Commit Graph
20077 Commits
Author SHA1 Message Date
Jonathan Katz b8d2ba371e Update replica db setup and guide (#36918)
**Related issue:** Resolves #35937
Changes:
- Fix `make db-replica-setup`
- mention the tool in
`docs/contributing/getting-started/testing-and-local-development.md`.
2025-12-08 17:07:04 -05:00
fleet-releaseandmostlikelee cfa55d8453 Update Fleet-maintained apps (#36922)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-08 15:32:10 -06:00
Allen Houchins 0813bfb9dd Add Raycast as a macOS FMA (#36916) 2025-12-08 15:01:29 -06:00
RachelElysia 87a8a64199 Fleet UI: Remove software header for fleet free (#36902) 2025-12-08 15:46:52 -05:00
Steven PalmesanoandNoah Talerman 7fb0ab105a Windows MDM migration notification (#36525)
Related to https://github.com/fleetdm/confidential/issues/12925

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2025-12-08 14:10:46 -06:00
Josh Roskos ed17e84d05 Update SSO configuration paths in documentation (#36894)
Updates from customer call today: 
  - Updated image to reference `Fleet users` callback URL
  - Updated *Fleet configuration* instructions for UI changes
2025-12-08 14:04:49 -06:00
Marko Lisica c9d997e69e Update URL for unsigning configuration profiles guide (#36860)
I tested this and link redirects to "Enforce" section. "Create
configuration profile" section has all the information about signed
profiles.

Related to: #26688

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
2025-12-08 21:00:27 +01:00
Mitch Francese 6c6cdbaf59 Add Fleet-managed app: KeePassXC for Windows (#36908) 2025-12-08 13:27:07 -06:00
RachelElysia b9dcf9f6cf Fleet UI: Fix Android link on SW details page (#36871) 2025-12-08 13:41:52 -05:00
Allen Houchins 002e248344 Disable the Cloudflare DNS over HTTPS configuration profile (#36904)
Slack thread:
https://fleetdm.slack.com/archives/C071NNMSP2R/p1765215959557429
2025-12-08 12:39:23 -06:00
Mike ThomasandEric ab3040c395 Update product screenshots (#36858)
Closes https://github.com/fleetdm/confidential/issues/12414

- Updated product screenshots to match the new UI theme.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2025-12-08 12:27:03 -06:00
Allen Houchins 33a1d82f51 Fix unbound variable error in detect-new-fmas-in-pr.sh (#36613) 2025-12-08 10:37:36 -06:00
Konstantin Sykulev ee1be26878 certificate gitops fixes (#36708)
**Related issue:** Resolves #36649

Cleaned up some gitops messaging

Changed the team parameter to accept a name rather than an id. 
the certificate_template is still using an id. This matches what other
entities in gitops.
Here is a sample post to the spec endpoint for a certificate_template
```
{
  specs: [
    {
       "name": "certificate template",
       "team": "workstations",
       "certificate_authority_id": 1,
       "subject_name": "CN:hello"
    }
  ]
}
```

# Checklist for submitter

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually
2025-12-08 10:11:15 -06:00
Victor Lyuboslavsky 103d537dc5 Change status to delivered in flowchart. (#36800)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36795
2025-12-08 10:07:32 -06:00
Allen Houchins 8570693bd1 Add GPG Suite as a macOS FMA (#36834) 2025-12-08 09:45:53 -06:00
Victor Lyuboslavsky 16c8c813f4 Fixing scorecards-analysis.yml (#36889)
Resolves broken CI on main
2025-12-08 09:45:37 -06:00
Victor Lyuboslavsky a1fd214713 Adding Gradle wrapper validator (#36817)
Resolves https://github.com/fleetdm/fleet/security/code-scanning/1484

Fix uses OSSF feature:
https://github.com/ossf/scorecard/issues/1815
2025-12-08 09:23:38 -06:00
Victor Lyuboslavsky 321ed1dc12 Update MySQL versions we test with to 8.4.7 and 9.5.0 (#36803)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36801

Test and docs changes only.

Passing 8.4.7 tests in this workflow run:
https://github.com/fleetdm/fleet/actions/runs/19978256106/job/57299389148
2025-12-08 09:12:05 -06:00
Victor Lyuboslavsky 40022c5537 Add incremental lint run, with modernize as the linter. (#36711)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #32999

The `modernize` linter was discussed some time ago in the backend sync.
We wanted to add it but it was not possible.

Now that it has been added to golangci-lint, we are adding it.

golangci-lint has incremental mode, where only changes vs the base
branch are linted. This is nice when adding new linters without needing
to fix the whole codebase. That said, it would be nice to `modernize`
the whole codebase.
2025-12-08 09:06:05 -06:00
Victor Lyuboslavsky cdd57fc206 Removing dependencies from endpoint_utils (#36672)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36670

Refactoring `middleware/endpoint_utils` package to remove direct
dependencies on:
- fleet.Service
- android.Service

Specific changes are:
- replace AuthFunc+FleetService with AuthMiddleware
- Move the definition of handler functions to the respective services
and use a generic `CommonEndpointer[H any] struct`

Although this was discovered as part of Activity bounded context
research, this change is not directly related to bounded contexts.

In retrospect, this decoupling should have been done when creating the
Android service for ADR-0001.

## Testing

- [x] QA'd all new/changed functionality manually



<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Refactor**
* Internal restructuring of endpoint handling and authentication
middleware composition to improve code maintainability and type safety.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-08 09:05:02 -06:00
Jonathan KatzandIan Littman 5d62977e1f Add and Delete display names via GitOps (#36575)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36509 and #36513
-  batch set in-house apps will now add or delete display names with
- batch set software installers will now delete display names (could
already add)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-12-08 10:01:07 -05:00
Ian Littman ec39fb3846 Add database migration for team ID on labels, update structs + summary DB query to pass through (#36842)
Resolves #36779.

The existing label queries (other than summary) use SELECT * so it was
easier to add the fields to the struct than to fix the queries to not do
SELECT *, hence slightly expanded scope here (which should make the
remaining API work on team labels go a bit more quickly).

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

Changes file skipped due to this being a small subtask.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements) -
see above

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

GitOps work for this task will be merged in its own PR.
2025-12-08 08:52:39 -06:00
fleet-releaseandmostlikelee b506fe84cf Update Fleet-maintained apps (#36861)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-08 08:45:29 -06:00
Allen Houchins dee10b9991 Add Evernote as a macOS FMA (#36857) 2025-12-07 23:57:31 -06:00
Allen Houchins b40c952c11 Add Asana as a Windows FMA (#36855) 2025-12-07 22:42:35 -06:00
Allen Houchins fa678ed4f7 Update workstations-canary.yml (#36853)
- reverting changes
2025-12-07 22:20:01 -06:00
Allen Houchins 729d1ff995 Update workstations-canary.yml (#36852)
- Removing Keynote from self service to address gitops run error
2025-12-07 22:02:38 -06:00
Allen Houchins 8f86ee2942 Update migrate-slack-preferences.sh (#36850)
- Script was exit 1 when no user home directories were found when it
should have been exit 0.
2025-12-07 21:28:35 -06:00
Ian Littman 62755cbd82 Bump Go to 1.25.5, Alpine to 3.23.0 where relevant, bump Trivy to current version (#36848)
Fixes vulns reported in
https://github.com/fleetdm/fleet/actions/runs/19999992703. We'll
definitely want to at least cherry-pick this.
2025-12-07 20:04:14 -06:00
fleet-releaseandmostlikelee 89ec7dcf8c Update Fleet-maintained apps (#36845)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-07 15:59:37 -06:00
fleet-releaseandmostlikelee ae66a834d9 Update Fleet-maintained apps (#36838)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-12-06 17:15:11 -06:00
Isabell Reedy 1cea77362a Remove IT Support Admin from site (#36805) 2025-12-06 07:05:29 -08:00
fleet-releaseandallenhouchins e93c3acef8 Update Fleet-maintained apps (#36836)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-05 23:49:37 -06:00
Allen Houchins b524b65635 Add Eclipse IDE as a macOS FMA (#36835) 2025-12-05 23:22:46 -06:00
Allen Houchins 1d3e94c891 Add Yubico Authenticator as a macOS FMA (#36831) 2025-12-05 22:57:20 -06:00
Allen Houchins 028a29fe11 Add Sourcetree as a macOS FMA (#36830) 2025-12-05 22:57:05 -06:00
Allen Houchins 56f6d6101b Add Snagit as a macOS FMA (#36828) 2025-12-05 22:44:44 -06:00
Allen Houchins 08f6a47c50 Add Sketch as a macOS FMA (#36826) 2025-12-05 22:31:39 -06:00
Allen Houchins aa0fb5fea7 Add Quip as a macOS FMA (#36824) 2025-12-05 22:20:45 -06:00
Allen Houchins 3f23e8944b Add Microsoft Auto Update as a macOS FMA (#36822) 2025-12-05 22:16:04 -06:00
Allen Houchins 4eb2ddae66 Add Wireshark as a macOS FMA (#36819) 2025-12-05 22:08:17 -06:00
Allen Houchins 37a9b0a6e9 Add LibreOffice as a macOS FMA (#36820) 2025-12-05 21:58:12 -06:00
Sam Pfluger 9ea1c1787b Update references from SLAs to SLOs in handbook (#36778)
Replaced outdated references to 'customer support service level
agreements (SLAs)' with 'customer support service level objectives
(SLOs)' across multiple handbook files for consistency and accuracy.
Updated related URLs to point to the correct SLO documentation.

Releated to https://github.com/fleetdm/fleet/pull/36756
2025-12-05 21:09:41 -06:00
Victor Lyuboslavsky cd88e6395d Changed to "delivered" status and other fixes. (#36796) 2025-12-05 19:31:35 -06:00
Jahziel Villasana-Espinoza eb87048714 34376 android sw gitops (#36595)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34376

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

## New Fleet configuration settings

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [x] Verified that the setting is exported via `fleetctl
generate-gitops`
- [x] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
2025-12-05 20:01:57 -05:00
Eric 4531eb1392 Website: Update signup modal behavior on smaller screens. (#36810)
Closes: https://github.com/fleetdm/fleet/issues/36466

Changes:
- Updated the signup modal component to close the mobile navigation menu
when the modal is closed.
2025-12-05 17:53:39 -06:00
Luke Heath 9b46e4a973 Update release candidate process in README (#36811) 2025-12-05 17:40:09 -06:00
Steven Palmesano 6defeec1b9 Fix broken scep_proxy references (#36777) 2025-12-05 17:32:55 -06:00
Allen Houchins 78b4655555 Typo fix (#36730)
`self-service` is not a valid key. This should be `self_service`.
2025-12-05 17:31:30 -06:00
Victor Lyuboslavsky b1062296c5 ADR-0007: Pilot activity bounded context (#35402) 2025-12-05 17:19:33 -06:00