Commit Graph
22137 Commits
Author SHA1 Message Date
dependabot[bot] ff5cb60b3f Bump immutable from 5.1.4 to 5.1.5 (#41020)
Bumps [immutable](https://github.com/immutable-js/immutable-js) from
5.1.4 to 5.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/immutable-js/immutable-js/releases">immutable's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix Improperly Controlled Modification of Object Prototype
Attributes ('Prototype Pollution') in immutable</li>
<li>Upgrade devtools and use immutable version by <a
href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
href="https://redirect.github.com/immutable-js/immutable-js/pull/2158">immutable-js/immutable-js#2158</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5">https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md">immutable's
changelog</a>.</em></p>
<blockquote>
<h2>5.1.5</h2>
<ul>
<li>Fix Improperly Controlled Modification of Object Prototype
Attributes ('Prototype Pollution') in immutable</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/b37b85568632227751ddc8a16034cacc0f42b652"><code>b37b855</code></a>
5.1.5</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/16b3313fdf2c5f579f10799e22869f6909abf945"><code>16b3313</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/fd2ef4977ee654c5bf26368dbf2f983c8d679bd6"><code>fd2ef49</code></a>
fix new proto key injection</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/6734b7b2af7e9dadf517eb9473cc64d2dfe2e301"><code>6734b7b</code></a>
fix Prototype Pollution in mergeDeep, toJS, etc.</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/6f772de1e44dcde14128e48d19081a7a077f2162"><code>6f772de</code></a>
Merge pull request <a
href="https://redirect.github.com/immutable-js/immutable-js/issues/2175">#2175</a>
from immutable-js/dependabot/npm_and_yarn/rollup-4.59.0</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/5f3dc61fd0e231654f04a850b8764e7e864c54b3"><code>5f3dc61</code></a>
Bump rollup from 4.34.8 to 4.59.0</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/049a594410962c13dfd0f2d0bf0ef2154271079e"><code>049a594</code></a>
Merge pull request <a
href="https://redirect.github.com/immutable-js/immutable-js/issues/2173">#2173</a>
from immutable-js/dependabot/npm_and_yarn/lodash-4.1...</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/2481a77331122eea4ace8afd4842042c6ae7510c"><code>2481a77</code></a>
Merge pull request <a
href="https://redirect.github.com/immutable-js/immutable-js/issues/2172">#2172</a>
from mrazauskas/update-tstyche</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/eb047790b44dac8e5ace49529a5c9928edfc8e12"><code>eb04779</code></a>
Bump lodash from 4.17.21 to 4.17.23</li>
<li><a
href="https://github.com/immutable-js/immutable-js/commit/b973bf3b6242c9966143169825e1e14248c07c31"><code>b973bf3</code></a>
format</li>
<li>Additional commits viewable in <a
href="https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=immutable&package-manager=npm_and_yarn&previous-version=5.1.4&new-version=5.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 23:43:16 -06:00
jacobshandling ebe49ca7b1 Add frontend component generator to claude.md (#40844)
May help Claude write frontend component boilerplate more consistently
2026-03-04 15:58:20 -08:00
jacobshandling e9bebfdf96 UI: Remove experimental conditional_access_bypass_enabled policy setting in favor of critical (#40924)
**Related issue:** Resolves #40417
<img width="1624" height="1061" alt="Screenshot 2026-03-03 at 4 17
19 PM"
src="https://github.com/user-attachments/assets/feb3f4cd-af20-42be-887a-73ccef4f2b23"
/>
<img width="1624" height="1061" alt="Screenshot 2026-03-03 at 4 19
17 PM"
src="https://github.com/user-attachments/assets/0b67e5df-525f-444d-8521-f1de1527cfaa"
/>
<img width="1624" height="1061" alt="Screenshot 2026-03-03 at 4 19
26 PM"
src="https://github.com/user-attachments/assets/922f6f05-4889-430f-9da9-3f8f0ac5a11c"
/>
<img width="1624" height="1061" alt="Screenshot 2026-03-03 at 4 19
45 PM"
src="https://github.com/user-attachments/assets/65445602-8a83-429f-aaaf-729f127c4c4b"
/>

- [x] Changes file added for user-visible changes in `changes/`
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## Release Notes

* **New Features**
  * Added visual badge to identify critical policies.

* **Improvements**
* Critical policies can no longer be bypassed when Okta conditional
access is configured.
* Simplified conditional access policy management UI by removing
per-policy bypass toggles.
* Updated tooltips to clarify bypass restrictions for critical policies.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-04 15:16:13 -08:00
Eric b7abab942c Website: Update trial usage script (#41023)
Changes:
- Updated the script that reports Render trial information to use
`sails.helpers.flow.simultaneouslyForEach` to improve the speed of the
script.
2026-03-04 17:08:08 -06:00
Carlo cb38c3ea47 Propagate errs from preProcessUninstallScript to callers (#41011)
Fixes #41009. Makes sure errors bubble up correctly.
2026-03-04 17:54:36 -05:00
johnjeremiah b0d77e4056 Adding workshop issue creation details to event handbook (#41010)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
## Add workshop issue automation to event execution handbook
2026-03-04 15:51:18 -06:00
Ian Littman 5f608aba63 Fix tone tweaks reverted as part of The Great Rename (#41004)
For #39676.

Work is mine. Diagnosis was courtesy Zed + Sonnet 4.6, which caught this
as I was iterating with it on building a test plan. Ran the prompt below
to catch any other issues:

> Find any cases where `!` as ending punctuation was added to copy since
`bf5d342`.

Will test this along with the QA for the parent issue once it's
cherry-picked.
2026-03-04 14:56:50 -06:00
Irena Reedy cc14b92332 Update gaming-technology-company.md (#40971)
Edited about Fleet
2026-03-04 14:22:22 -06:00
Irena Reedy f80fcdaf72 Update financial-technology-company.md (#40970)
Edited About Fleet
2026-03-04 14:21:29 -06:00
Irena Reedy 91ffc75298 Update financial-services-platform.md (#40969)
Edited about Fleet
2026-03-04 14:20:44 -06:00
Irena Reedy b50512fc01 Update communications-platform.md (#40968)
edited about fleet
2026-03-04 14:19:55 -06:00
Irena Reedy 5e50f08a2c Update collaboration-platform.md (#40967)
edited about fleet
2026-03-04 14:18:54 -06:00
Irena Reedy 45a3a1187e Update cannabis-technology-company.md (#40966)
edited about fleet
2026-03-04 14:18:12 -06:00
Irena Reedy fc80cb5a93 Update banking-platform.md (#40965)
edited about fleet
2026-03-04 14:17:24 -06:00
Isabell Reedy 83a0df3877 Add Channel Account Manager role (#41001) 2026-03-04 13:44:08 -06:00
Magnus Jensen a505d8d558 remove mysql DumpTable in test (#40876) 2026-03-04 14:39:02 -05:00
Irena Reedy 4e4bed79ef Create blanco case study (#40964) 2026-03-04 13:34:31 -06:00
Irena Reedy fda64d7640 Create rocher case study (#40962) 2026-03-04 13:32:53 -06:00
Irena Reedy c3fe3a1f87 Update collaboration-platform.md (#40998)
change tense
2026-03-04 13:32:08 -06:00
Savannah FriendandSam Pfluger 22c34bd2b1 Update CEO travel scheduling guidelines (#38548)
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2026-03-04 13:31:16 -06:00
Eric 9bb5c21f56 Website: Update logged warnings in trial usage script (#40995)
Changes:
- Updated the script that reports Render trial usage to handle errors
returned by the `updateOrCreateContactAndAccount` helper
2026-03-04 13:15:23 -06:00
Martin Angers 1fa339298b Bugfix: gitops policy linked to software package with env var fails to apply (#40944) 2026-03-04 14:03:34 -05:00
RachelElysia 4cbc4fdd5e Fleet UI: Fix refresh preserve toggle, fix border radius (#40947) 2026-03-04 13:41:50 -05:00
Jonathan Katz f260fbf85a Dismiss gosec G602 and G115 in test code (#40960)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #
Dismisses some gosec rules in test code where they do not apply, since
they show up when running `golangci-lint run` locally and make it harder
to spot newly introduced errors.

# Checklist for submitter

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually
2026-03-04 13:34:35 -05:00
Ian Littman 7d4acdc5c4 Bump supported MySQL versions (#40892)
Fixes #40975.

8.0.32 (was running in Aurora managed cloud at the time) -> 8.0.39 (what
we're running now) 8.0.36 -> 8.0.44 (latest 8.0.x version supported by
Aurora; holding off on 8.0.45 until Aurora supports it) 8.4.7 -> 8.4.8
9.5.0 -> 9.6.0

Also bumped the supported Aurora version from 3.07.0 to 3.08.2 to match
what we're running in managed cloud right now

Fleet might work on older patch versions but we'll no longer dev/test on
them. MySQL 9.x not testing previous minor versions matches with our
previous approach for that version.

Since these are all patch/minor bumps (and the overnight build cases are
patch bumps/are covered by AWS envs) automated testing should be
sufficient here.
2026-03-04 12:25:20 -06:00
Carlo 328f4d5079 Add path support to script files (#40821)
Fixes #38659 Enables IT admins to reference `.sh` or `.ps1` script files directly in the GitOps `path` field for software packages.
2026-03-04 13:22:44 -05:00
Scott Gress f6da7974b2 Update GitOps error messages from "query" -> "reports" (#40920)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40911

# Details

Updates some GitOps error messages to make them 1) use "report" instead
of query where applicable and 2) be more helpful by including filename
and path and not being confusing.

These IMO don't need to be cherry-picked to 4.82 since users won't be
getting deprecation warnings yet so the new error might actually be
_more_ confusing in this case, but I encountered them while working on
the "validate unknown keys" ticket and they looked really bad, so fixing
before I forget.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
n/a

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
- [X] Change "query name is required for each query" to "name is
required for each report in {filename} at {path}"
- [X] Change "query SQL query is required for each query" to "query is
required for each report in {filename} at {path}"
- [X] Change "query name must be in ASCII: {name}" to "name must be in
ASCII: {name} in {filename} at {path}"
- [X] Change "duplicate query names: {names}" to "duplicate report
names: {names}
 Tested all in both main file and in a file included via `path:`
2026-03-04 11:27:23 -06:00
Noah Talerman e408b99013 Edit query: Remove "fleet" (#40943)
It gets awkward...

<img width="383" height="154" alt="Screenshot 2026-03-04 at 8 17 56 AM"
src="https://github.com/user-attachments/assets/82acd9d4-b692-4520-9f07-77466b950391"
/>
2026-03-04 11:10:27 -06:00
Mike ThomasandEric f50bf02c42 Update testimonials.ejs (#40950)
Added new case study cards:

https://github.com/fleetdm/fleet/pull/40927
https://github.com/fleetdm/fleet/pull/40929
https://github.com/fleetdm/fleet/pull/40930
https://github.com/fleetdm/fleet/pull/40931

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2026-03-04 11:03:59 -06:00
Jordan Montgomery a8b1bf0062 Remove unused/confusing --mdm_apple_scep_signer_allow_renewal_days config (#40800)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #38611

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually
2026-03-04 11:53:59 -05:00
Noah Talerman 782da16443 Update generators README (#40939)
If you use VS Code or Cursor
2026-03-04 10:51:07 -06:00
johnjeremiah 0a594b8471 Event Execution How to create Event Issues (#40938)
Updating handbook section on event execution
2026-03-04 10:22:01 -06:00
Sam Pfluger 637bcd2bb7 Fix naming convention to match campaigns in Salesforce (#40937) 2026-03-04 10:19:45 -06:00
Scott Gress 772cddb861 Update stored results setting UI (#40874)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40859

# Details

* Renamed setting from "Disable reports" to "Disable stored results"
* Moved underneath "Disable live reports" for clarity
* Updated related tooltip

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [ ] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

<img width="670" height="531" alt="image"
src="https://github.com/user-attachments/assets/7396a6ab-26ad-4a73-ba6d-b506bff6330c"
/>

---

<img width="406" height="153" alt="image"
src="https://github.com/user-attachments/assets/b86ffbb6-56c3-4cdc-880b-0b39bcd129fa"
/>
2026-03-04 09:58:27 -06:00
Irena ReedyandMike Thomas 6813978a75 Create nyx case study (#40929)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2026-03-05 00:45:04 +09:00
7021ba328e Create rialto case study (#40930)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2026-03-05 00:30:54 +09:00
3bcfec72ea Create hubble case study (#40927)
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2026-03-05 00:30:05 +09:00
Eric 1a69964e84 Fix description meta tag in collaboration-platform.md (#40949)
Changes:
- Fixed the description meta tag in collaboration-platform.md to fix the
failing website deploy/test workflows
2026-03-04 09:21:40 -06:00
Irena Reedy d4a0e1bcb4 Create ufa case study (#40925) 2026-03-04 08:47:55 -06:00
Irena Reedy b556429d55 Update robotics-company.md (#40926) 2026-03-04 08:47:35 -06:00
Irena Reedy a0787d07c7 Create domon case study (#40931) 2026-03-04 08:46:57 -06:00
Nico 49463f19e9 Fix select-all header checkbox not selecting rows in a specific case (#40940)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40789

Seems like on specific pages of server-side paginated tables, the
select-all header checkbox does not work. This happens when:
- the page has less than 20 rows (I think this is the default page size)
- AND not all the rows are selectable

`headerProps.rows` always contains all rows currently visible in the
table. Using rows also keeps the select logic consistent with the
deselect and "all selected" checks, which already used rows.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually

### Before

Clicking on the table header checkbox doesn't perform any selection



https://github.com/user-attachments/assets/d5b1f2fc-1400-4f3e-a2b4-2ae6a3da65af

### After



https://github.com/user-attachments/assets/54a67707-7978-40ec-ba50-c146a67795b2
2026-03-04 11:39:04 -03:00
fleet-releaseandmostlikelee 480dec9bcd Update Fleet-maintained apps (#40942)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2026-03-04 08:28:55 -06:00
Noah Talerman efaa3c5fc5 Live policy results (#40897)
Purge the purple!
2026-03-04 08:02:14 -06:00
Gabriel HernandezandNico b92e9efdb5 show apns expiration banner in UI for free tier (#40936)
**Related issue:** Resolves #39184

show apns expiration banner for the free tier in the UI. Before it was
limited to show only for premium tier.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Nico <32375741+nulmete@users.noreply.github.com>
2026-03-04 13:12:33 +00:00
Gabriel Hernandez 744087d2c7 add option to lock end user info during setup experience to UI (#40802)
**Related issue:** Resolves #38669

Added the ability to lock end user info on the end use auth section of
the setup experience page

<img width="468" height="372" alt="image"
src="https://github.com/user-attachments/assets/a5f4e21b-3a1e-4631-b0d4-e3d833a4484c"
/>

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] QA'd all new/changed functionality manually
2026-03-04 12:02:35 +00:00
Irena Reedy 56ec47006c Update marketing.rituals.yml (#40902)
Changed update content calendar from daily to triweekly
2026-03-04 00:20:07 -06:00
fleet-release 1509a8d685 Update Fleet-maintained apps (#40922) 2026-03-04 00:05:23 -06:00
Software Developer | AI/ML | LLM | RAGandBrock Walters 9a13233eeb Fleet vs. Workspace ONE: Choosing the right MDM solution (#40750)
New Article by Team GrowthX

Date: 28-02-2026

cc @nonpunctual @ireedy @johnjeremiah

---------

Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com>
2026-03-03 23:48:52 -06:00
f417b7e00a Handbook: Restructure Digital Campaigns - add Paid Social Campaigns section (#40819)
## Summary

- Renamed the "Campaign naming & definitions" section to "Paid Search
Campaigns" to better reflect its content.
- Added a new "Paid Social Campaigns" section immediately after "Paid
Search Campaigns", with the same table structure and content duplicated
as a starting point.
- All other content on the page remains unchanged.

## Changes

- `handbook/marketing/digital-campaigns.md`: Section rename + new
section added.

Built for [John
Jeremiah](https://fleetdm.slack.com/archives/D0AGMBRKRR9/p1772476778190759)
by [Kilo for Slack](https://kilo.ai/features/slack-integration)

---------

Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
Co-authored-by: johnjeremiah <jjeremiah@gmail.com>
2026-03-03 23:47:42 -06:00