Juan Fernandez 139e365d42 Improve contention around policy_membership table (35484) (#40853) ...

Resolves #35484

Concurrent execution of GitOps apply runs and
RecordPolicyQueryExecutions led to database locking issues when the
policy_membership table was large. This occurred because the cleanup
process (DELETE operations) was bundled within the same transaction as
the GitOps policy updates. To resolve this, the deletion logic has been
batched and moved outside the primary GitOps transaction, reducing lock
contention.

2026-03-16 15:12:25 -04:00

..

.keep

…

14276-post-json-redact-response-body

…

28091-vulnerabilities-cleanup

Added vulnerabilities cleanup cron (#41195)

2026-03-10 14:03:39 -05:00

31303-citrix-workspace-resolved-in-version

Reapply "Update Citrix Workspace CPE generation to distinguish betwee… (#41614)

2026-03-12 16:17:40 -07:00

31914-patch-policy

Feat/31914 patch policy (#41518)

2026-03-13 16:47:09 -04:00

31921-windows-profile-verification-without-osquery

…

32026-last-opened-time

Decrease last opened time diff (#40506)

2026-03-02 09:18:30 -07:00

33045-fleet-free-targetting-queries-by-label

Added license checks when targeting queries by label (33045) (#41255)

2026-03-09 16:54:53 -04:00

33421-ndes-windows

Added support for NDES CA for Windows hosts (#41356)

2026-03-12 15:36:44 -05:00

33427-batch-script-run-deleted-hosts-tooltip

…

33495-list-arch-linux-together

Trim ARM suffixes from arch linux OS names (#41656)

2026-03-13 12:14:22 -07:00

33714-inconsistent-use-of-hyphen-scripts-host-results-endpoint

Made Host Results endpoint URL consistent (33714) (#41501)

2026-03-13 14:00:26 -04:00

34068-software-install-retries

…

35024-normalize-links-buttons

Fleet UI: Clean up link styling (#41485)

2026-03-12 14:11:14 -04:00

35484-improve-policy_membership-contention

Improve contention around policy_membership table (35484) (#40853)

2026-03-16 15:12:25 -04:00

35528-wrong-title-platform

…

35799-software-titles

Optimized api/latest/fleet/software/titles endpoint (#40458)

2026-02-27 14:30:05 -06:00

35805-zero-host-counts

…

36032-eua-account-name

Add lock end user info migrations, API support and AccountConfiguration command updates (#40551)

2026-03-02 12:16:31 -05:00

36093-live-report-cross-team-targeting

Fix observer query bypass: prevent cross-team targeting (#40717)

2026-03-05 15:12:04 -03:00

36093-observer-query-bypass-followup

Follow-up changes to observer live query bypass (#41146)

2026-03-11 13:42:33 -03:00

36321-filevault-banner-hide-for-new-enrollments

Improve UI for FileVault "action required" notifications banner (#41594)

2026-03-16 11:21:25 -05:00

36682-orphan-mdm-command-refs

Log orphan MDM command references instead of returning 500 (#40877)

2026-03-09 09:54:14 -03:00

37092-idp-throttle

Added per-IP rate limiting and response caching (#41516)

2026-03-13 15:21:16 -05:00

37249-use-username-idp-email-for-maintenance-windows

Prioritize using IdP email address when available for maintenance window scheduling (#37250)

2026-02-27 14:57:43 -04:00

37802-fix-windows-fma-list

…

38254-new-app-categories-on-older-builds

Allow FMAs to be added when default categories don't exist (#38303)

2026-03-03 14:29:28 -05:00

38356-fix-pkg-metadata-extraction

Bugfix: ignore nested .app files in .pkg metadata extraction (#40851)

2026-03-03 12:33:31 -05:00

38366-contributor-flag-for-allowing-all-declarations

Skip MDM Declaration Validation logic with Configuration. (#38212)

2026-02-27 16:07:33 -05:00

38431-enforce-setup-experience-restrictions

…

38432-dont-allow-mai-without-bootstrap

don't allow manual_agent_install without bootstrap package (#40812)

2026-03-02 15:25:46 -05:00

38536-new-activity-bc

…

38585-ndes-selection

Fixed Microsoft NDES CA not being selectable (#41490)

2026-03-11 19:15:16 -05:00

38593-block-self-service-personal-enrollments

block self service on personal enrollments (#41054)

2026-03-06 10:23:15 -05:00

38611-remove-unused-var

Remove unused/confusing --mdm_apple_scep_signer_allow_renewal_days config (#40800)

2026-03-04 11:53:59 -05:00

38659-script-path-support

Add path support to script files (#40821)

2026-03-04 13:22:44 -05:00

38779-collect-fma-usage

…

38965-preserve-team-context

refactor path generation (#41126)

2026-03-06 12:11:37 -05:00

39150-cleanup-host-isssues-on-host-delete

clean up host_issues on host deletion (#40827)

2026-03-03 14:14:29 -05:00

39247-retry

retry software installer download and upload during gitops (#40643)

2026-02-27 14:05:15 -05:00

39308-team-ca-read-access

Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740)

2026-03-16 12:24:31 -05:00

39324-digicert-upn-host-isolation

…

39325-dropdown-bugginess

…

39465-transparency-url

…

39713-min-os-dep

Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)

2026-03-12 16:54:46 -05:00

39723-mac-recovery-lock-passwords

UI: Add ability to manually rotate Mac Recovery Lock passwords (#41420)

2026-03-11 14:01:56 -07:00

40007-mattermost-desktop-cpe

Fixed false positive vulnerabilities for Mattermost Desktop. (#41619)

2026-03-13 13:26:36 -05:00

40021-ubuntu-python-false-positive

…

40024-endpoint-to-create-android-webapp

Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329)

2026-03-02 15:14:19 -05:00

40036-windows-server-2025-vulns

Added vulnerability scanning support for Windows Server 2025 hosts (#41232)

2026-03-10 14:03:59 -05:00

40054-slog-2

…

40108-avoid-double-encoding-fleet-secrets

avoid double encoding $FLEET_SECRET in GitOps (#40866)

2026-03-03 14:14:58 -05:00

40260-5xx-on-scim-users-endpoint

Surface correct HTTP status on SCIM data constraint errors (40260) (#41530)

2026-03-13 13:22:10 -04:00

40284-android-certs

Modified Android certificate renewal logic to make it easier to test. (#40635)

2026-03-02 16:25:48 -08:00

40287-fix-certificate-details-modal-tooltip-alignment

Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)

2026-03-06 14:02:51 -03:00

40302-support-glob-for-scripts

Support globs in script paths in GitOps (#40799)

2026-03-02 22:18:36 -06:00

40327-filter

always show the filters and search bar (#41163)

2026-03-09 09:05:36 -04:00

40415-conditional-access-critical-policy-rework

Rework conditional access policy bypass conditions to use critical column (#40736)

2026-03-05 17:05:03 -05:00

40488-add-more-aliases

Add aliases for macos fields (#40959)

2026-03-05 18:08:54 -06:00

40489-reorder-host-columns

Reorder columns on Host page (#41180)

2026-03-07 17:32:59 -06:00

40496-detect-unknown-fields

Detect unknown keys in GitOps (phase 1) (#40963)

2026-03-06 16:16:17 -06:00

40564-otel-http-client

…

40607-copy-icon

Fixed table shifting left when clicking the copy hash icon (#41411)

2026-03-11 19:15:36 -05:00

40627-add-webhooks-and-tickets-enabled-flag

Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183)

2026-03-10 15:11:27 -05:00

40641-fix-arch-linux-rolling-tooltip-alignment

Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)

2026-03-06 14:02:51 -03:00

40642-add-new-fleet-saml-attribute-prefix

Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402)

2026-03-13 08:34:29 -05:00

40685-smallstep-proxy

…

40789-fix-select-all-header-checkbox

Fix select-all header checkbox not selecting rows in a specific case (#40940)

2026-03-04 11:39:04 -03:00

40790-fix-clear-idp-error-message

Update error message when clearing End Users settings while EUA is enabled (#41243)

2026-03-10 13:20:43 -03:00

40859-update-stored-results-ui

Update stored results setting UI (#40874)

2026-03-04 09:58:27 -06:00

40881-fix-stuck-setup-experience-with-scep-renewal

don't short circuit scep renewal if awaiting configuration (#41523)

2026-03-16 10:37:06 -05:00

40887-fix-file-permission-self-heal

Fix orbit crash loop on incorrect file permissions (#40887)

2026-03-06 17:41:31 -03:00

40900-allow-omitting-secrets-key-in-gitops

Allow secrets: key to be optional in GitOps (#40901)

2026-03-03 17:16:10 -06:00

40944-fix-gitops-policy-linked-to-software-with-env-var

Bugfix: gitops policy linked to software package with env var fails to apply (#40944)

2026-03-04 14:03:34 -05:00

41006-support-more-globs

Add glob support to more labels, policies and reports (#41141)

2026-03-09 15:39:13 -05:00

41012-allow-omitting-top-level-gitops-keys

Make most GitOps top-level optional (#41138)

2026-03-09 08:56:05 -05:00

41073-update-table-heading-styles

UI: Update table heading and result filter styles (#41072)

2026-03-06 17:41:28 -06:00

41074-add-fleet-columns-to-csv

Add fleet_id / fleet_name columns to CSV hosts export (#41446)

2026-03-11 11:38:07 -05:00

41091-update-multiplatform-keys

Add aliases for more multi-platform setup experience fields (#41599)

2026-03-13 15:17:05 -05:00

41111-fix-table-footer-rendering

Do not show table footer under Target specific hosts table (#41252)

2026-03-09 17:23:44 -03:00

41190-audit-log-entries

Don't clear past lock/wipe (#41504)

2026-03-13 15:21:24 -05:00

41225-cpe-matching-reserved-keywords

Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT) (#41226)

2026-03-10 14:03:25 -05:00

41239-dont-trigger-resend-on-device-mapping-if-no-changes

Don't resend profiles if IdP values do not change (41239) (#41662)

2026-03-13 14:16:07 -04:00

41532-ca-delete-error-message

Fixed error message when deleting a certificate authority (#41635)

2026-03-13 13:25:35 -05:00

41652-fix-reports-edit

Fixed editing reports on free tier failing due to triggering a premium license check (#41747)

2026-03-16 11:42:58 -03:00

41653-disallow-header-button-wraps

Disallow manage hosts page header buttons from wrapping text (#41654)

2026-03-13 09:02:40 -07:00

41663-duplicates

fix issue with duplicate entries in setup experience for FMAs (#41685)

2026-03-13 18:10:55 -04:00

41664-vulnerability-cron-db-contention

Reduced database contention during the vulnerability cron (#41667)

2026-03-14 09:31:58 -05:00

bump-mysql

Bump supported MySQL versions (#40892)

2026-03-04 12:25:20 -06:00

fix-end-user-auth-clear-form

Fix end user auth form: allow saving cleared IdP settings (#40424)

2026-02-27 17:09:54 -03:00

host-search-always-match-email

…

issue-38546-fix-mdm-page-update

fix issue where mdm page wasnt updating properly when turning off apple mdm (#40854)

2026-03-05 17:02:21 +00:00

issue-39184-apns-banner-fix

show apns expiration banner in UI for free tier (#40936)

2026-03-04 13:12:33 +00:00

issue-40684-no-resend-button

…

issue-40697-fix-os-setting-overflow

…