Commit Graph
19173 Commits
Author SHA1 Message Date
Jorge Falcon 6ea9185c1c Loadtesting - osquery_perf docker image build fixes (#34901)
- Bumps docker provider from 2.16.0 to 3.6.x
- Moves builds from `docker_registry_image` to new `docker_image`
resource
2025-10-29 08:33:46 -04:00
chazmaclaughlin6-bit 293b666e49 Fix capitalization in contact request instructions (#34794)
Corrected capitalization of 'if' in request instructions.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))
2025-10-29 08:33:39 -04:00
jkoehnecke 6459af95a0 Update README.md (#34597) 2025-10-29 08:32:17 -04:00
Eric f3749ba253 Website: update variable name in signup.js (#34908)
Changes:
- Fixed a bug in signup.js, which prevented users who were eligible for
a render trial from being successfully assigned an instance.
2025-10-28 19:53:19 -05:00
Scott Gress 1962ea7622 Add nil check to prevent 500 error on policies page (#34905) 2025-10-28 18:30:36 -05:00
Eric b2ec6d8c20 Website: Update login and register page redirects for logged in users. (#34900)
Related to: https://github.com/fleetdm/fleet/issues/33798

Changes:
- Updated the redirects for logged-in users for the /login and /register
pages to take users to the /try page.
- Updated the primary button color in the query generator and the
landing page generator stylesheet template
2025-10-28 17:44:22 -05:00
Noah Talerman 8d363678cd Fleet 4.75: Santa tables (#34867)
Context: https://github.com/fleetdm/fleet/issues/34789
2025-10-28 18:17:26 -04:00
RachelElysia f83b8ca064 Fleet UI: IPA - ability to upload, call mdm command API for activity details (#34886)
resolves #34826 

## Issue
Followup for #34012 

## Description
- Fix client side error happening when uploading Custom Package > IPA 
- Fix IPA details modal to call mdm command API instead of software
install result API
2025-10-28 17:48:10 -04:00
Eric 11984cdf6f Website: Improve results returned by get-enriched helper (#34896)
Closes: https://github.com/fleetdm/confidential/issues/12790

Changes:
- Updated the get-enriched helper to use a different Coresignal API to
search for company information.
2025-10-28 16:23:30 -05:00
Jonathan Katz 29f92be976 Fix intune company portal checksum (#34875)
Resolves: #34640
One time fix using the hash computed from the file downloaded from the
URL.
No ingestion change since we don't want this to happen again, and there
is a now a validation check for the checksum hash that will prevent this
situation.

## Testing

- [x] QA'd all new/changed functionality manually 
- [x] App adds successfully to team
- [x] App installs on host
- [x] App opens on host
- [x] App uninstalls on host
2025-10-28 17:08:50 -04:00
Luke Heath b4275ba7b2 Add guidelines for discussing release dates (#34892) 2025-10-28 15:58:28 -05:00
dependabot[bot] 8d181c8e29 Bump validator from 13.11.0 to 13.15.20 (#34848) 2025-10-28 15:57:06 -05:00
Jonathan Katz b3df8b7940 Fix software_package info not provided (#34888)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34882 
Also fix uploaded_time not being returned in metadata

# Checklist for submitter

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually
2025-10-28 16:21:51 -04:00
Victor Lyuboslavsky ca252c923c Randomized software versions in osquery-perf (#34656)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34655

Tested locally. A software title will change versions about 1% of the
time (so if a host has 1000 titles, then ~10 of them will change
versions).

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Improved software version data generation in performance testing by
introducing randomization logic across macOS, Windows, and Linux
platforms, enabling more realistic and varied test scenarios.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-10-28 13:46:59 -05:00
Brock Walters c07b915cd9 Clarify SCEP challenge string limitations on Windows (#34883)
Added note about special characters in SCEP challenge strings for
Windows.
2025-10-28 14:16:13 -04:00
Mike McNeil 5556e1e1bf Update philip (#34880) 2025-10-28 12:34:03 -05:00
Jonathan Katz f4fd1c106e Fix in house app package name and title name (#34868)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34823 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually
## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2025-10-28 13:19:13 -04:00
Eric f89b81ca7a Website: Update Render instance management script. (#34871)
Changes:
- Updated the `manage-fleet-premium-trial-instances` script to use the
updated supported `status` values when looking for existing
`RenderProofOfValue` records, and updated the logs in the script.
2025-10-28 12:06:58 -05:00
Jonathan Katz bb512cc345 Documentation updates for in-house-app features (#34817)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
2025-10-28 12:05:47 -05:00
Noah Talerman 2bc25471f6 API reference: Batch-modify profiles w/ 100+ profiles (#34853)
Requests take 5+ seconds

Context:
https://github.com/fleetdm/fleet/issues/32786#issuecomment-3456612158
2025-10-28 12:03:30 -05:00
RachelElysia e1b325130a Fleet UI: IPA custom packages (#34220) 2025-10-28 12:44:17 -04:00
Scott Gress b35e65455e Refactor paginated list to use UseQuery (#33669)
# Details

As mentioned in a previous front-end sync, I realized after having to
add a `reload()` method to the `PaginatedList` imperative handle that I
had strayed too far from the path. The original concept for this
component was for it to be fully self-contained, so the parent didn't
have to concern itself with pagination at all other than being told what
page to load. But the addition of an `onChangePage` property isn't a
tragedy and is totally worth the reduction in code, consistency with use
of `useQuery` elsewhere and React best practice of passing data from
parent to child.

This refactor still retains the use of the imperative handle for
querying the "dirty state" of the list, so parents don't have to manage
that state themselves.

## Testing

- [X] Added/updated automated tests
Updated PaginatedList tests as needed. Also confirmed that tests for the
upstream components (PoliciesPaginatedList, Secrets, RunBatchScriptModal
and ScriptBatchProgress) all passed without any modification.
- [X] QA'd all new/changed functionality manually
Added enough data to paginate each of the components that uses
PaginatedList, confirmed pagination still works and dirty state
functionality (in PoliciesPaginatedList) still works. Also confirmed
add/delete functionality works as expected in Secrets.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- New Features
- Consistent, responsive pagination across Scripts, Secrets, Hosts, and
Policies pages with clearer loading and empty states.
- Bug Fixes
- Delete Secret modal now reliably displays errors and refreshes the
list after deletion.
- Refactor
- Unified data-driven pagination flow for improved performance and
smoother navigation.
  - Simplified list interactions by removing manual reloads.
- Tests
- Updated tests to align with the new pagination behavior and data flow.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-10-28 11:27:05 -05:00
Robert Fairburn 1fedabe7a8 Update alpine base image to latest (#34864)
Resolves openssl:3.3.3/CVE-2025-9230 in base images.
2025-10-28 11:24:05 -05:00
Allen Houchins f686590dc7 Added logo to Zoom custom package (#34493)
- Added Zoom logo to the Zoom custom package
2025-10-28 10:53:55 -05:00
Noah Talerman 444c7b5238 macOS Setup Assistant (#34863)
- Link to Apple docs:
https://developer.apple.com/documentation/devicemanagement/profile
2025-10-28 15:38:06 +00:00
github-actions[bot]andlucasmrod d8f34da3ac Update versions of fleetd components in Fleet's TUF [automated] (#34787)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-10-28 09:32:19 -05:00
Allen Houchins 05807b768c Update 1Password macOS version number to 8.11.16 (#34850) 2025-10-28 08:52:31 -05:00
Martin Angers cab7cc15be Initial support for in-house apps on iOS/iPadOS (#34802) 2025-10-28 08:33:58 -04:00
437cb9ca96 Add script to remove custom santa extension (#34828)
TODO:
- Make the script itself executable. Right now you have to run `sudo
./unload_osquery_extension.sh /var/fleet/extensions/santa.ext`

Context: https://github.com/fleetdm/fleet/issues/34789

---------

Co-authored-by: Allen Houchins <allenhouchins@mac.com>
Co-authored-by: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
2025-10-27 22:03:56 -05:00
Noah Talerman 00004f296d Handbook: Product groups + DRIs (#34825) 2025-10-27 19:54:25 -05:00
Victor Lyuboslavsky 7481dc4319 Updated changelog for fleetd 1.49.1 (#34836) 2025-10-27 19:19:48 -05:00
jacobshandling 3aad722924 (releases on merge to main) Fix vuln false positives for "Logi Bolt.app" (#33920)
**_QA on-branch before merge_**
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #31082 

Before:
<img width="1258" height="989" alt="Screenshot 2025-10-06 at 9 31 46 PM"
src="https://github.com/user-attachments/assets/b027b3b6-6201-468d-9141-76b80daa35c8"
/>

After
<img width="1258" height="989" alt="Screenshot 2025-10-06 at 9 26 03 PM"
src="https://github.com/user-attachments/assets/147bdd41-5ebc-4d23-bd85-c1cb963a429d"
/>


- [x] Changes file added for user-visible changes in `changes/`
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-10-27 16:55:30 -07:00
Ian Littman 7502880869 Allow query editing in GitOps Mode for policies, add ▶ icon to live query "Run" button (#34838)
Fixes #34086.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2025-10-27 18:52:17 -05:00
Noah TalermanandRachael Shaw 4c104da5b9 [YAML reference] Clarify Apple's built-in variables (#34030)
- @noahtalerman: These variables are only supported in specific
payloads. Apple source:
https://support.apple.com/en-my/guide/deployment/dep04666af94/1/web/1.0
- @noahtalerman: We confirmed this. See @allenhouchins's findings in
this feature request: https://github.com/fleetdm/fleet/issues/28636

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2025-10-27 17:29:42 -05:00
Brock Walters 1874880d15 Fix minor grammatical issues in documentation (#34675)
Accurate.
2025-10-27 17:25:23 -05:00
Brock Walters 334572bf0c Enhance MDM command payload encoding instructions (#34722)
Added instructions for base64 encoding MDM command payloads in Terminal
and PowerShell.
2025-10-27 17:13:48 -05:00
Noah Talerman 53a6179500 [Fleet server configuration] Clarify that only one can be set (#34743)
- Clarified that only one of `server_private_key_arn` or
`server_private_key` can be set.

Context:
https://github.com/fleetdm/fleet/issues/31321#issuecomment-3412996433
2025-10-27 17:12:58 -05:00
Noah Talerman b6348c505b hash_sha256 is the cdhash_sha256 (#34822)
The `hash_sha256` from the [`/hosts/:id/software` Fleet
API](https://fleetdm.com/docs/rest-api/rest-api#get-hosts-software) is
an attribute that Santa can use to block applications:
https://northpole.dev/features/binary-authorization/#cdhash

https://fleetdm.com/tables/codesign:

<img width="894" height="449" alt="Screenshot 2025-10-27 at 1 49 29 PM"
src="https://github.com/user-attachments/assets/287750b5-ef38-4eba-aa8c-085520150be0"
/>
2025-10-27 17:05:48 -05:00
Jorge Falcon 084fd97578 Fix software icon links in REST API documentation (#34734) 2025-10-27 17:05:20 -05:00
jacobshandling cb2d42de78 (releases on merge to main) Fix vuln false positives for vscode golang extension (#33839)
**_QA on-branch before merge_**

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
## Resolves #33235 

<img width="2556" height="1419" alt="Screenshot 2025-10-03 at 5 55
40 PM"
src="https://github.com/user-attachments/assets/49078de7-699a-4a64-86ab-f435065f91ed"
/>



- [x] Changes file added for user-visible changes in `changes/`
2025-10-27 14:48:29 -07:00
Carlo 9b87af915e Upgrade Fleet's Node.js version (#34603)
Fixes #31466. Upgrades Node.js to 24.10.0
2025-10-27 17:21:50 -04:00
Ian Littman 71114ecf91 Add Arch diff for running TUF without SSL (#34834)
Resolves #34411.
2025-10-27 16:10:12 -05:00
Eric f76a9976d8 Website: Update signup flow and Fleet Premium trial (#34820)
Changes:
- Updated the "Try it now" button on the website's header navigation, it
will now open a signup/login modal on every page (excluding the
dedicated /register and /login pages)
- Updated the website to assign Fleet Premium instances hosted on Render
to eligible users. All other users will be given a 30-day Fleet Premium
trial license key to use with their deployment method of choice.
- Added a script that creates and manages a pool of Render instances.
- Added a new database model: `RenderProofOfValue`
- Added four new email templates
- Updated primary button colors to match the core product.
- Removed the organization requirement for new users signing up.
- Added a new component: `<signup-modal>`
- Added a new attribute to the User model: `fleetPremiumTrialType`
2025-10-27 13:33:47 -05:00
Jonathan Katz 88e196e3bc 33896 validate fma hash (#34583)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33896 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.


## Testing

- [x] QA'd all new/changed functionality manually

## Test plan
- [ ] Run FMA validation GHA that should pass, it should still pass 
- [ ] Run FMA validation GHA with the bad manifest for intune company
portal, it should fail
2025-10-27 14:07:52 -04:00
fleet-releaseandmostlikelee aa7453be80 Update Fleet-maintained apps (#34807)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-10-27 11:37:25 -04:00
408b7cb105 Update CS README.md (#34657)
adding proposed section for CSE Morning Procedures

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
Co-authored-by: Zay Hanlon <114112018+zayhanlon@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-10-27 09:20:28 -05:00
Victor Lyuboslavsky 9cf402339b fleetd release: log details of workflow runs (#34792)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34772 

This change adds `Printf` statements. No functional changes.
2025-10-27 09:18:15 -05:00
Allen Houchins 6708e2d998 Fix typo in log-destinations.md (#34803) 2025-10-27 09:02:07 -05:00
Magnus Jensen f2341497c8 DCSW: Allow uploading and validating Windows SCEP profiles (#34691)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34247 

Allows for uploading and validating SCEP profiles for Windows.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.
## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-10-27 10:48:37 -03:00
RachelElysia dbbb165494 Fleet UI: Keep new lines in code blocks but still remove trailing new lines (#34777) 2025-10-27 09:35:18 -04:00