Juan Fernandez 3df6449426 API endpoints initial models (#42881) ...

**Related issue:** Resolves #42881

- Added user_api_endpoints table to track per user API endpoint
permissions.
- Added service/api_endpoints, used to handle service/api_endpoints.yml
artifact.
- Added check on server start that makes sure that
service/apin_endpoints.yml is a subset of router routes.

2026-04-07 10:40:39 -04:00

..

.keep

…

14827-prevent-TOCTOU-last-admin

Fix TOCTOU race in last global admin protection (#42172)

2026-04-01 15:00:08 -03:00

29657-custom-settings-configuration-profiles

Rename custom settings to configuration profiles (#41250)

2026-03-25 10:07:53 +01:00

31289-acme-for-mdm-protocol

ACME MDM -> main (#42926)

2026-04-02 15:56:31 -05:00

32126-macos-fleetd-reinstall

Fix fleetd in-band upgrade on macOS hosts (#42187)

2026-03-27 09:04:14 -03:00

32662-include-correct-cpe

…

32773-preview-windows-mdm

Fix: Missing guide: How to try Windows MDM (fleetctl preview) (#42451)

2026-03-27 12:15:35 -03:00

33106-fix-generate-gitops-vpp

Fix fleetctl generate-gitops failing to include VPP fleet assignments (#42429)

2026-03-26 19:06:51 -05:00

33418-windows-mdm-profile-deletion

SyncML <Delete> Windows profiles (#42206)

2026-03-26 18:25:54 -05:00

34433-speedup-macos-profile-delivery

…

34667-scim-user-host-emails-association

Fix SCIM user association with host when IdP user is set before being provisioned (#42889)

2026-04-02 13:35:07 -03:00

34950-nano-tables-cleanup

#34950 Cleanup nano refetch commands in the background (#42472)

2026-04-02 06:16:55 -04:00

35067-windows-pro-missing-vulnerabilities

…

35467-detail-query-config-preload

Reduced redundant database calls in the osquery distributed query results hot path (#42157)

2026-03-23 10:31:12 -05:00

35484-improve-policy_membership-contention

…

36312-trim-spaces-from-fleets-names

…

36643-fix-back-button-policies-reports

Fix: Policies page: Browser back button doesn't work as expected (#43082)

2026-04-07 09:51:35 -03:00

36751-add-fmas-to-policy-automation

Implement FMA software policy automation (#42533)

2026-03-30 11:25:46 -05:00

36799-macos-disk-space-purgeable

…

37323-jetbrains-cve

…

37546-android-certificate-install-activity

Added automatic Android cert retry (#42734)

2026-04-01 13:49:24 -05:00

37556-resend-android-certs

Resend android cert to host - frontend, update profile API (#42297)

2026-03-26 13:06:29 -07:00

38002-throttle-ca-certificate-profiles

Throttle CA access through MDM (#42114)

2026-03-23 09:04:55 -05:00

38036-gitops-ca-delete-order

…

38041-entra-windows-conditional-access

…

38785-windows-setup-experience-cancel

Add require_all_software_windows config option (#43011)

2026-04-06 17:39:59 -05:00

38793-python-scripts

Add Python script support for macOS and Linux (#38562)

2026-03-24 10:01:54 -04:00

38929-reports-tab

Fleet UI: Hide host details reports when not supported (#42746)

2026-04-02 16:42:51 -04:00

38988-fma-pin-major-version

Pin FMA major version in GitOps (#43053)

2026-04-06 12:36:47 -04:00

39066-vpp-timeout-install-details

…

39082-setup-logo-light-background

…

39190-display-sw-version-filter

Return light software metadata when listing hosts filtered by software present only on a different team (#42519)

2026-03-30 21:33:21 -07:00

39308-team-ca-read-access

…

39316-winoffice-vulnerability-detection

Add Windows Office vulnerability detection runtime (3/3) (#42872)

2026-04-03 09:44:55 -06:00

39842-generate-gitops-bug

Use list FMA endpoint in generate-gitops to match FMAs by ID (#42483)

2026-03-26 15:52:28 -04:00

39899-deterministic-cpe-matching

…

39968-sso-validity-increase-default

…

40015-activate-deprecation-warnings

Activate deprecation warnings (#41449)

2026-04-06 09:59:32 -05:00

40050-server-core-msrc-differentiation

Differentiate between Windows Server Core and full desktop installations (#42034)

2026-03-21 10:03:57 -05:00

40057-osv-vulns

Use OSV for ubuntu vulnerability scanning (#42063)

2026-04-03 15:59:32 -05:00

40117-fix-sql-table-alias-platform-detection

The fix skips nodes where type === "column_ref", since those aren't table references (#42821)

2026-04-01 14:22:10 -05:00

40137-update-default-fleet

Update default fleet selected on dashboard and controls (#42688)

2026-03-31 09:11:51 -05:00

40581-os-versions-vuln-details

Fix OS versions not populated in vulnerability details (#42759)

2026-04-01 17:09:20 -06:00

40715-allow-whitespace-end-users-form

…

40751-google-drive-brew-version

Update how google drive fma version is created (#42270)

2026-03-27 16:54:22 -04:00

40785-fix-gitops-vpp-token-assignment

Defer all VPP apps when there are missing teams (#42862)

2026-04-02 15:38:58 -04:00

40841-gitops-sw-upload-error

Fix GitOps policy-software resolution to fall back to hash when URL lookup fails (#42816)

2026-04-02 17:22:14 -04:00

40910-correct-request-certificate-pem

…

40972-policy-description

Fleet UI: Add description to add/edit policies (#42692)

2026-03-31 09:35:37 -04:00

41324-support-labels-include-all-for-installers

…

41409-use-fleetctl-new-templates-as-starter-lib

Use fleetctl new templates for new instances (#42768)

2026-04-03 09:58:03 -05:00

41484-fix-windows-mdm-profile-upload-panic

Fix panic message for Windows MDM profile upload (#42913)

2026-04-02 13:29:00 -05:00

41500-validate-scripts

add missing validation for scripts, tests (#42424)

2026-03-30 10:13:03 -04:00

41534-host-details-reports-api-end-point

…

41540-host-details-reports-db-optimizations

Performance improvements for Host Reports (41540)

2026-03-26 07:04:18 -04:00

41542-android-cert-resend-backend

41542 android cert resend backend (#42099)

2026-03-23 17:01:52 -04:00

41586-admin-by-request-false-positive

…

41601-use-multiplatform-names-in-front-end

Use new multiplatform keys on the front end (#41763)

2026-03-30 08:56:21 -05:00

41603-fix-query-responses

…

41631-not-installed

fix usage of query params in host software endpoint (#42302)

2026-03-24 17:53:19 -04:00

41636-typo-in-msrc-json

Fix "vulnerabilities" key in MSRC json (#42706)

2026-04-01 12:25:23 -06:00

41644-improve-cpe-matching

Improved cpe deterministic matching (#42325)

2026-03-24 17:48:02 -05:00

41670-auto-rotate-recovery-lock

Backend: Auto rotate recovery lock passwords (#42084)

2026-03-26 12:12:41 -06:00

41672-allow-omitting-manual-hosts-label

…

41710-overwrite-software-title

Update software title names on FMA sync and upload (#42647)

2026-03-30 15:59:19 -04:00

41741-order

incorporate display name into setup experience ordering and enforce 1 at a time execution (#42393)

2026-04-06 11:51:39 -05:00

41742-fix-my-device-500-fleet-free

…

41778-fix-enqueue-setup-experience-items-for-arch-linux

…

41815-override-patch-policy-query

Override patch policy query (#42322)

2026-03-25 10:32:41 -04:00

41888-otel-service-name

…

42017-host-details-reports-tab

[Host details > Reports] Frontend changes (#42017)

2026-03-24 10:45:34 -03:00

42047-android-web-app-banner

Add warning banner for Android web apps requiring Google Chrome (#42598)

2026-03-28 15:35:45 -05:00

42185-add-flatcar-coreos-linux-platforms

Add Flatcar Container Linux and CoreOS to recognized Linux platforms (#42186)

2026-03-23 10:33:48 -03:00

42327-apple-profile-retries

Increased Apple retry from 1 to 3. (#42331)

2026-03-26 11:29:20 -05:00

42383-android-display-name

Use display name when applicable for Android config change updates (#42626)

2026-03-30 09:51:12 -05:00

42399-support-vpp-policy-automations-in-generate-gitops

fix policy software vpp automations (#42400)

2026-03-25 15:10:40 -05:00

42443-fix-show-disk-encryption-key-modal

Fix disk encryption key modal to not show stale key when switching between hosts (#42444)

2026-03-27 10:13:59 -03:00

42572-fix-duplicate-text

Filter errors that start with Couldn't add (#42764)

2026-03-31 16:33:55 -04:00

42600-android-cert-templates-cleared-on-reenroll

Clear Android cert records on unenroll. (#42920)

2026-04-02 14:59:09 -05:00

42751-r2-fma

Switch FMA manifest retrieval to use Cloudflare R2 bucket (#43012)

2026-04-03 19:08:45 -05:00

42799-option-to-unlock-not-available-afler-lock

Do not clear MDM lock state on "idle" after lock (#42799) (#42825)

2026-04-02 11:02:50 -04:00

42808-rwmutex-jitter-shouldupdate

Improved performance of distributed read endpoint (#42810)

2026-04-03 07:13:56 -05:00

42814-sso-learn-more-link

Fleet UI: Add "Learn more" link to End-user Authentication docs on SSO settings page (#42814)

2026-04-01 16:25:57 -05:00

42836-deduplicate-flipping-policies-queries

Removed duplicate FlippingPoliciesForHost DB calls (#42845)

2026-04-06 10:11:07 -05:00

42881-api-endpoints-initial-models

API endpoints initial models (#42881)

2026-04-07 10:40:39 -04:00

42979-fix-for-multi-team-user

Fix UserMenu.tsx for multi-team user (#43059)

2026-04-07 08:13:18 -03:00

43034-optimize-policy-queries-for-host

Optimized PolicyQueriesForHost and ListPoliciesForHost SQL queries (#43035)

2026-04-06 08:50:18 -05:00

add-api-time-on-gitops-errors

Add API time on GitOps errors to ease troubleshooting (#43000)

2026-04-06 10:58:41 -03:00

allow-clearing-windows-update-settings

Allowed clearing Windows OS update deadline (#42272)

2026-03-25 16:02:54 -05:00

bump-mysql-8.0.42

…

issue-40076-clear-enrolled-from-migration

clear enrollment from migration status on host when it is a new enrollment (#42553)

2026-04-07 07:44:52 -05:00

refactor-named-functions-nil-checks

…

up-default-software-batch

…

update-go-1.26.1

…