Commit Graph
11344 Commits
Author SHA1 Message Date
Victor Lyuboslavsky c19ebfee46 Update golang.org/x/net dependency to fix GO-2024-2687 (#18086)
#17903 
Update golang.org/x/net dependency to fix GO-2024-2687
2024-04-05 16:45:07 -05:00
Lucas Manuel Rodriguez 5a02624f27 Add support for pre-release on Windows orbit builder (#18102)
We need to support semantic versioning with pre-releases to comply with
semantic versioning required by goreleaser allowing us to build orbit
pre-releases.
2024-04-05 18:41:46 -03:00
Eric 766d08e767 Schema: remove requires_user_context related code, regenerate schema json. (#18091)
Changes:
- Updated the `build-static-content` script to remove support for the
`requires_user_context` column attribute
- Updated `get-extended-osquery-schema` to not set a
`requires_user_context` value in the merged schema json.
- Regenerated `schema/osquery_fleet_schema.json`
2024-04-05 15:39:02 -05:00
Brock WaltersandVictor Lyuboslavsky 8d0d309a1f Update macos-install-wine.sh with codesign warning (#17982)
The Wine developer does have an Apple Develeoper certificate but the
"Wine Stable" app bundle is not code-signed or notarized post-install &
disables Gatekeeper for the install. This adds a warning to the script
user about the app not being signed. post-install

---------

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-04-05 16:14:57 -04:00
Rachael Shaw 7bf3157fef Add redirects for calendar integration setup (#18094)
Adds redirects used in the Fleet UI for [calendar integration
setup](https://www.figma.com/file/p81nWodxL04YD7iNyr9xVa/%2317230-Fleet-in-your-calendar?type=design&node-id=362%3A3864&mode=design&t=p2gszo7V6sbbI2nF-1).
2024-04-05 14:00:04 -05:00
Jacob ShandlingandJacob Shandling 9e2be0028c UI: Restore missing JavaScript context in HQR config (#18087)
## Addresses #18083 
![Screenshot 2024-04-05 at 9 37
20 AM](https://github.com/fleetdm/fleet/assets/61553566/b683d30c-9af2-4cbb-8cea-b4a6e2422464)



- [x] Changes file added for user-visible changes in `changes/` 
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-05 11:47:42 -07:00
Victor Lyuboslavsky 5a6c407e1b Calendar webhook will retry if it receives response 429 (#18067)
#18044 
Calendar webhook will retry if it receives response 429 Too Many
Requests. Webhook request will retry for 30 minutes with a 1 minute max
delay between retries.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-05 12:44:56 -05:00
George Karr 6f78531280 Small changes to release and adding start of README (#18012) 2024-04-05 11:13:58 -05:00
Rachael ShawandEric 55df14a23e Update schema overrides to clarify which tables require joining against users (#18045)
For #16784.

These tables require joining against `users`:
+ `chrome_extension_content_scripts`
+ `chrome_extensions`
+ `firefox_addons`
+ `vscode_extensions`
+ `browser_plugins`
+ `crashes`
+ `preferences`
+ `safari_extensions`
+ `ssh_configs`
+ `user_ssh_keys`
+ `authorized_keys`
+ `known_hosts`
+ `shell_history`

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-05 11:11:18 -05:00
Eric 51c59e59b8 Website: update personalization (#18075)
Changes:
- updated the custom hook to support clearing the
`primaryBuyingSituation` with a query string (`?utm_content=clear`)
- Updated the pricing page to pre-select a pricing table mode based on a
user's `primaryBuyingSituation`
- reordered content on and updated the /support page to personalize/hide
community slack links based on a user's `primaryBuyingSituation`
- Updated the meta description of the product category landing pages
- updated personalization based on `primaryBuyingSituation` on the
/contact page.
- Updated the title of the /queries page based on the user's
`primaryBuyingSituation`
- Added personalization to the product category landing pages.
2024-04-05 12:57:45 +09:00
Eric 58db642f0a Website: remove /imagine policy and route. (#18076)
Changes:
- Removed `/imagine/*` policies.
2024-04-04 21:05:00 -05:00
Eric bb932c4659 Website: remove /imagine pages (#18073)
Changes:
- Removed /imagine pages
2024-04-04 19:18:38 -05:00
Eric 505084f790 Website: add "EDR health checks" to /endpoint-ops (#18059)
Closes: https://github.com/fleetdm/confidential/issues/5722

changes:
- updated the /endpoint-ops page to match the latest wireframes.
2024-04-05 08:40:11 +09:00
Dave HerderandSam Pfluger dda58e3dba Update README.md (#18011)
added 'Process a security questionnaire' responsibility

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 16:28:49 -05:00
Dave HerderandSam Pfluger 4671eb22d3 Update communications.md (#18040)
added link to trust portal under vendor questionnaires section

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 16:28:42 -05:00
Victor Lyuboslavsky f476ddcfd6 Fix panic due to nil calendar config. (#18065)
#18063

Fixing potential server panic when events are created with calendar
integration, but then global calendar integration is disabled.

Could not do a PR directly from
[fleet-v4.48.0](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.48.0)
due to merge conflicts.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-04 16:18:41 -05:00
JD 068670d8e3 Article: Fleet 4.48.0 release (#18062)
Article: Fleet 4.48.0 release and capitalization fixes to CHANGELOG.
#17531
2024-04-04 14:17:17 -07:00
Isabell Reedy a8fce3455a Add Award to digital experience page (#18049) 2024-04-04 16:02:25 -05:00
Noah Talerman 8042c9cec4 Head of Product Design is DRI for features table (#18052) 2024-04-04 16:01:44 -05:00
Noah Talerman 9bf9a162fc Run script modal: Update copy (#18068)
For the following story: #16460
2024-04-04 16:55:25 -04:00
Noah Talerman 842c258d7c Update workstations-canary.yml (#18051)
- Remove "chromeOS/macOS - Screenlock enabled"
2024-04-04 16:54:16 -04:00
Sam Pfluger c1752c9cfd Fix sentence case (#18069) 2024-04-04 15:06:15 -05:00
RachelElysia b7296ce4f9 Fleet UI: Surface orbit version and fleetd version to host details page (#18013) 2024-04-04 15:18:04 -04:00
Marko Lisica 4585a6e2c2 API design: Pre-fill and lock local account creation screen during out-of-the-box macOS setup (#17118)
API design for:
- #9147
2024-04-04 14:38:42 -04:00
Lucas Manuel Rodriguez 8194459ee9 Use osqueryd edge on servers canary team (#18058)
I copied `it-and-security/lib/servers.agent-options.yml` and added the
`update_channels` key.
2024-04-04 14:24:16 -04:00
Lucas Manuel Rodriguez e8ca959888 Add enterprise integration test for calendar events (#17900)
Integration tests for the calendar feature: #17441.

Adding coverage screenshots for the calendar cron and the osquery
distributed/write coverage:

![Screenshot 2024-03-27 at 14 20
44](https://github.com/fleetdm/fleet/assets/2073526/40d394ab-2208-4bec-981b-fe22fae8b5c1)
![Screenshot 2024-03-27 at 14 21
20](https://github.com/fleetdm/fleet/assets/2073526/1e4c8611-21ba-48a6-82f8-a163594f7f01)
2024-04-04 14:58:31 -03:00
Jacob ShandlingandJacob Shandling 77c8adf4bb Add frontend dev pattern for handlers (#18061)
Pattern doc updates per today's frontend sync

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-04 10:16:19 -07:00
Jacob ShandlingandJacob Shandling 74761b75d8 Update carve request block id mismatch error code from 500 –> 400 (#17974)
## Addresses #16951

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`
- [x] Added/updated tests
- [ ] Manual QA for all new/changed functionality – @ksatter can you
please add reproduction steps to the issue to aid in manual QA?

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-04-04 09:38:10 -07:00
Victor Lyuboslavsky 63c096b102 Waiving CVE-2023-32698 (#18056)
#17359 
Waiving CVE-2023-32698
2024-04-04 11:24:54 -05:00
Eric a0d1172f89 Website Update /start signup flow. (#18027)
Closes: #17958

Changes:
- Updated the primary and secondary CTAs site-wide
- Updated the /start page to have a multi-stage form that users can fill
out to personalize their onboarding experience
- Updated the signup action to not set a `primaryBuyingSituation` on new
user records (This will now be set when users progress through the
/start form)
- Added two new attributes to the `User` model:
`currentGetStartedQuestionnarieStep` and
`getStartedQuestionnarieAnswers` that save user's progress in the /start
form.


Before this PR can be merged we will need to:
- [x] Update the Zapier webhook that runs when new users sign up to no
longer expect a `primaryBuyingSituation` value
- [ ] Update the User table in the website's database
- [ ] Migrate the existing user records
2024-04-04 11:13:53 -05:00
RachelElysia 0db1c225f4 Fleet UI: Fix several flows where team ID is not being preserved (#17968) 2024-04-04 11:34:07 -04:00
Luke Heath 80b1f1f78f Prepare Fleet v4.48.0 (#18022) 2024-04-04 10:01:46 -05:00
Victor LyuboslavskyandNoah Talerman 5a3c54c0b6 Updated 1Password policy to only search 1 level deep for performance reasons. (#18003)
#17827 

Updated 1Password policy to only search one level deep for performance
reasons.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-04-04 09:33:17 -05:00
Joanne Stableford 3de9a160ed Add info on how Fleeties can update benefit coverage for QLEs (#17998)
...Adding to our institutional knowledge.
2024-04-04 02:24:29 -05:00
Joanne StablefordandSam Pfluger a5c0224f42 Add process for reporting customer revenue status (#17965)
...

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-04-04 02:07:58 -05:00
Mike McNeilandEric f8157ce679 Website: personalize contact form (#18026)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-03 19:40:15 -05:00
Victor Lyuboslavsky 746309ca47 Waive 3 Go code scanning vulnerability alerts. (#18007)
Waiving 3 Go code scanning alerts flagged by osv-scanner.
2024-04-03 16:04:01 -05:00
Rachael Shaw 1d80aa7668 When flagging a parameter as premium-only, always include a period. (#18038)
For better readability: add periods as separation between the Fleet
Premium message and parameter descriptions.
   _Available in Fleet Premium_. Description text.
 _Available in Fleet Premium_ Description text.
2024-04-03 11:48:22 -05:00
Gabriel Hernandez 3decb68220 revert accidental merge for FE lint warning fixes (#18036)
This reverts commit a3f3230aa9.

I accidentally merged to main so am reverting this change.
2024-04-03 17:25:16 +01:00
Zach Wasserman e3deceeb6d Add parse_json, parse_jsonl, parse_xml, and parse_ini tables to fleetd (#18035)
For #17577

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux. (performed only on macOS)
2024-04-03 09:13:04 -07:00
Lucas Manuel Rodriguez 3d260fa9ab Bump osqueryd version to 5.12.1 (#18028)
Bumping version of osqueryd for releasing 5.12.1 to the `edge` channel.
2024-04-03 10:57:28 -03:00
Gabriel Hernandez a3f3230aa9 fix up some lint warning that show in github (#17997)
quick PR to clean up some of the warning that show up in github PRs.
2024-04-03 12:33:38 +01:00
github-actions[bot]andlucasmrod a1fa232aca Update versions of fleetd components in Fleet's TUF [automated] (#18029)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-04-03 06:26:35 -03:00
Victor Lyuboslavsky 25dc6829f5 Mark calendar webhook as errored so that it doesn't get stuck in pending and keeps logging warnings. (#18021)
Mark calendar webhook as errored so that it doesn't get stuck in pending
and keeps logging warnings.

This situation only occurs when webhook fired but returned an error. It
will try to fire again, but if it tries after the event concluded, then
we'll mark it as errored.
2024-04-02 17:17:04 -05:00
Victor Lyuboslavsky 0bca241680 Mark calendar webhook as errored so that it doesn't get stuck in pending and keeps logging warnings. 2024-04-02 16:03:51 -05:00
Sam Pfluger 77e74e729b Fix unnecessary call-out box and crazy formating (#18017)
![image](https://github.com/fleetdm/fleet/assets/108141731/74cf5698-4626-4c09-a4d9-dccf323ee9b1)


...
2024-04-02 15:39:04 -05:00
Luke Heath 7b91434452 Updating changelog for 4.48.0 (#18014) 2024-04-02 15:38:42 -05:00
Dave Herder 5c7783eca0 Update vendor-questionnaires.md (#18009)
added subprocessors link from trust portal
...
2024-04-02 13:35:01 -05:00
George Karr 011d97fad1 Adding theoretical main variation (#17904) 2024-04-02 13:26:31 -05:00
enzo-g 8a22f13f53 Update README.md (#17979) 2024-04-02 11:24:16 -05:00