George Karr and George Karr
f287d23cf7
Adding a script to automate patch / minor releases ( #17198 )
...
This script was used to generate 4.45.1 and 4.46.0.
Workflow is tag issues with correct milestone, run `./patch_release.sh`
(with -m for release with more than bugfixes)
---------
Co-authored-by: George Karr <gkarr@xerithas-mac.local >
2024-03-21 14:30:39 -05:00
Sam Pfluger
9a91dad2a4
Added writing principles ( #17392 )
2024-03-21 14:16:54 -05:00
Dante Catalfamo
bd3e775e67
Windows MDM Fix Manual Detection ( #17721 )
...
#15565
Replace the use of the isFederated registry key with a keys that check
for AAD (Azure Active Directory, now Entra ID)
Federated enrollment (`isFederated`) seems to be when windows uses a
Discovery MDM endpoint to get its policy and management endpoint
configuration. This is always the case when a client is enrolled with
fleet, so installations always show up as automatic.
It's being replaced by a different key, `AADResourceID`, which appears
to identify the resource that controls the automated deployment. In my
tests it only appears to be populated when the computer is enrolled
through automated deployments. This key appears on both Windows 10 and
11.
There is a similar key, `AADTenantID`, which appears to identify the
client (tenant) to the Azure cloud. I haven't seen this ID in our
systems, so it is likely exclusively used in Azure. Both this key and
`AADResourceID` seem to always be set at the same time, so we only
check for the `AADResourceID`.
I've also added documentation on the registry keys I've analyzed for future reference.
2024-03-21 15:09:05 -04:00
Jacob Thorne
8ed8f3daa7
Fix Incorrect Helm Chart Keys in MySQL Installation Documentation ( #17160 )
...
This PR addresses an issue in the documentation for installing the MySQL
chart using Helm. Previously, the documentation provided a Helm install
command that incorrectly referenced mysqlUser and mysqlDatabase.
However, these keys don't exist in the chart's values.yaml file anymore.
2024-03-21 13:59:45 -05:00
f018f68e46
Update script execution documentation ( #17147 )
...
Removed reference to **Scripts** tab and added instructions for
accessing the **Run Script** modal from the host detail page.
# Checklist for submitter
Docs-only change
---------
Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com >
Co-authored-by: Rachael Shaw <r@rachael.wtf >
2024-03-21 13:50:18 -05:00
dependabot[bot]
27a59ed37c
Bump grunt from 1.0.4 to 1.5.3 in /ee/vulnerability-dashboard ( #17600 )
...
Bumps [grunt](https://github.com/gruntjs/grunt ) from 1.0.4 to 1.5.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gruntjs/grunt/releases ">grunt's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.3</h2>
<ul>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1745 ">#1745</a>
from gruntjs/fix-copy-op 572d79b</li>
<li>Patch up race condition in symlink copying. 58016ff</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1746 ">#1746</a>
from JamieSlome/patch-1 0749e1d</li>
<li>Create SECURITY.md 69b7c50</li>
</ul>
<p><a
href="https://github.com/gruntjs/grunt/compare/v1.5.2...v1.5.3 ">https://github.com/gruntjs/grunt/compare/v1.5.2...v1.5.3 </a></p>
<h2>v1.5.2</h2>
<ul>
<li>Update Changelog 7f15fd5</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1743 ">#1743</a>
from gruntjs/cleanup-link b0ec6e1</li>
<li>Clean up link handling 433f91b</li>
</ul>
<p><a
href="https://github.com/gruntjs/grunt/compare/v1.5.1...v1.5.2 ">https://github.com/gruntjs/grunt/compare/v1.5.1...v1.5.2 </a></p>
<h2>v1.5.1</h2>
<ul>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1742 ">#1742</a>
from gruntjs/update-symlink-test ad22608</li>
<li>Fix symlink test 0652305</li>
</ul>
<p><a
href="https://github.com/gruntjs/grunt/compare/v1.5.0...v1.5.1 ">https://github.com/gruntjs/grunt/compare/v1.5.0...v1.5.1 </a></p>
<h2>v1.5.0</h2>
<ul>
<li>Updated changelog b2b2c2b</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1740 ">#1740</a>
from gruntjs/update-deps-22-10 3eda6ae</li>
<li>Update testing matrix 47d32de</li>
<li>More updates 2e9161c</li>
<li>Remove console log 04b960e</li>
<li>Update dependencies, tests... aad3d45</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1736 ">#1736</a>
from justlep/main fdc7056</li>
<li>support .cjs extension e35fe54</li>
</ul>
<p><a
href="https://github.com/gruntjs/grunt/compare/v1.4.1...v1.5.0 ">https://github.com/gruntjs/grunt/compare/v1.4.1...v1.5.0 </a></p>
<h2>v1.4.1</h2>
<ul>
<li>Update Changelog e7625e5</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1731 ">#1731</a>
from gruntjs/update-options 5d67e34</li>
<li>Fix ci install d13bf88</li>
<li>Switch to Actions 08896ae</li>
<li>Update grunt-known-options eee0673</li>
<li>Add note about a breaking change 1b6e288</li>
</ul>
<p><a
href="https://github.com/gruntjs/grunt/compare/v1.4.0...v1.4.1 ">https://github.com/gruntjs/grunt/compare/v1.4.0...v1.4.1 </a></p>
<h2>v1.4.0</h2>
<ul>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1728 ">#1728</a>
from gruntjs/update-deps-changelog 63b2e89</li>
<li>Update changelog and util dep 106ed17</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1727 ">#1727</a>
from gruntjs/update-deps-apr 49de70b</li>
<li>Update CLI and nodeunit 47cf8b6</li>
<li>Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1722 ">#1722</a>
from gruntjs/update-through e86db1c</li>
<li>Update deps 4952368</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/gruntjs/grunt/blob/main/CHANGELOG ">grunt's
changelog</a>.</em></p>
<blockquote>
<p>v1.5.3
date: 2022-04-23
changes:
- Patch up race condition in symlink copying.
v1.5.2
date: 2022-04-12
changes:
- Unlink symlinks when copy destination is a symlink.
v1.5.1
date: 2022-04-11
changes:
- Fixed symlink destination handling.
v1.5.0
date: 2022-04-10
changes:
- Updated dependencies.
- Add symlink handling for copying files.
v1.4.1
date: 2021-05-24
changes:
- Fix --preload option to be a known option
- Switch to GitHub Actions
v1.4.0
date: 2021-04-21
changes:
- Security fixes in production and dev dependencies
- Liftup/Liftoff upgrade breaking change. Update your scripts to use
--preload instead of --require. Ref: <a
href="https://github.com/js-cli/js-liftoff/commit/e7a969d6706e730d90abb4e24d3cb4d3bce06ddb ">https://github.com/js-cli/js-liftoff/commit/e7a969d6706e730d90abb4e24d3cb4d3bce06ddb </a>.
v1.3.0
date: 2020-08-18
changes:
- Switch to use <code>safeLoad</code> for loading YML files via
<code>file.readYAML</code>.
- Upgrade legacy-log to ~3.0.0.
- Upgrade legacy-util to ~2.0.0.
v1.2.1
date: 2020-07-07
changes:
- Remove path-is-absolute dependency.
(PR: <a
href="https://redirect.github.com/gruntjs/grunt/pull/1715 ">gruntjs/grunt#1715</a>)
v1.2.0
date: 2020-07-03
changes:
- Allow usage of grunt plugins that are located in any location that
is visible to Node.js and NPM, instead of node_modules directly
inside package that have a dev dependency to these plugins.
(PR: <a
href="https://redirect.github.com/gruntjs/grunt/pull/1677 ">gruntjs/grunt#1677</a>)
- Removed coffeescript from dependencies. To ease transition, if
coffeescript is still around, Grunt will attempt to load it.
If it is not, and the user loads a CoffeeScript file,
Grunt will print a useful error indicating that the
coffeescript package should be installed as a dev dependency.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gruntjs/grunt/commit/82d79b803798f2a5f19662df9e12bef977dfa189 "><code>82d79b8</code></a>
1.5.3</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/572d79b08767dd22ecc162b8d41825f9f8238fef "><code>572d79b</code></a>
Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1745 ">#1745</a>
from gruntjs/fix-copy-op</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/58016ffac5ed9338b63ecc2a63710f5027362bae "><code>58016ff</code></a>
Patch up race condition in symlink copying.</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/0749e1da0d8f88c5137c4eb4e9531e1b7498760e "><code>0749e1d</code></a>
Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1746 ">#1746</a>
from JamieSlome/patch-1</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/69b7c506cbf430e06bfe1a81050351e607c30380 "><code>69b7c50</code></a>
Create SECURITY.md</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/ac667b24cabfff77cf769f9dbf9ddba9576b3dc2 "><code>ac667b2</code></a>
1.5.2</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/7f15fd5ad9fb33ca0fe4680af7bce84d69deb673 "><code>7f15fd5</code></a>
Update Changelog</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/b0ec6e12426fc8d5720dee1702f6a67455c5986c "><code>b0ec6e1</code></a>
Merge pull request <a
href="https://redirect.github.com/gruntjs/grunt/issues/1743 ">#1743</a>
from gruntjs/cleanup-link</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/433f91b78df99d83daa6f56a5505ead743627c30 "><code>433f91b</code></a>
Clean up link handling</li>
<li><a
href="https://github.com/gruntjs/grunt/commit/d5969eccf2493c2c579c55a617c70cab48dc12d3 "><code>d5969ec</code></a>
1.5.1</li>
<li>Additional commits viewable in <a
href="https://github.com/gruntjs/grunt/compare/v1.0.4...v1.5.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-21 13:41:49 -05:00
Roberto Dip and Rachael Shaw
85209ae758
document permissions changes for Puppet gitops ( #17367 )
...
#15337
---------
Co-authored-by: Rachael Shaw <r@rachael.wtf >
2024-03-21 13:38:06 -05:00
Noah Talerman
4a0c62613f
API design: See macOS hosts that failed DEP profile assignment ( #15461 ) ( #16166 )
...
API changes for the "See macOS hosts that failed DEP profile assignment"
(#15461 ) story
2024-03-21 13:33:35 -05:00
Marko Lisica and Rachael Shaw
14786afe20
API design: Increase character limit for saved scripts ( #16699 )
...
API design for:
#16668
---------
Co-authored-by: Rachael Shaw <r@rachael.wtf >
2024-03-21 13:30:48 -05:00
dependabot[bot]
94da1ec032
Bump @okta/oidc-middleware from 4.0.1 to 5.0.0 in /ee/vulnerability-dashboard ( #17601 )
...
Bumps
[@okta/oidc-middleware](https://github.com/okta/okta-oidc-middleware )
from 4.0.1 to 5.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/okta/okta-oidc-middleware/releases "><code>@okta/oidc-middleware</code>'s
releases</a>.</em></p>
<blockquote>
<h2>5.0.0</h2>
<h3>Breaking Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/54 ">#54</a>
Requires Node >= 12.19.0. Update production dependencies:
<ul>
<li><code>openid-client@5.1.9</code> (was 3.12.2)</li>
</ul>
</li>
</ul>
<h1>4.5.1</h1>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/43 ">#43</a>
fix: correctly preprends <code>appBaseUrl</code> to redirect url when
<code>appBaseUrl</code> contains a base path</li>
</ul>
<h2>4.5.0</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/40 ">#40</a>
Allows passing <code>loginHint</code> to
<code>ensureAuthenticated</code></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/42 ">#42</a>
Fixes <code>appBaseUrl</code> option not prepending to login redirect
url</li>
</ul>
<h2>4.4.0</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/34 ">#34</a>
Fixes Org AS login issue</li>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/3 ">#3</a>
Call <code>res.redirect()</code> after custom
<code>routes.loginCallback.handler</code></li>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/37 ">#37</a>
fix: <code>.logout</code> no longer throws error without valid
credentials</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/okta/okta-oidc-middleware/blob/master/CHANGELOG.md "><code>@okta/oidc-middleware</code>'s
changelog</a>.</em></p>
<blockquote>
<h1>5.0.0</h1>
<h3>Breaking Changes</h3>
<ul>
<li><a href="">#</a> Requires Node >= 12.19.0. Update production
dependencies:
<ul>
<li><code>openid-client@5.1.9</code> (was 3.12.2)</li>
</ul>
</li>
</ul>
<h1>4.6</h1>
<p>-<a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/53 ">#53</a>
Fix: prevents open redirects</p>
<h1>4.5.1</h1>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/43 ">#43</a>
fix: correctly preprends <code>appBaseUrl</code> to redirect url when
<code>appBaseUrl</code> contains a base path</li>
</ul>
<h1>4.5.0</h1>
<h3>Features</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/40 ">#40</a>
Allows passing <code>loginHint</code> to
<code>ensureAuthenticated</code></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/42 ">#42</a>
Fixes <code>appBaseUrl</code> option not prepending to login redirect
url</li>
</ul>
<h1>4.4.0</h1>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/34 ">#34</a>
Fixes Org AS login issue</li>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/3 ">#3</a>
Call <code>res.redirect()</code> after custom
<code>routes.loginCallback.handler</code></li>
<li><a
href="https://redirect.github.com/okta/okta-oidc-middleware/pull/37 ">#37</a>
fix: <code>.logout</code> no longer throws error without valid
credentials</li>
</ul>
<h1>4.3.0</h1>
<h3>Other</h3>
<ul>
<li>Release after migrating from monorepo</li>
<li></li>
</ul>
<h1>4.2.0</h1>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/okta/okta-oidc-js/pull/1020 ">#1020</a>
Fixes issue with UUID returning null</li>
</ul>
<h1>4.1.0</h1>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/50c093bcbcfd8c67a9d9aa0b4d2f75fb585af184 "><code>50c093b</code></a>
chore(deps): upgrade vulnerable dependencies (<a
href="https://redirect.github.com/okta/okta-oidc-middleware/issues/54 ">#54</a>)</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/5d10b3ccdd5d6893de4d8b58696094267d30c113 "><code>5d10b3c</code></a>
Prevent open redirects (<a
href="https://redirect.github.com/okta/okta-oidc-middleware/issues/53 ">#53</a>)</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/fe24bfc12ea0922baa97c166e9684751e5f87ef2 "><code>fe24bfc</code></a>
chore: Update dependencies</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/ebafab491656df01850ef734e5456b0e0aff7712 "><code>ebafab4</code></a>
chore: dev dependency upgrades</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/113e1a3678b46daca51059d23313f541720c027e "><code>113e1a3</code></a>
chore: updates github issue template</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/a9b6ad22cd3b891ca4dcb2aea03c47dae35e9216 "><code>a9b6ad2</code></a>
Merge remote-tracking branch 'origin/4.5' into sw-backport-4.5.1</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/8b0691cae67e723f3fa5162e26f892a6f2be6c93 "><code>8b0691c</code></a>
fix: if appBaseUrl includes a base path</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/94852df9a84c1b5944912734a80a1128f8c12a11 "><code>94852df</code></a>
Releng: Revving up to version(s) 4.6.0 for artifact(s) None</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/4e1414e6c69b18776705f654c700ce5a8ea79d3f "><code>4e1414e</code></a>
fixes: 'appBaseUrl' option not prepended to login redirect url</li>
<li><a
href="https://github.com/okta/okta-oidc-middleware/commit/9c5e3b0fdc74f73959ebae9a2e1eb36c23df935f "><code>9c5e3b0</code></a>
feat: allow passing <code>loginHint</code> option to
<code>ensureAuthenticated</code></li>
<li>Additional commits viewable in <a
href="https://github.com/okta/okta-oidc-middleware/compare/@okta/oidc-middleware@4.0.1...okta-oidc-middleware-5.0.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-21 12:17:16 -05:00
Eric
36dafbd969
Update vulnerability dashboard deploy action & update github maintainers in custom.js ( #17602 )
...
Changes:
- Updated the deploy-vulnerability-dashboard workflow to use the correct
variables for the Heroku steps.
- Added GitHub maintainers to `website/config/custom.js` for the GitHub
workflows related to the vulnerability dashboard.
2024-03-21 11:58:45 -05:00
Noah Talerman
452d6b8d0d
Set host expiry in dogfood back ( #17763 )
...
- Back to off
2024-03-21 12:30:00 -04:00
dependabot[bot]
1e6c974844
Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible ( #17736 )
2024-03-21 11:26:14 -05:00
Rachael Shaw
fb68278b1b
Set host expiry window to 0 to see what happens ( #17762 )
...
^ what it says
2024-03-21 11:25:40 -05:00
dependabot[bot]
d896420421
Bump follow-redirects from 1.15.4 to 1.15.6 ( #17651 )
2024-03-21 11:25:27 -05:00
dependabot[bot]
c82190b009
Bump follow-redirects from 1.15.5 to 1.15.6 in /tools/fleetctl-npm ( #17650 )
2024-03-21 11:24:58 -05:00
dependabot[bot]
8d3b018f5d
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 ( #17612 )
2024-03-21 11:24:13 -05:00
Eric
1226af3504
Website: update website header & mobile navigation menu ( #17718 )
...
Closes : #17708
Changes:
- Updated the website's header navigation to match the latest Figma
wireframes.
- Updated the padding of the mobile navigation menu to keep padding
consistent when the menu is opened/closed
2024-03-21 11:08:01 +09:00
Noah Talerman
4f7ebe2fcb
Update communications.md ( #17604 )
...
- Fix typo
2024-03-20 20:58:12 -05:00
Isabell Reedy and Joanne Stableford
7100e80ae4
Add process for Fleeties to notify BizOps for individualized expenses ( #17715 )
...
Have noticed there are some recurring charges on Brex cards that are not
making it into The Numbers. This will help BizOps ensure we are tracking
all recurring expenses across the company.
Co-authored-by: Joanne Stableford <59930035+JoStableford@users.noreply.github.com >
2024-03-20 20:57:36 -05:00
Noah Talerman
a9910ad37e
Update pricing-features-table.yml ( #17599 )
...
- "Separate file size options for query results vs. agent logs when
using filesystem storage" (#11999 ) is on track for a 2024-04-22 release
2024-03-20 20:56:04 -05:00
Benjamin Edwards
1d736d82df
update default in both places ( #17741 )
2024-03-20 15:28:49 -04:00
Benjamin Edwards
c0a7725988
fix typo in default maintance window ( #17740 )
...
should have been `thu` rather than `thurs`
2024-03-20 15:12:31 -04:00
Benjamin Edwards
7d156597d9
rds module maintenance window ( #17739 )
...
📝 docs(README.md): update alb_config and fleet_config tables to reflect
new changes
🔧 fix(main.tf): add preferred_maintenance_window to rds module to allow
for scheduled maintenance
🔧 fix(variables.tf): add preferred_maintenance_window to rds_config
variable to allow for scheduled maintenance
🔧 fix(README.md): update fleet_config image version to v4.47.1 for
latest features and bug fixes
2024-03-20 15:00:39 -04:00
Benjamin Edwards
909420d453
add redirect parameter to wget command for geoip db download ( #17738 )
2024-03-20 14:20:35 -04:00
Eric and Sam Pfluger
b10d1db3f5
Website: Add primaryBuyingSituation attribute to User model. ( #17638 )
...
Changes:
- Added a new attribute to the `User` model: `primaryBuyingSituation`
- Updated `signup.js` to set this value on new User accounts
Before this PR can be merged, we will need to:
- [ ] Add the new column to the User table in the website's database
- [ ] Set a default value for existing User records.
---------
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com >
2024-03-19 17:45:20 -05:00
Victor Lyuboslavsky and Noah Talerman
9ae36d9a1d
Emojis back on Dogfood team names. Need to rename in UI before merging. ( #17605 )
...
Emojis are back on Dogfood team names. Need to rename the teams in UI
before merging. Otherwise, GitOps will simply create new teams.
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com >
2024-03-19 16:18:10 -05:00
Victor Lyuboslavsky
759003e37d
Fixing false negative vulnerabilities on macOS Homebrew python packages. ( #17709 )
...
#17061
TODO: Need to also merge this fix into patch branch.
# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files )
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-19 14:12:07 -05:00
Eric
61544f4bea
Website: update create-issues-from-todays-rituals script to work in production ( #17680 )
...
Closes : #17678
Changes:
- Updated the `create-issues-from-todays-rituals` to create GH issues
using rituals from website's configuration instead of the ritual.yml
files in the `handbook/` folder
- Moved `yaml` to `devDependencies` in `webiste/package.json`
2024-03-19 10:02:50 -05:00
George Karr
c6d5151198
Updating changelog for 4.47.1 ( #17689 )
2024-03-19 09:47:00 -05:00
Gabriel Hernandez
aef64e3241
Fix export hosts csv UI and editing hidden columns UI ( #17691 )
...
relates to #17632
fixes a UI bug that prevented exporting hosts by csv.
also updates the edit hidden columns modal to use column id instead of
accessor. Id is safer to use as we are now using a function definition
for the accessor for mdm enrollment status and mdm server URL columns.
- [x] Manual QA for all new/changed functionality
2024-03-19 11:51:10 +00:00
Eric
d7783286d3
Website: Update Vanta integration script to retry failed requests to Vanta's authorization endpoint. ( #17704 )
...
Changes:
- Chained a `.retry()` onto the post request that refreshes
authorization tokens for Vanta connections, that will retry requests
that return a `503 service unavailable` response.
2024-03-18 17:45:07 -05:00
SFriendLee
26965c8ae9
Handbook: Update communications.md ( #17681 )
2024-03-18 15:39:51 -05:00
d2b6d579a2
Update engineering handbook to adjust patch release process ( #17571 )
...
This outlines a new patch branching strategy to avoid the conflicts
we've been running into recently.
This will introduce more friction in the form of two PRs for released
bug fixes during patch weeks. The benefit is that we won't have to deal
with merge conflicts when we're cherry-picking commits into the patch
branch, which sometimes becomes a big distraction for the team.
We also found ourselves in a situation with 4.46.3 where we couldn't
release a fix without rewriting it because it had been built on top of
feature code that was not included in the patch. That was the motivation
to make this change.
---------
Co-authored-by: George Karr <georgekarrv@users.noreply.github.com >
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com >
2024-03-18 15:17:08 -05:00
RachelElysia
b9c3d3a5b4
Fleet UI: Persist toast messages after a modal closes ( #17674 )
2024-03-18 14:53:30 -04:00
Noah Talerman
f28509ea06
Update macos-disable-guest-account config profile ( #17677 )
...
- Update configuration profile to disable the guest account
2024-03-18 14:44:07 -04:00
Noah Talerman and Sam Pfluger
3ab970f990
Update product design rituals ( #17394 )
...
- Add "🦢 🔄 Product design sync" and "🦢 🗣 Product office hours"
---------
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com >
2024-03-18 13:19:50 -05:00
Martin Angers
813a831a08
Add mention of the environment variable to disable logs in integration tests ( #17524 )
2024-03-18 09:24:02 -04:00
Dave Herder and Mike McNeil
c2f0686a69
Update pricing-features-table.yml, edit description of "Self-managed"… ( #17567 )
...
… item
Removed reference to air-gapped environments, even though the fleet
agent can work air-gapped, MDM protocols (apple and msft) do not support
air-gapped deployments.
---------
Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com >
2024-03-15 18:08:24 -05:00
Noah Talerman
281b5ffaf7
Rachael is API design DRI ( #17630 )
...
- Move "API design" DRI from "Product groups" page to DRIs table
2024-03-15 18:02:15 -05:00
Eric
9f7fb1f79e
Website: Update tooltips on pricing page ( #17672 )
...
Closes: https://github.com/fleetdm/confidential/issues/5759
Changes:
- Updated the tooltips on the pricing page to close when a user is no
longer hovering their cursor over them.
2024-03-15 17:04:55 -05:00
Tim Lee
57d6c88a63
Policy Result Control in osquery-perf ( #17649 )
2024-03-15 16:04:46 -06:00
Noah Talerman
7afe341017
Update Supported-host-operating-systems.md ( #17661 )
...
For the following bug: #12334
- Call out that, currently on Ubuntu, Fleet Desktop only supports
display number of `0`
2024-03-15 18:03:33 -04:00
Eric
29e66efc19
Website: Add required meta tag to page in contributing documentation ( #17668 )
...
Changes:
- Added a `pageOrderInSection` `<meta>` tag to the
`windows-mdm-glossary-and-protocol.md`
2024-03-15 13:19:54 -05:00
Noah Talerman
57d00f310d
Add script to workstations and canary ( #17634 )
...
- Add script to remove the old Nudge launch agent (deployed by
SimpleMDM)
2024-03-15 13:04:00 -04:00
Benjamin Edwards
0d9718aea6
enable & upgrade external vuln scans ( #17038 )
2024-03-15 11:45:58 -04:00
Dante Catalfamo
58dc1d4502
Create initial windows MDM glossary and diagram document ( #17507 )
...
```mermaid
sequenceDiagram
participant windows as Windows
participant orbit as Orbit
participant server as fleet server
loop every 30 seconds
orbit->>+server: POST /api/fleet/orbit/config
server-->>-orbit: pending notifications
end
note over orbit: receive enrollment notification
orbit->>windows: mdmregistration.dll<br/>RegisterDeviceWithManagement
windows->>+server: POST /api/mdm/microsoft/discovery
server-->>-windows: EnrollmentServiceURL, EnrollmentPolicyServiceUrl
windows->>+server: POST /api/mdm/microsoft/policy<br/>DeviceEnrollmentUserToken
server-->>-windows: Policy Schema, Certificate requirements
activate windows
note left of windows: Generate keypair
deactivate windows
windows->>+server: POST /api/mdm/microsoft/enroll<br/>Self-signed CSR & cert values
note right of server: Creates certificate signed by WSTEP ident key
server-->>-windows: Signed certificate, management endpoint, enrollment parameters
loop SYNCML MDM Protocol (mTLS)
windows->>+server: POST /api/mdm/microsoft/management
server-->>-windows: Response
end
```
2024-03-15 10:02:47 -04:00
Dante Catalfamo
797e12983c
Add diagram to texting-and-local-development explaining internal certificate generation flow ( #17396 )
...
```mermaid
sequenceDiagram
participant user as user email
participant fleetctl as fleetctl
participant server as fleet server
participant fleetdm as fleetdm.com sails app
participant apple as identity.apple.com
link apple: PushCert @ https://identity.apple.com/pushcert
note over fleetctl: fleetctl login
fleetctl->>+server: login
server-->>-fleetctl: token
note over fleetctl: fleetctl generate mdm_apple
fleetctl->>+server: generate certificates
server->>server: generate self-signed SCEP cert & key
server->>server: generate APNs key
server->>server: generate APNs CSR
server-)+fleetdm: request vendor signature on APNs CSR
server-->>-fleetctl: SCEP cert, SCEP key, APNs key
note over fleetdm: calls /ee/tools/mdm/cert
fleetdm--)-user: vendor-signed APNs CSR
user->>+apple: vendor-signed APNs CSR
note right of apple: managed through web ui
apple-->>-user: Apple-signed APNs certificate
```
2024-03-15 10:01:51 -04:00
Noah Talerman and Sam Pfluger
01e0d70903
Noah is codeowner for dogfood ( #17635 )
...
- @noahtalerman get's a Toast notification for changes to dogfood
(managed via [Fleet's best practice
GitOps](https://github.com/fleetdm/fleet-gitops ))
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com >
2024-03-14 21:20:11 -05:00
Luke Heath
fbcf63d5f4
Update CODEOWNERS ( #17627 )
...
This adds Ben back to the codeowners for infra files. This is necessary
because both Kathy and I will be out tomorrow, so no one will be able to
approve Robert's infra changes.
2024-03-14 19:02:33 -05:00
