4 people ac4ec2ff27 FMA version rollback (#40038) ...

- **Gitops specify FMA rollback version (#39582)**
- **Fleet UI: Show versions options for FMA installers (#39583)**
- **rollback: DB and core implementation (#39650)**

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #31919 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jonathan Katz <44128041+jkatz01@users.noreply.github.com>
Co-authored-by: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Co-authored-by: Carlo DiCelico <carlo@fleetdm.com>

2026-02-24 14:00:32 -05:00

..

.keep

…

14284-external-deny-list

Added deny list for checking external user submitted urls (#39947)

2026-02-17 17:09:52 -06:00

14323-order-by

Order By Vulnerability (#40143)

2026-02-23 09:42:36 -07:00

14489-host-transfer-validations

Improved validation for host transfers (#40345)

2026-02-24 12:15:59 -03:00

25080-show-manage-automations-queries-policies-pages

…

26405-jetbrains

Jetbrains override query (#39800)

2026-02-17 08:00:36 -07:00

29076-vuln-freetier-webhook

Allow vulnerability webhook to fire for fleet free (#39810)

2026-02-16 11:02:48 -06:00

30670-python-cve

…

30967-disable-calendar-manage-policy-automations-no-team

…

31919-rollback

FMA version rollback (#40038)

2026-02-24 14:00:32 -05:00

31919-surface-latest-fma-version

FMA version rollback (#40038)

2026-02-24 14:00:32 -05:00

33519-url-team-id-param

Fleet UI: Host details page includes team_id param in URL (#39801)

2026-02-13 16:42:17 -05:00

33990-rhel-kernel-vulns

…

34068-software-install-retries

Add retries for software installs (#39827)

2026-02-23 08:48:53 -05:00

34122-remove-stable-scrollbar-gutters

Remove stable scrollbar gutters from the UI (#39850)

2026-02-13 13:34:02 -08:00

34370-vert-padding-ossettings

Improved spacing on the Controls > OS Settings page (#40188)

2026-02-20 08:34:22 -08:00

34501-fix-fleetd-escrow-multi-sessions-x11

🤖 Fix fleetd escrow in X11 multi-user sessions (#39795)

2026-02-16 14:15:10 -03:00

34620-trim-app-fix

…

34748-tooltip-truncated-host-software-type

…

34990-improve-apns-query-efficiency

…

35044-2-vuln-jobs

Fix issue with vuln jobs running in parallel. (#39806)

2026-02-16 13:59:40 -06:00

35528-wrong-title-platform

Check platform when matching title ID to software installer (#39933)

2026-02-18 12:52:06 -05:00

35561-move-textarea-copy-icons

Move copy UI for InputFields with type="textarea" in line with the label (#39885)

2026-02-16 12:11:40 -08:00

35613-android-profiles-pending

…

35659-android-profiles-dont-reverify

…

36355-activities-max-per_page

Max per_page for activities is now 10,000 (#39828)

2026-02-13 13:32:09 -06:00

36361-more-debug-logging-for-ca-profiles

…

36755-add-activity-for-modified-enroll-secrets

…

37182-update-policy-membership-when-labels-change

…

37219-fix

…

37306-fix-certificate-field-truncation

Fix: certificate field too long error due to osquery not encoding non-ascii characters (#40095)

2026-02-19 13:05:04 -03:00

37804-filtering-fmas

…

38343-use-custom-icon-display-name-in-setup-experience

…

38351-token-auth

Extend device token valid window. (#39995)

2026-02-18 12:53:24 -06:00

38431-enforce-setup-experience-restrictions

Enforce GitOps setup experience when manual agent install is enabled (#39775)

2026-02-13 16:21:39 -05:00

38514-android-mdm-empty-state

…

38534-fleet-activities-2

…

38543-disk-encryption-miscounts

…

38554-populate-idp-host-vitals-android

…

38607-otel-logs

…

38621-add-technician-role

…

38699-ca-cert-country

Added Country:US to new CA certs created by Fleet. (#40081)

2026-02-19 09:26:22 -06:00

38766-uninstall-android-apps-on-fleet-remove

…

38834-update-apple-os-update-time

…

38878-fully-managed-android

…

38889-slog-1

Migrate HTTP request logging from go-kit/log to slog (#39729)

2026-02-14 13:04:41 -06:00

38911-nextcloud-cve

…

38947-handle-renaming-labels-in-gitops

Add warning message on gitops label rename (#40008)

2026-02-18 12:52:21 -04:00

38949-policy-automations-stale-data-after-save

Fix: Policy automations revert to old value in UI after saving (#40012)

2026-02-18 18:16:56 -03:00

38955-bulk-team-transfer-cause-long-db-locks

Refactored query used when bulk deleting Apple MDM profiles to rely only on primary keys. (#39705)

2026-02-18 10:13:47 -04:00

39000-ca-bypass-per-policy

…

39048-only-default-if-update-new-hosts-not-explictly-set

…

39083-gitops-label-platform-validation

Label validation not catching invalid platform (#39964)

2026-02-17 14:04:07 -04:00

39228-db-failover

Improve error handling on AWS DB failover (#39841)

2026-02-17 07:10:52 -06:00

39260-fix-enroll-secrets-ui

Fix enroll secrets UI (#40004)

2026-02-18 08:11:33 -06:00

39264-entra-tenants

…

39273-filter-button-hover-fix

…

39329-rename-teams-and-queries

Rename teams and queries to fleets and reports in UI (#39572)

2026-02-17 15:19:33 -06:00

39344-deprecate-some-api-fields

Deprecate "team" and "query" API params (#39873)

2026-02-19 13:53:32 -06:00

39419-disable-gitops-edit-fma

…

39423-left-align-critical-checkbox-save-policy

Left align Critical checkbox in Save policy modal (#39786)

2026-02-13 16:42:09 -03:00

39437-tarballs-ui-status

…

39522-build-workflow

…

39608-server-worker

…

39613-host-name-not-displayed-hostpage-software-tab

Fixed bug with Host detail software tab page title (#39941)

2026-02-17 13:20:24 -04:00

39737-dup-kernel

…

39745-notepad-cve

Fixed false negative CVE-2026-20841 on Windows Notepad. (#39931)

2026-02-17 19:54:36 -06:00

39794-alphabetize-host-vitals

Dynamically alphabetize vitals on the host details page (#39946)

2026-02-16 15:31:20 -08:00

39858-use-upgrade-code-for-title-matching

Handle upgrade code in installer software title matching (#40129)

2026-02-20 17:09:41 -05:00

39871-dep-profile-removed

39871: Handle DEP "profile_status": removed events (#40016)

2026-02-18 12:02:19 -05:00

39921-fix-slow-queries-spec-teams

Improve long processing times for POST /api/latest/fleet/spec/fleets (#40100)

2026-02-19 16:05:29 -03:00

40028-otel-client-errors

Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry (#40051)

2026-02-19 16:06:00 -06:00

40054-slog-2

Migrating MDM files to slog method signatures. (#40263)

2026-02-23 09:26:58 -06:00

40124-add-log-topics

Add ability to enable/disable logs by topic (#40126)

2026-02-20 17:22:50 -06:00

40189-update-used-by-heading

Update host "Used by" column heading (#40190)

2026-02-20 12:21:55 -06:00

fix-report-creation-timestamps

Fix report creation response timestamp values (#40195)

2026-02-23 09:14:07 -03:00

host-search-always-match-email

Improve host search by end user email address (#40197)

2026-02-24 11:25:00 -03:00

increase-script-timeout-to-5-hours

Increase script execution timeout from 1 hour to 5 hours (#39939)

2026-02-19 16:36:47 -05:00

issue-38654-table-wrapping-mdm-card

fix whitespace wrapping on status table in mdm card on dashboard page (#39955)

2026-02-18 12:00:17 +00:00

issue-39266-update-ui-for-multiple-entra-tenant-ids

add UI for adding and removing multiple microsoft entra tenant ids (#39910)

2026-02-19 13:19:52 +00:00

nats-bump

Bump github.com/nats-io/nats-server/v2 from 2.12.1 to 2.12.3 (#40406)

2026-02-24 12:51:48 -06:00

rds-iam-custom-ca-tls

Allow MySQL IAM authentication when a custom TLS CA/TLS config is set (#39808)

2026-02-18 08:15:29 -06:00

rdsmysql-govcloud-certs

Bump shogo82148/rdsmysql/v2 v2.4.0 to v2.5.0 (#40103)

2026-02-20 10:33:27 -06:00