) 2025-12-08 17:14:45 -08:00
Allen Houchins b3b2754688 Add ClickUp as a Windows FMA (#36942)
This pull request adds support for the Windows version of ClickUp to the
maintained apps system. The changes introduce new metadata, installer
information, and management scripts for ClickUp on Windows, ensuring it
can be properly discovered, installed, and uninstalled through the
platform.

**Addition of ClickUp for Windows:**

* Added a new input manifest `clickup.json` for ClickUp in
`ee/maintained-apps/inputs/winget`, specifying package details and
default categories.
* Updated `apps.json` to include ClickUp for Windows, with platform
information and a descriptive entry for discoverability.

**Installer and management scripts:**

* Created `clickup/windows.json` in outputs, defining the available
version, installer URL, install/uninstall PowerShell scripts, SHA256
hash, and upgrade code for ClickUp on Windows.
2025-12-08 19:12:33 -06:00
Mike Thomas 7fca0f8ae8 Update a-new-chapter-for-device-management.md (#36393)
- fixed faulty parallelism in the bullets, without changing the meaning.
("With Fleet, you can community driven" does not make sense.)
- changed the order of the bullets to balance the suggested change
better.
2025-12-09 10:01:28 +09:00
Allen Houchins 88aff0b88f Add VLC as a Windows FMA (#36938) 2025-12-08 18:52:44 -06:00
Allen Houchins 4dc5aeff16 Add Transmit as a macOS FMA (#36933) 2025-12-08 17:59:21 -06:00
Luke Heath d43e667a73 Bump fleetctl dependencies to latest (#36920) 2025-12-08 16:37:18 -06:00
Luke Heath 70ab8c2925 Adding changes for Fleet v4.77.0 (#35382) (#36614) 2025-12-08 16:32:47 -06:00
Eric 3eb444473e Run website workflows for changes to Fleet maintained apps (#36775) 2025-12-08 16:27:55 -06:00
Victor Lyuboslavsky abe7306f67 Added fleet-gitops to eng metrics. (#36706) 2025-12-08 16:27:06 -06:00
Jonathan Katz b8d2ba371e Update replica db setup and guide (#36918)
**Related issue:** Resolves #35937
Changes:
- Fix `make db-replica-setup`
- mention the tool in
`docs/contributing/getting-started/testing-and-local-development.md`.
2025-12-08 17:07:04 -05:00
fleet-releaseandmostlikelee cfa55d8453 Update Fleet-maintained apps (#36922)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-08 15:32:10 -06:00
Allen Houchins 0813bfb9dd Add Raycast as a macOS FMA (#36916) 2025-12-08 15:01:29 -06:00
RachelElysia 87a8a64199 Fleet UI: Remove software header for fleet free (#36902) 2025-12-08 15:46:52 -05:00
Steven PalmesanoandNoah Talerman 7fb0ab105a Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Josh Roskos ed17e84d05 Update SSO configuration paths in documentation (#36894)
Updates from customer call today: 
  - Updated image to reference `Fleet users` callback URL
  - Updated *Fleet configuration* instructions for UI changes
2025-12-08 14:04:49 -06:00
Marko Lisica c9d997e69e Update URL for unsigning configuration profiles guide (#36860)
I tested this and link redirects to "Enforce" section. "Create
configuration profile" section has all the information about signed
profiles.

Related to: #26688

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
2025-12-08 21:00:27 +01:00
Mitch Francese 6c6cdbaf59 Add Fleet-managed app: KeePassXC for Windows (#36908) 2025-12-08 13:27:07 -06:00
RachelElysia b9dcf9f6cf Fleet UI: Fix Android link on SW details page (#36871) 2025-12-08 13:41:52 -05:00
Allen Houchins 002e248344 Disable the Cloudflare DNS over HTTPS configuration profile (#36904)
Slack thread:
https://fleetdm.slack.com/archives/C071NNMSP2R/p1765215959557429
2025-12-08 12:39:23 -06:00
Mike ThomasandEric ab3040c395 Update product screenshots (#36858)
Closes https://github.com/fleetdm/confidential/issues/12414

- Updated product screenshots to match the new UI theme.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-12-08 12:27:03 -06:00
Allen Houchins 33a1d82f51 Fix unbound variable error in detect-new-fmas-in-pr.sh (#36613) 2025-12-08 10:37:36 -06:00
Konstantin Sykulev ee1be26878 certificate gitops fixes (#36708)
**Related issue:** Resolves #36649

Cleaned up some gitops messaging

Changed the team parameter to accept a name rather than an id. 
the certificate_template is still using an id. This matches what other
entities in gitops.
Here is a sample post to the spec endpoint for a certificate_template
```
{
  specs: [
    {
       "name": "certificate template",
       "team": "workstations",
       "certificate_authority_id": 1,
       "subject_name": "CN:hello"
    }
  ]
}
```

# Checklist for submitter

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually
2025-12-08 10:11:15 -06:00
Victor Lyuboslavsky 103d537dc5 Change status to delivered in flowchart. (#36800)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36795
2025-12-08 10:07:32 -06:00
Allen Houchins 8570693bd1 Add GPG Suite as a macOS FMA (#36834) 2025-12-08 09:45:53 -06:00
Victor Lyuboslavsky 16c8c813f4 Fixing scorecards-analysis.yml (#36889)
Resolves broken CI on main
2025-12-08 09:45:37 -06:00
Victor Lyuboslavsky a1fd214713 Adding Gradle wrapper validator (#36817)
Resolves https://github.com/fleetdm/fleet/security/code-scanning/1484

Fix uses OSSF feature:
https://github.com/ossf/scorecard/issues/1815
2025-12-08 09:23:38 -06:00
Victor Lyuboslavsky 321ed1dc12 Update MySQL versions we test with to 8.4.7 and 9.5.0 (#36803)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36801

Test and docs changes only.

Passing 8.4.7 tests in this workflow run:
https://github.com/fleetdm/fleet/actions/runs/19978256106/job/57299389148
2025-12-08 09:12:05 -06:00
Victor Lyuboslavsky 40022c5537 Add incremental lint run, with modernize as the linter. (#36711)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #32999

The `modernize` linter was discussed some time ago in the backend sync.
We wanted to add it but it was not possible.

Now that it has been added to golangci-lint, we are adding it.

golangci-lint has incremental mode, where only changes vs the base
branch are linted. This is nice when adding new linters without needing
to fix the whole codebase. That said, it would be nice to `modernize`
the whole codebase.
2025-12-08 09:06:05 -06:00
Victor Lyuboslavsky cdd57fc206 Removing dependencies from endpoint_utils (#36672)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36670

Refactoring `middleware/endpoint_utils` package to remove direct
dependencies on:
- fleet.Service
- android.Service

Specific changes are:
- replace AuthFunc+FleetService with AuthMiddleware
- Move the definition of handler functions to the respective services
and use a generic `CommonEndpointer[H any] struct`

Although this was discovered as part of Activity bounded context
research, this change is not directly related to bounded contexts.

In retrospect, this decoupling should have been done when creating the
Android service for ADR-0001.

## Testing

- [x] QA'd all new/changed functionality manually



<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Refactor**
* Internal restructuring of endpoint handling and authentication
middleware composition to improve code maintainability and type safety.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-08 09:05:02 -06:00
Jonathan KatzandIan Littman 5d62977e1f Add and Delete display names via GitOps (#36575)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36509 and #36513
-  batch set in-house apps will now add or delete display names with
- batch set software installers will now delete display names (could
already add)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-12-08 10:01:07 -05:00
Ian Littman ec39fb3846 Add database migration for team ID on labels, update structs + summary DB query to pass through (#36842)
Resolves #36779.

The existing label queries (other than summary) use SELECT * so it was
easier to add the fields to the struct than to fix the queries to not do
SELECT *, hence slightly expanded scope here (which should make the
remaining API work on team labels go a bit more quickly).

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

Changes file skipped due to this being a small subtask.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements) -
see above

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

GitOps work for this task will be merged in its own PR.
2025-12-08 08:52:39 -06:00
fleet-releaseandmostlikelee b506fe84cf Update Fleet-maintained apps (#36861)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-08 08:45:29 -06:00
Allen Houchins dee10b9991 Add Evernote as a macOS FMA (#36857) 2025-12-07 23:57:31 -06:00
Allen Houchins b40c952c11 Add Asana as a Windows FMA (#36855) 2025-12-07 22:42:35 -06:00
Allen Houchins fa678ed4f7 Update workstations-canary.yml (#36853)
- reverting changes
2025-12-07 22:20:01 -06:00
Allen Houchins 729d1ff995 Update workstations-canary.yml (#36852)
- Removing Keynote from self service to address gitops run error
2025-12-07 22:02:38 -06:00
Allen Houchins 8f86ee2942 Update migrate-slack-preferences.sh (#36850)
- Script was exit 1 when no user home directories were found when it
should have been exit 0.
2025-12-07 21:28:35 -06:00
Ian Littman 62755cbd82 Bump Go to 1.25.5, Alpine to 3.23.0 where relevant, bump Trivy to current version (#36848)
Fixes vulns reported in
https://github.com/fleetdm/fleet/actions/runs/19999992703. We'll
definitely want to at least cherry-pick this.
2025-12-07 20:04:14 -06:00
fleet-releaseandmostlikelee 89ec7dcf8c Update Fleet-maintained apps (#36845)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-07 15:59:37 -06:00
fleet-releaseandmostlikelee ae66a834d9 Update Fleet-maintained apps (#36838)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-06 17:15:11 -06:00
Isabell Reedy 1cea77362a Remove IT Support Admin from site (#36805) 2025-12-06 07:05:29 -08:00
fleet-releaseandallenhouchins e93c3acef8 Update Fleet-maintained apps (#36836)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-05 23:49:37 -06:00
Allen Houchins b524b65635 Add Eclipse IDE as a macOS FMA (#36835) 2025-12-05 23:22:46 -06:00