Steven Palmesano 5f3ea66ca0 Enable "Turn off MDM" button for offline macOS devices (#46651) ...

The original implementation (#8206) explicitly disabled this for offline
hosts until MDM command queueing was supported. That work has since been
completed, so offline macOS hosts now behave the same as iOS/iPadOS: the
unenroll command is queued and delivered when the device comes back
online.

**Related issue:** Resolves #25217

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.


## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* The "Turn off MDM" action is now enabled for offline macOS hosts.
Unenroll commands can be queued while a device is offline and will be
delivered automatically when it reconnects, matching the behavior for
iOS and iPadOS.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-07-07 11:20:45 -05:00

..

.keep

…

4842-search-public-ip

Add public IP address to host search (#46809)

2026-06-30 16:20:37 -03:00

16279-cross-team-label-membership

Made team label membership checks more robust

2026-06-23 10:01:23 -04:00

16288-conditional-access-authz

Restrict conditional access Okta IdP asset endpoints to privileged roles (#48294)

2026-06-25 15:57:25 -03:00

16291-policy-query-id-authz

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

16292-password-reset-clear-sessions

Improve session handling during password reset (#47860)

2026-06-19 09:22:48 -04:00

21818-fleetctl-sso-warning

Display instructions needed for SSO-enabled accounts with fleetctl (#46768)

2026-06-17 18:19:00 -04:00

23242-apple-byod-enrollment-permissions

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

25217-turn-off-mdm-offline-macos

Enable "Turn off MDM" button for offline macOS devices (#46651)

2026-07-07 11:20:45 -05:00

25574-splunk-log-destination

Add native Splunk HEC log destination (#48455)

2026-07-03 12:14:24 -04:00

30871-default-byod-fleet

BYOF: Add support for unique token ADUE (#47407)

2026-06-16 14:56:11 +02:00

31294-windows-host-certificates

Show certificates on host details page for Windows (#31294) (#48469)

2026-07-06 20:28:21 +01:00

33441-policies-include-exclude-targets

Policies: Include/Exclude label targeting in Save policy modal (#33441) (#47213)

2026-06-11 10:00:30 -03:00

34591-add-cachyos-support

Add CachyOS support (#47757)

2026-07-03 10:28:08 -03:00

35694-device-software-cvss-filter

Filter vulnerable software by cvss on my device page (#47372)

2026-06-16 11:28:06 -04:00

36774-cert-template-all-idp-vars

Android certs support all idp vars (#48100)

2026-06-23 16:58:40 -05:00

38504-auto-update-pin-rollback-fma

add changes file

2026-06-25 13:13:13 -04:00

38670-policy-status-page

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

38874-macos-enroll-url

Add /enroll URL for macOS in Add hosts modal (#47528)

2026-07-07 11:18:45 -05:00

38928-navigate-to-report-after-saving

Navigate back to the report details page after saving a report (#46754)

2026-06-16 10:29:26 -05:00

39017-mydevice-macos-applications-query-param

Fix My device software list appending macos_applications param on pagination (#48145)

2026-06-24 13:36:24 -04:00

39323-positive-language-checkboxes

Positive language checkboxes (#47603)

2026-06-16 10:28:44 -05:00

40410-webhook-url-validation-onblur.md

Add onURLBlur handler for InputField (#48854)

2026-07-07 11:52:35 -04:00

40502-fix-select-all-matching-hosts-count

Show actual number of selected hosts (#46334)

2026-06-16 15:04:25 -05:00

41056-remove-windows-sts-auth-endpoint.md

Removed the unused /api/mdm/microsoft/auth Windows MDM STS endpoint (#48734)

2026-07-06 20:29:05 +01:00

41790-citrix-ltsr-cumulative-updates

Detect Citrix Workspace LTSR cumulative updates (#41790) (#47591)

2026-06-29 14:45:06 -06:00

41910-throttle-AMAPI

Throttling android software installs (#47461)

2026-06-15 19:54:23 -05:00

41968-android-profile-fleet-variables

Added variables in Android configuration profiles (#47750)

2026-06-18 13:53:28 -05:00

42435-calendar-events-next-business-day

Schedule calendar remediation events next business day after policy failure (#42435)

2026-06-09 09:15:47 -05:00

42441-live-query-redis-scaling

Add per-host reverse index for small-target live queries

2026-06-29 09:43:30 -04:00

42445-firefox-esr-shared-bundle-identifier

Disambiguate FMAs sharing macOS bundle IDs (#47951)

2026-06-24 13:05:53 -05:00

42473-sso-button-overflow

Fix IdP name overflowing button in login page (#48426)

2026-06-30 08:55:03 -03:00

42797-script-only-advanced-options

Support advanced options for script-only packages (#48315)

2026-06-29 11:59:37 -04:00

42915-google-workspace-idp-host-vitals

Google Workspace IdP [2/6]: backend (cron + directory sync) (#48165)

2026-06-29 12:28:10 -03:00

43310-policy-report-details-flash

Fix policy and report pages showing previously viewed content (#47767)

2026-06-19 14:37:06 -04:00

43518-enable-disk-encryption-bitlocker

Add FLEET_MDM_ENABLE_DISK_ENCRYPTION alias for custom BitLocker profiles (#43518) (#48737)

2026-07-06 22:38:45 +01:00

43667-macos-script-only-setup-experience

Show .sh scripts in macOS setup experience (#47629)

2026-06-16 10:55:23 -04:00

43673-my-device-sort-by-display-name

Fix My device page software sorting by display name (#45836)

2026-06-24 14:16:57 -04:00

43770-missing-fma-generate-gitops-bug

Add detailed error for generate-gitops when a patch policy installer is missing an FMA (#47136)

2026-06-08 17:49:02 -04:00

44109-vulns-not-supported

Move tooltip for vulnerability support to "Not supported" (#47074)

2026-06-16 16:29:17 -05:00

44153-enable-managed-local-account-update-fleet

Add activity and enable managed account fleets endpoint (#48273)

2026-06-25 17:29:33 -04:00

44188-compress-windows-mdm-responses

Compress windows_mdm_responses envelopes on the Windows MDM hot path (#48320)

2026-06-26 22:03:01 +01:00

44272-fix-scrollbar-always-showing

Fix scrollbar showing up when not needed in report/policy results tables (#47627)

2026-06-16 14:04:45 -04:00

44325-gitops-mode-tooltip-label

Fix tooltips to center of label row (#47861)

2026-06-19 07:15:05 -04:00

44352-500-error-page

Update 404 and 500 error pages (#48826)

2026-07-07 10:54:26 -03:00

44617-install-activity-premium-error

Show Fleet Premium message when viewing install details modal on Fleet Free (#47551)

2026-06-15 12:33:16 -04:00

44629-optimize-orbit-mdm-connection-check

Optimize IsHostConnectedToFleetMDM on the orbit check-in hot path (#44629) (#48375)

2026-06-29 17:11:27 +01:00

44645-self-service-update-button

Fix self-service update button flashing (#47749)

2026-06-17 12:07:14 -04:00

44710-fix-spaces-in-script-package-name

Fix spaces in script package name causing validation failure (#47945)

2026-06-22 11:23:16 -04:00

44746-collect-and-filter-more-cves

Add CVE chart filtering and non-critical CVE data collection (backend) (#47470)

2026-06-19 10:52:03 -05:00

44746-more-filtering-in-vulns-chart

Add more filtering to Vulnerability Exposure chart (frontend) (#47674)

2026-06-19 14:17:31 -05:00

44746-set-vuln-filters-in-gitops

Allow setting default vuln chart filters via GitOps (#47634)

2026-06-24 07:49:19 -07:00

45309-setup-experience-policy-checks

Setup experience software policy checks (#47075)

2026-06-10 21:16:37 +01:00

45353-android-var-software-configs

Added FLEET_VAR_HOST to android configs (#47642)

2026-06-17 11:10:03 -05:00

45368-track-mobile-devices-for-hosts-online

Report mobile devices in "hosts online" (#47222)

2026-06-24 07:50:35 -07:00

45635-windows-batched-reconciler

Improved Windows MDM reconciler (#47071)

2026-06-11 07:03:28 +01:00

45635-windows-per-host-reconcile-on-enroll

Windows MDM reconciler cleanup and remaining fixes (#47493)

2026-06-12 22:30:58 +01:00

45639-improve-error-messages

Update some GitOps error messages for clarity (#47134)

2026-06-19 11:10:58 -05:00

45640-apple-windows-mdm-command-activities

45640 Add activity feed entry when a custom Apple or Windows MDM command is run (#47743)

2026-06-19 13:42:17 +01:00

45650-windows-mdm-command-results-insert-perf.md

Improved the performance of Windows MDM profile installation (#48733)

2026-07-06 18:34:10 +01:00

45661-fix-gitops-relative-paths

fix gitops relative paths for unassigned and org_settings (#47512)

2026-06-17 18:32:06 +02:00

45682-cache-control-static-assets

Add Cache-Control to static assets served under /assets/ (#48409)

2026-06-30 10:13:07 -03:00

45710-zorin-os-support

Add Zorin OS as a recognized Linux platform (#45712)

2026-07-06 13:00:10 -03:00

45947-fix-macos-profiles-stuck-verifying

Parse both date formats while parsing macos profiles for verification (#48328)

2026-06-26 15:58:31 -04:00

45948-windows-esp-continue-anyway

Always display Windows ESP error when software install fails (#47522)

2026-06-18 06:35:57 +01:00

45984-macos-update-new-hosts-default

Fix macOS "Update new hosts to latest" staying enabled in GitOps after clearing version/deadline (#45984) (#47602)

2026-06-16 10:21:20 -03:00

46005-fleet-mcp-live-query-observer-plus

fleet-mcp: run multi-host live queries via ad-hoc campaign so observer_plus works

2026-06-26 12:07:13 -04:00

46235-dep-syncer-cursor-not-advanced-on-callback-error

46235 dep profile assigner context cancelled (#48473)

2026-07-06 14:16:14 +01:00

46243-join-mdm-for-missing-status

Join MDM for missing status for non osquery devices (#47672)

2026-06-17 16:20:54 +02:00

46291-ndes-retry-wipe

Fix NDES not using the same retry clearing method as SmallStep for macos (#48105)

2026-06-25 09:32:22 -04:00

46299-live-report-remove-host

Fix live query selector X button (#47089)

2026-06-08 18:05:14 -03:00

46300-orbit-reenroll-eua

Don't require end user auth on orbit re-enrollment (#46300) (#47740)

2026-06-18 16:22:49 +01:00

46322-filter-os-versions-correctly

filter OS versions platforms (#47742)

2026-06-18 14:42:32 +02:00

46387-windows-mdm-enrollment-auth-error

Reject unsupported OnPremise Windows MDM enrollment with an actionable message (#46387) (#48300)

2026-07-01 19:21:02 +01:00

46641-sso-callback-subpath-duplication

Fix SSO callback URLs doubling the subpath under a URL prefix

2026-06-26 10:40:55 -04:00

46642-subpath-email-links

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

46811-citrix-workspace-cpe

Fix CPE generation for Citrix Workspace without YYMM suffix (#46811) (#47545)

2026-06-29 14:44:47 -06:00

46824-gitops-vpp-all-fleets

Fix GitOps when using All fleets in VPP settings (#46855)

2026-06-08 13:27:57 -05:00

46920-tooltips-for-fleets-and-roles

Display tooltips for fleets and roles on Settings > Users and My account pages (#46822)

2026-06-22 14:54:52 -05:00

46921-improve-software-tooltips

Improve software page tooltips (#46839)

2026-06-23 15:04:49 -05:00

46982-windows-scep-profile-validation-panic

Fixing Windows SCEP issues (#47255)

2026-06-15 08:52:25 +01:00

46993-windows-batch-remove-async

Defer Windows MDM profile removals via pending-delete retention (#47156)

2026-06-11 22:27:15 +01:00

47019-script-batch-back-button

Fleet UI: Browser Back no longer trapped on script batch progress page (#48200)

2026-06-24 16:30:02 -04:00

47246-policy-selection-pagination-reset

Fix policy selection resetting pagination to first page

2026-06-26 13:03:40 -04:00

47259-windows-mdm-redeliver-fleetd-after-wipe

Fixed Windows MDM not re-installing fleetd (#47852)

2026-06-19 06:33:04 +01:00

47303-redis-moved-errors-query-results-counts

Fix Redis MOVED errors from query results counts in cluster mode

2026-07-02 07:37:42 -04:00

47343-idp-cookie

Clear idp cookie after succesful SSO (#47569)

2026-06-17 11:09:21 -05:00

47348-dont-delete-host_software_installs-rows

Cancel software install records instead of deleting when an installer is deleted (#48127)

2026-06-24 10:00:27 -04:00

47388-getclientconfig-nil-map-panic

Fix panic in GetClientConfig with null agent options config (#47388) (#48584)

2026-07-02 11:17:04 -03:00

47412-render-command-line-flags-as-is

Fix command line flags in agent settings UI (#47414)

2026-06-11 11:13:08 -03:00

47475-fleet-maintained-apps-pagination

Paginate Fleet-maintained apps and filters (#47615)

2026-06-16 15:58:24 -05:00

47488-render-mysql-version

Bump Render blueprint MySQL to 8.0.44 (#47488) (#48481)

2026-06-30 12:26:57 -03:00

47492-windows-scep-challenge-printable-characters

Fixing Windows SCEP issues (#47255)

2026-06-15 08:52:25 +01:00

47498-bump-x-image-cve-2026-33813

Bump golang.org/x/image to v0.42.0 (CVE-2026-33813) (#48345)

2026-06-26 11:24:16 -07:00

47508-toast-notifications

New ToastNotification component to replace FlashMessage component (#47508)

2026-06-23 12:26:02 +02:00

47543-android-staggered-job-queuing

Refactor makeAndroidAppAvailable to use staggered job queuing (#47880)

2026-06-25 10:31:38 -05:00

47573-signoz-dashboards-deployment-environment

Filter OTEL by environment (#47574)

2026-06-15 20:44:05 +01:00

47605-hosts-enrolled-percentage

Fix GenerateHostStatusStatistics query so that hosts enrolled chart is accurate (#47791)

2026-06-19 11:14:24 -05:00

47683-windows-mdm-fleetd-install-ordering

Fix out-of-order Windows MDM fleetd install commands (#47683) (#47736)

2026-06-18 17:17:23 +01:00

47685-activity-outline

Fleet UI: Activity feed outline only on keyboard focus (#48295)

2026-06-25 17:44:03 -04:00

47722-host-device-mapping-reader-load

Reduce MySQL reader load on GET /hosts with device_mapping + search query (#47722) (#48488)

2026-07-01 10:28:30 -03:00

47784-better-error-missing-private-key

Better error message: Missing private key when adding a custom variable (#47785)

2026-06-18 09:55:22 -04:00

47811-update-chart-styles-for-current-and-future

Add current-timeframe border and 'No data' tooltip to checkerboard chart (#47812)

2026-06-18 11:01:13 -05:00

47839-software-title-summary-timeout

Fix software title page timeout for large upcoming-activity backlogs (#47949)

2026-06-19 17:01:05 -04:00

47947-script-only-gitops-url

Fix gitops leaving temporary url for script-only package in datastore (#48370)

2026-06-29 10:21:40 -04:00

47981-gitops-category-collation

Align software category name comparison with DB (#47983)

2026-06-23 12:38:58 -05:00

47989-copied-badge

Fleet UI: Add CopyButton component, fix Copied! badge in dark mode (#48124)

2026-06-24 10:19:37 -04:00

48042-resend-managed-config-on-var-change

On var change resend Android certificate templates and managed app configs (#48278)

2026-06-25 16:27:30 -05:00

48054-fma-duplicate-software-titles

Fix GitOps creating duplicate software titles (#48664)

2026-07-02 19:16:28 -04:00

48077-observer-managed-account-action.md

Show managed account host action for observers (#48748)

2026-07-07 14:38:50 +02:00

48102-fix-msix-detecting-as-ipa

Differentiate between ipa and other zip file types in ExtractInstallerMetadata (#48802)

2026-07-06 18:18:16 -04:00

48129-404-page

Update 404 and 500 error pages (#48826)

2026-07-07 10:54:26 -03:00

48177-rename-create-buttons-to-add

Rename "Create" buttons and links to "Add" across the Fleet UI (#48284)

2026-07-01 15:04:12 -05:00

48192-refetch-report-results

Enable refetchOnWindowFocus and set refetchInterval to 5s when no report results are available (#48268)

2026-06-26 09:51:29 -03:00

48297-fix-mdm-command-list-custom-label

fix: remove as a custom MDM command text from MDM command list view (#48307)

2026-06-26 19:13:50 +01:00

48349-windows-batch-modify-async

Fixed Windows profile modify batch (#48474)

2026-07-07 16:29:53 +01:00

48368-setup-experience-install-order-tooltip

Update install software tooltip in setup experience (#48382)

2026-06-29 14:08:53 +01:00

48486-scep-renew

Fix re-enrollment with pending SCEP(and ACME) renewals (#48661)

2026-07-07 09:26:14 -04:00

48497-cron-interrupted-run-status

Fix cron jobs stuck in "expired" when a run is interrupted mid-flight

2026-07-02 07:38:11 -04:00

48594-recovery-lock-byod-personal-enrollment

Adding in check to disable recovery lock on personal macos since it doesn't have the required permissions (#48598)

2026-07-01 16:20:50 -05:00

48614-hide-empty-self-service-categories

Hide empty self-service categories on My device page (#48614) (#48619)

2026-07-07 17:05:38 +02:00

48805-byod-idp-enroll

Persist byod=true enroll param through IdP redirects (#48808)

2026-07-06 16:19:42 -05:00

add-support-software-category

Add "Support" default software category (#47923)

2026-06-23 09:41:08 -05:00

api-endpoints-add-reports-run

Add POST /reports/run to the API endpoints catalog (#48790)

2026-07-07 09:59:12 -03:00

batch-script-team-check

Check if host is still on script's team before executing batch (#48244)

2026-06-25 12:04:34 -04:00

fix-48277-live-results-translate-crash

Fix live results error page from browser auto-translate (#48277) (#48705)

2026-07-06 09:19:56 -03:00

fix-condaccess-scep-validation

Tighten conditional-access SCEP challenge validation (#48041)

2026-06-24 16:53:37 -04:00

fix-macos-software-memory-recursive-cask-glob

Fix performance regression in software_macos query (#48649)

2026-07-03 11:04:30 -03:00

fix-s3-carve-cleanup-hang

Fix S3 file carve cleanup hang and rework reconciliation

2026-07-01 14:00:59 -04:00

fix-team-member-authorization.md

Restrict authorization for team membership operations (#48201)

2026-06-25 10:01:15 -03:00

friendly-base64-error-mobileconfig

Better error message: Configuration profiles has characters that need escaping (#40073)

2026-07-02 14:32:49 -05:00

gitops-windows-profiles-mdm-state

Improved GitOps consistency for Windows BatchSetMDMProfiles (#48467)

2026-06-30 21:33:07 +01:00

improve-batch-script-exec-perms

Fix batch script execution validations (#48243)

2026-06-25 07:25:33 -04:00

improve-mdm-results-validation

Fix returned values on MDM command results endpoint (#48296)

2026-06-26 10:34:26 -04:00

optimize-query-aggregated-stats

Optimize query aggregated stats cron to skip queries without execution data (#48698)

2026-07-03 13:29:49 -04:00

scep-renewal-validation

Tighten certificate renewal validation in host identity SCEP service (#48270)

2026-06-25 12:02:15 -04:00

scim-idp-associate-all-matching-hosts

Associate all matching hosts with a SCIM/IdP user (not just the first) (#48351)

2026-07-01 10:40:31 -03:00

software-detail-pending-activity-dropout

Fix host software details dropping pending installs/uninstalls (#47954)

2026-06-22 10:34:37 -04:00

software-title-scope-validation

Improve fleet scope validation for software title lookups (#48034)

2026-06-23 14:28:15 -04:00

ssrf-transport-ip-blocking

Add private network IP blocking for outbound HTTP requests (#46463)

2026-06-29 10:41:16 -04:00

stale-policy-membership-cleanup.md

Cleanup policy_membership stale entries in distributed/write (#48674)

2026-07-03 14:12:08 -03:00