fleet

.keep

…

4842-search-public-ip

Add public IP address to host search (#46809 )

2026-06-30 16:20:37 -03:00

16279-cross-team-label-membership

Made team label membership checks more robust

2026-06-23 10:01:23 -04:00

16288-conditional-access-authz

Restrict conditional access Okta IdP asset endpoints to privileged roles (#48294 )

2026-06-25 15:57:25 -03:00

16291-policy-query-id-authz

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

16292-password-reset-clear-sessions

Improve session handling during password reset (#47860 )

2026-06-19 09:22:48 -04:00

16691-cross-team-user-list-teams-authz

Filter cross-team memberships from user list responses (#48890 )

2026-07-08 13:43:14 -03:00

21818-fleetctl-sso-warning

Display instructions needed for SSO-enabled accounts with fleetctl (#46768 )

2026-06-17 18:19:00 -04:00

23242-apple-byod-enrollment-permissions

Adding BYOD backend changes (#47716 )

2026-06-25 18:21:26 -05:00

25217-turn-off-mdm-offline-macos

Enable "Turn off MDM" button for offline macOS devices (#46651 )

2026-07-07 11:20:45 -05:00

25574-splunk-log-destination

Add native Splunk HEC log destination (#48455 )

2026-07-03 12:14:24 -04:00

28108-multiple-custom-packages

add changes

2026-07-10 14:37:59 -04:00

30871-default-byod-fleet

…

31294-windows-host-certificates

Show certificates on host details page for Windows (#31294 ) (#48469 )

2026-07-06 20:28:21 +01:00

33441-policies-include-exclude-targets

…

34591-add-cachyos-support

Add CachyOS support (#47757 )

2026-07-03 10:28:08 -03:00

35694-device-software-cvss-filter

…

36774-cert-template-all-idp-vars

Android certs support all idp vars (#48100 )

2026-06-23 16:58:40 -05:00

38504-auto-update-pin-rollback-fma

add changes file

2026-06-25 13:13:13 -04:00

38670-policy-status-page

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

38874-macos-enroll-url

Add /enroll URL for macOS in Add hosts modal (#47528 )

2026-07-07 11:18:45 -05:00

38928-navigate-to-report-after-saving

…

38986-support-ddm-assets

SAAD: Support DDM assets in sync + reconciliation (#49016 )

2026-07-10 14:47:23 +02:00

39017-mydevice-macos-applications-query-param

Fix My device software list appending macos_applications param on pagination (#48145 )

2026-06-24 13:36:24 -04:00

39323-positive-language-checkboxes

…

39346-certificates-list

Controls > OS settings > Certificates: View certificates (#48460 )

2026-07-08 09:59:20 -06:00

40410-webhook-url-validation-onblur.md

Add onURLBlur handler for InputField (#48854 )

2026-07-07 11:52:35 -04:00

40502-fix-select-all-matching-hosts-count

…

41056-remove-windows-sts-auth-endpoint.md

Removed the unused /api/mdm/microsoft/auth Windows MDM STS endpoint (#48734 )

2026-07-06 20:29:05 +01:00

41790-citrix-ltsr-cumulative-updates

Detect Citrix Workspace LTSR cumulative updates (#41790 ) (#47591 )

2026-06-29 14:45:06 -06:00

41910-throttle-AMAPI

…

41968-android-profile-fleet-variables

Added variables in Android configuration profiles (#47750 )

2026-06-18 13:53:28 -05:00

42435-calendar-events-next-business-day

…

42441-live-query-redis-scaling

Add per-host reverse index for small-target live queries

2026-06-29 09:43:30 -04:00

42445-firefox-esr-shared-bundle-identifier

Disambiguate FMAs sharing macOS bundle IDs (#47951 )

2026-06-24 13:05:53 -05:00

42473-sso-button-overflow

Fix IdP name overflowing button in login page (#48426 )

2026-06-30 08:55:03 -03:00

42797-script-only-advanced-options

Support advanced options for script-only packages (#48315 )

2026-06-29 11:59:37 -04:00

42915-google-workspace-idp-host-vitals

Google Workspace IdP [2/6]: backend (cron + directory sync) (#48165 )

2026-06-29 12:28:10 -03:00

43310-policy-report-details-flash

Fix policy and report pages showing previously viewed content (#47767 )

2026-06-19 14:37:06 -04:00

43379-windows-mdm-end-user-experience-labels

Update Windows MDM end user experience language (#47635 )

2026-07-09 06:07:30 -05:00

43518-enable-disk-encryption-bitlocker

Add FLEET_MDM_ENABLE_DISK_ENCRYPTION alias for custom BitLocker profiles (#43518 ) (#48737 )

2026-07-06 22:38:45 +01:00

43667-macos-script-only-setup-experience

…

43673-my-device-sort-by-display-name

Fix My device page software sorting by display name (#45836 )

2026-06-24 14:16:57 -04:00

43770-missing-fma-generate-gitops-bug

…

44109-vulns-not-supported

…

44153-enable-managed-local-account-update-fleet

Add activity and enable managed account fleets endpoint (#48273 )

2026-06-25 17:29:33 -04:00

44188-compress-windows-mdm-responses

Compress windows_mdm_responses envelopes on the Windows MDM hot path (#48320 )

2026-06-26 22:03:01 +01:00

44199-embedded-bundle-title-name

Fix macOS software titles mis-named from embedded helper bundles (#44199 ) (#47831 )

2026-07-09 10:01:27 -06:00

44272-fix-scrollbar-always-showing

…

44325-gitops-mode-tooltip-label

Fix tooltips to center of label row (#47861 )

2026-06-19 07:15:05 -04:00

44352-500-error-page

Update 404 and 500 error pages (#48826 )

2026-07-07 10:54:26 -03:00

44428-tpm-backed-disk-encryption.md

escrow snapd TPM-backed FDE recovery keys from orbit (#48452 )

2026-07-07 16:25:20 -04:00

44617-install-activity-premium-error

…

44629-optimize-orbit-mdm-connection-check

Optimize IsHostConnectedToFleetMDM on the orbit check-in hot path (#44629 ) (#48375 )

2026-06-29 17:11:27 +01:00

44645-self-service-update-button

…

44710-fix-spaces-in-script-package-name

Fix spaces in script package name causing validation failure (#47945 )

2026-06-22 11:23:16 -04:00

44746-collect-and-filter-more-cves

Add CVE chart filtering and non-critical CVE data collection (backend) (#47470 )

2026-06-19 10:52:03 -05:00

44746-more-filtering-in-vulns-chart

Add more filtering to Vulnerability Exposure chart (frontend) (#47674 )

2026-06-19 14:17:31 -05:00

44746-set-vuln-filters-in-gitops

Allow setting default vuln chart filters via GitOps (#47634 )

2026-06-24 07:49:19 -07:00

44800-ollama-resolved-in-version

Add resolved-in-version override for CVE-2025-63389 on Ollama (#48525 )

2026-07-07 16:24:41 -04:00

45309-setup-experience-policy-checks

…

45353-android-var-software-configs

…

45368-track-mobile-devices-for-hosts-online

Report mobile devices in "hosts online" (#47222 )

2026-06-24 07:50:35 -07:00

45524-macos-password-sync

macos password sync feature branch (#47422 )

2026-07-09 14:57:48 -04:00

45550-surface-windows-scep-proxy-failures.md

Surface proxied Windows SCEP certificate failures (#45550 ) (#48842 )

2026-07-09 07:38:47 +01:00

45635-windows-batched-reconciler

…

45635-windows-per-host-reconcile-on-enroll

…

45639-improve-error-messages

Update some GitOps error messages for clarity (#47134 )

2026-06-19 11:10:58 -05:00

45640-apple-windows-mdm-command-activities

45640 Add activity feed entry when a custom Apple or Windows MDM command is run (#47743 )

2026-06-19 13:42:17 +01:00

45650-windows-mdm-command-results-insert-perf.md

Improved the performance of Windows MDM profile installation (#48733 )

2026-07-06 18:34:10 +01:00

45661-fix-gitops-relative-paths

fix gitops relative paths for unassigned and org_settings (#47512 )

2026-06-17 18:32:06 +02:00

45682-cache-control-static-assets

Add Cache-Control to static assets served under /assets/ (#48409 )

2026-06-30 10:13:07 -03:00

45710-zorin-os-support

Add Zorin OS as a recognized Linux platform (#45712 )

2026-07-06 13:00:10 -03:00

45947-fix-macos-profiles-stuck-verifying

Parse both date formats while parsing macos profiles for verification (#48328 )

2026-06-26 15:58:31 -04:00

45948-windows-esp-continue-anyway

Always display Windows ESP error when software install fails (#47522 )

2026-06-18 06:35:57 +01:00

45984-macos-update-new-hosts-default

…

46005-fleet-mcp-live-query-observer-plus

fleet-mcp: run multi-host live queries via ad-hoc campaign so observer_plus works

2026-06-26 12:07:13 -04:00

46057-vpp-tokens-maintainer-authz

Fix App Store picker 403 for non-admin roles (#48856 )

2026-07-07 16:15:58 -04:00

46193-duplicate-patch-policy-gitops-check

Add duplicate patch policy check to GitOps (#48896 )

2026-07-07 16:08:23 -04:00

46227-luks-key-escrow-any-slot

LUKS key escrow validate against any keyslot (#48815 )

2026-07-09 13:04:31 -04:00

46235-dep-syncer-cursor-not-advanced-on-callback-error

46235 dep profile assigner context cancelled (#48473 )

2026-07-06 14:16:14 +01:00

46243-join-mdm-for-missing-status

…

46282-handle-client-error-decoding-errors

handle client error decoding errors in ACME urls (#49137 )

2026-07-10 12:31:17 -04:00

46291-ndes-retry-wipe

Fix NDES not using the same retry clearing method as SmallStep for macos (#48105 )

2026-06-25 09:32:22 -04:00

46299-live-report-remove-host

…

46300-orbit-reenroll-eua

Don't require end user auth on orbit re-enrollment (#46300 ) (#47740 )

2026-06-18 16:22:49 +01:00

46322-filter-os-versions-correctly

filter OS versions platforms (#47742 )

2026-06-18 14:42:32 +02:00

46387-windows-mdm-enrollment-auth-error

Reject unsupported OnPremise Windows MDM enrollment with an actionable message (#46387 ) (#48300 )

2026-07-01 19:21:02 +01:00

46641-sso-callback-subpath-duplication

Fix SSO callback URLs doubling the subpath under a URL prefix

2026-06-26 10:40:55 -04:00

46642-subpath-email-links

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

46811-citrix-workspace-cpe

Fix CPE generation for Citrix Workspace without YYMM suffix (#46811 ) (#47545 )

2026-06-29 14:44:47 -06:00

46824-gitops-vpp-all-fleets

…

46920-tooltips-for-fleets-and-roles

Display tooltips for fleets and roles on Settings > Users and My account pages (#46822 )

2026-06-22 14:54:52 -05:00

46921-improve-software-tooltips

Improve software page tooltips (#46839 )

2026-06-23 15:04:49 -05:00

46965-time-ago-timestamps-use-days

Time ago timestamps: use days instead of months when under 90 days (#48964 )

2026-07-08 15:07:48 -03:00

46982-windows-scep-profile-validation-panic

…

46993-windows-batch-remove-async

…

47019-script-batch-back-button

Fleet UI: Browser Back no longer trapped on script batch progress page (#48200 )

2026-06-24 16:30:02 -04:00

47246-policy-selection-pagination-reset

Fix policy selection resetting pagination to first page

2026-06-26 13:03:40 -04:00

47259-windows-mdm-redeliver-fleetd-after-wipe

Fixed Windows MDM not re-installing fleetd (#47852 )

2026-06-19 06:33:04 +01:00

47303-redis-moved-errors-query-results-counts

Fix Redis MOVED errors from query results counts in cluster mode

2026-07-02 07:37:42 -04:00

47343-idp-cookie

…

47348-dont-delete-host_software_installs-rows

Cancel software install records instead of deleting when an installer is deleted (#48127 )

2026-06-24 10:00:27 -04:00

47388-getclientconfig-nil-map-panic

Fix panic in GetClientConfig with null agent options config (#47388 ) (#48584 )

2026-07-02 11:17:04 -03:00

47412-render-command-line-flags-as-is

…

47475-fleet-maintained-apps-pagination

…

47488-render-mysql-version

Bump Render blueprint MySQL to 8.0.44 (#47488 ) (#48481 )

2026-06-30 12:26:57 -03:00

47492-windows-scep-challenge-printable-characters

…

47498-bump-x-image-cve-2026-33813

Bump golang.org/x/image to v0.42.0 (CVE-2026-33813) (#48345 )

2026-06-26 11:24:16 -07:00

47508-toast-notifications

New ToastNotification component to replace FlashMessage component (#47508 )

2026-06-23 12:26:02 +02:00

47543-android-staggered-job-queuing

Refactor makeAndroidAppAvailable to use staggered job queuing (#47880 )

2026-06-25 10:31:38 -05:00

47573-signoz-dashboards-deployment-environment

…

47605-hosts-enrolled-percentage

Fix GenerateHostStatusStatistics query so that hosts enrolled chart is accurate (#47791 )

2026-06-19 11:14:24 -05:00

47629-gitops-scriptonly-macos-setup-experience

Add GitOps support for macOS script-only packages in setup experience (#49089 )

2026-07-10 13:52:48 -04:00

47661-hosts-online-chart-include-mobile-by-default

Include mobile hosts by default in "Hosts online" chart (#48769 )

2026-07-08 11:38:26 -05:00

47683-windows-mdm-fleetd-install-ordering

Fix out-of-order Windows MDM fleetd install commands (#47683 ) (#47736 )

2026-06-18 17:17:23 +01:00

47685-activity-outline

Fleet UI: Activity feed outline only on keyboard focus (#48295 )

2026-06-25 17:44:03 -04:00

47722-host-device-mapping-reader-load

Reduce MySQL reader load on GET /hosts with device_mapping + search query (#47722 ) (#48488 )

2026-07-01 10:28:30 -03:00

47784-better-error-missing-private-key

Better error message: Missing private key when adding a custom variable (#47785 )

2026-06-18 09:55:22 -04:00

47811-update-chart-styles-for-current-and-future

Add current-timeframe border and 'No data' tooltip to checkerboard chart (#47812 )

2026-06-18 11:01:13 -05:00

47839-software-title-summary-timeout

Fix software title page timeout for large upcoming-activity backlogs (#47949 )

2026-06-19 17:01:05 -04:00

47943-premium-calls-on-fleet-free

Stop premium calls on Fleet free (#49118 )

2026-07-10 15:42:15 +02:00

47947-script-only-gitops-url

Fix gitops leaving temporary url for script-only package in datastore (#48370 )

2026-06-29 10:21:40 -04:00

47981-gitops-category-collation

Align software category name comparison with DB (#47983 )

2026-06-23 12:38:58 -05:00

47989-copied-badge

Fleet UI: Add CopyButton component, fix Copied! badge in dark mode (#48124 )

2026-06-24 10:19:37 -04:00

48042-resend-managed-config-on-var-change

On var change resend Android certificate templates and managed app configs (#48278 )

2026-06-25 16:27:30 -05:00

48054-fma-duplicate-software-titles

Fix GitOps creating duplicate software titles (#48664 )

2026-07-02 19:16:28 -04:00

48077-observer-managed-account-action.md

Show managed account host action for observers (#48748 )

2026-07-07 14:38:50 +02:00

48102-fix-msix-detecting-as-ipa

Differentiate between ipa and other zip file types in ExtractInstallerMetadata (#48802 )

2026-07-06 18:18:16 -04:00

48125-tooltip-not-showing-idp

Tooltips not always showing for full name (IdP) (#49116 )

2026-07-10 15:42:39 +02:00

48129-404-page

Update 404 and 500 error pages (#48826 )

2026-07-07 10:54:26 -03:00

48177-rename-create-buttons-to-add

Rename "Create" buttons and links to "Add" across the Fleet UI (#48284 )

2026-07-01 15:04:12 -05:00

48192-refetch-report-results

Enable refetchOnWindowFocus and set refetchInterval to 5s when no report results are available (#48268 )

2026-06-26 09:51:29 -03:00

48229-inconsistent-font-size-tooltip

inconsistent font size tooltip (#49121 )

2026-07-10 15:46:42 +02:00

48297-fix-mdm-command-list-custom-label

fix: remove as a custom MDM command text from MDM command list view (#48307 )

2026-06-26 19:13:50 +01:00

48314-updated-missed-abm-references

update missed ABM references (#49027 )

2026-07-09 18:00:06 +02:00

48349-windows-batch-modify-async

Fixed Windows profile modify batch (#48474 )

2026-07-07 16:29:53 +01:00

48368-setup-experience-install-order-tooltip

Update install software tooltip in setup experience (#48382 )

2026-06-29 14:08:53 +01:00

48486-scep-renew

Fix re-enrollment with pending SCEP(and ACME) renewals (#48661 )

2026-07-07 09:26:14 -04:00

48497-cron-interrupted-run-status

Fix cron jobs stuck in "expired" when a run is interrupted mid-flight

2026-07-02 07:38:11 -04:00

48531-dark-mode-hover-state

Fix invisible hover state in dark mode (#49001 )

2026-07-10 12:48:12 -04:00

48567-user-scoped-declarations

Add user-scoped declaration support (#48796 )

2026-07-07 13:15:14 -04:00

48594-recovery-lock-byod-personal-enrollment

Adding in check to disable recovery lock on personal macos since it doesn't have the required permissions (#48598 )

2026-07-01 16:20:50 -05:00

48614-hide-empty-self-service-categories

Hide empty self-service categories on My device page (#48614 ) (#48619 )

2026-07-07 17:05:38 +02:00

48633-profile-reconcile-duplicate-host

Fix dupe profile enqueue bug (#48652 )

2026-07-07 13:08:26 -04:00

48641-policies-empty-page-after-delete

Return to previous page when the last policy on a page is deleted (#48683 )

2026-07-08 13:14:14 -03:00

48685-mdm-enrolled-host-usage-stats

Added anonymous usage statistics reporting the number of macOS and Windows hosts enrolled in Fleet's MDM (#48840 )

2026-07-07 19:22:31 +01:00

48752-windows-reserved-locuri-scopeless-bypass

Fix Windows CSP bypass issue (#48843 )

2026-07-08 14:38:10 +01:00

48805-byod-idp-enroll

Persist byod=true enroll param through IdP redirects (#48808 )

2026-07-06 16:19:42 -05:00

48879-vpp-manual-byod-device-install

Fix VPP/in-house app install on manual-profile BYOD iOS hosts (#48879 ) (#48916 )

2026-07-09 07:32:37 -05:00

48917-command-details-modal-reenrolled-host

48917 Show a deleted state instead of a generic error for stale MDM command (#49012 )

2026-07-10 10:07:30 +01:00

48948-delete-cert-modal-overflow

Fix long certificate name overflow in delete certificate modal (#48948 ) (#49019 )

2026-07-10 06:40:30 -06:00

48951-certificate-ca-dropdown-scep-only

Filter Add certificate CA dropdown to custom SCEP only (#49020 )

2026-07-10 11:14:28 -06:00

add-missing-error-fma-dynamic-policy

Fix fleet_maintained_app_slug being allowed in a dynamic policy (#49034 )

2026-07-09 13:17:03 -04:00

add-support-software-category

Add "Support" default software category (#47923 )

2026-06-23 09:41:08 -05:00

api-endpoints-add-reports-run

Add POST /reports/run to the API endpoints catalog (#48790 )

2026-07-07 09:59:12 -03:00

batch-script-team-check

Check if host is still on script's team before executing batch (#48244 )

2026-06-25 12:04:34 -04:00

fix-48277-live-results-translate-crash

Fix live results error page from browser auto-translate (#48277 ) (#48705 )

2026-07-06 09:19:56 -03:00

fix-condaccess-scep-validation

Tighten conditional-access SCEP challenge validation (#48041 )

2026-06-24 16:53:37 -04:00

fix-macos-software-memory-recursive-cask-glob

Fix performance regression in software_macos query (#48649 )

2026-07-03 11:04:30 -03:00

fix-s3-carve-cleanup-hang

Fix S3 file carve cleanup hang and rework reconciliation

2026-07-01 14:00:59 -04:00

fix-team-member-authorization.md

Restrict authorization for team membership operations (#48201 )

2026-06-25 10:01:15 -03:00

friendly-base64-error-mobileconfig

Better error message: Configuration profiles has characters that need escaping (#40073 )

2026-07-02 14:32:49 -05:00

gitops-windows-profiles-mdm-state

Improved GitOps consistency for Windows BatchSetMDMProfiles (#48467 )

2026-06-30 21:33:07 +01:00

improve-batch-script-exec-perms

Fix batch script execution validations (#48243 )

2026-06-25 07:25:33 -04:00

improve-mdm-results-validation

Fix returned values on MDM command results endpoint (#48296 )

2026-06-26 10:34:26 -04:00

optimize-query-aggregated-stats

Optimize query aggregated stats cron to skip queries without execution data (#48698 )

2026-07-03 13:29:49 -04:00

policies-targeted-platforms-filter

Add Targeted platforms column and platform filter to Policies page (#44125 )

2026-07-10 13:32:16 -05:00

scep-renewal-validation

Tighten certificate renewal validation in host identity SCEP service (#48270 )

2026-06-25 12:02:15 -04:00

scim-admin-only-access

Restrict SCIM endpoints to global admin only (#48858 )

2026-07-10 11:53:48 -04:00

scim-idp-associate-all-matching-hosts

Associate all matching hosts with a SCIM/IdP user (not just the first) (#48351 )

2026-07-01 10:40:31 -03:00

software-detail-pending-activity-dropout

Fix host software details dropping pending installs/uninstalls (#47954 )

2026-06-22 10:34:37 -04:00

software-title-scope-validation

Improve fleet scope validation for software title lookups (#48034 )

2026-06-23 14:28:15 -04:00

ssrf-transport-ip-blocking

Add private network IP blocking for outbound HTTP requests (#46463 )

2026-06-29 10:41:16 -04:00

stale-policy-membership-cleanup.md

Cleanup policy_membership stale entries in distributed/write (#48674 )

2026-07-03 14:12:08 -03:00

update-go-1.26.5

Update go to 1.26.5 (#48993 )

2026-07-09 11:20:45 -03:00