Victor Lyuboslavsky 774595f32e Porting fix from micromdm/scep (#38638) ...

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #38579

Porting this fix from upstream:
https://github.com/micromdm/scep/commit/a8623d6b71c383ed448ededb834401a014961e61

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
  - QA'd the change manually using micromdm/scep

2026-01-22 13:34:53 -06:00

..

.keep

…

27322-surface-queries-in-host-details

Surface queries in host details (#37646)

2026-01-02 10:06:12 -03:00

30691-remove-vpp-install-data-host-delete

Remove host's VPP install rows when removing host (#38344)

2026-01-22 13:04:11 -05:00

31256-fix-windows-app-custom-package-metadata

Bugfix: windows app custom package should not be named Microsoft AutoUpdate (#37913)

2026-01-07 13:29:25 -05:00

31292-no-bootstrap-during-migration

Skip bootstrap package install during migration (#37614)

2025-12-29 12:00:24 -04:00

31569-host-installs-in-library

Fix failed software installs showing for hosts in teams without the installer for those attempts (#38238)

2026-01-13 12:52:50 -05:00

31686-tweak-timeouts

Shorten software batch timeout, add keepalive to refresh timeout periodically during batch operations (#37641)

2026-01-12 12:19:40 -06:00

31916-retry-policy-automations

Automatic retry of failed policy automations of scripts and software installs (#38018)

2026-01-12 17:30:51 -06:00

31922-do-not-send-windows-profiles-atomically

Allow <Atomic> windows profiles (#38272)

2026-01-14 14:44:47 -05:00

32461-custom-vpp-apps

Add custom VPP app support (#37969)

2026-01-08 13:13:04 -06:00

32619-gitops

make generate-gitops export FMAs correctly (#38420)

2026-01-20 16:31:41 -05:00

32965-hash-package-name-filters

Add hash_sha256 and package_name filters (#38474)

2026-01-20 09:50:56 -05:00

32997-categories

send categories from gitops (#38294)

2026-01-14 11:04:02 -05:00

33005-macvim

created mac vim mapping software transformer (#38333)

2026-01-21 12:33:14 -06:00

33272-delete-software-pending-installs-nuance

Fleet UI: Clarify delete VPP app pending install nuance (#38376)

2026-01-20 12:49:18 -05:00

33405-abm-banner

Update UI banner to inform admins of need to accept terms and conditions for multiple Apple Business Manager accounts (#38031)

2026-01-08 11:10:47 -06:00

33512-empty-software-opened-at

Use empty values in software last_opened_at when not supported (#38007)

2026-01-08 11:36:06 -08:00

33522-executable-hashes

Compute, ingest, persist, and serve .app bundle executable hashes and paths (#38118)

2026-01-14 09:18:35 -08:00

33762-ability-to-set-alternative-browser-host

Ability to set fleet desktop alternative browser host in org settings (#38409)

2026-01-19 16:25:22 -04:00

33815-fix-missing-installer-from-inventory-after-wipe-reenroll

Bugfix: Fix query to ignore host_software_installs rows where host is deleted (#38250)

2026-01-14 08:32:30 -05:00

34124-sql-editor-disabled

Fleet UI: Update the read-only SQL editor to appear non-interactive (#37764)

2025-12-31 09:38:12 -05:00

34726-err-message

show error message (#38246)

2026-01-13 14:58:48 -05:00

34890-nats-logging-plugin

Add support for publishing logs to NATS. (#36527)

2026-01-06 09:10:32 -03:00

34960-better-error-message-for-user-scope-on-device-enrollments

Better error message for user scoped profile on iOS/iPadOS (#37542)

2026-01-02 09:52:13 -04:00

34962-profile-same-scope-error

Update error message for Apple profile scope conflict across teams (#37559)

2026-01-06 10:36:30 -06:00

35028-software-versions-search

Searching software versions by name will now return all versions that match the corresponding title name as well (#38103)

2026-01-09 17:02:33 -06:00

35086-fix-pkg-decoder-error

35086 use charset reader xar (#38459)

2026-01-16 17:19:20 -05:00

35192-imp-correct-classification

Differentiate between imp and Integrative Modeling Platform (#38396)

2026-01-20 16:39:50 -06:00

35454-auto-update-db-api

…

35455-schedule-updates

Add scheduled updates functionality to iOS/iPadOS managed devices (#37704)

2026-01-06 16:04:06 -03:00

35458-update-activitiy-for-software-update-schedule

Add auto-update schedule to software activity updates (#37715)

2026-01-06 10:52:26 -06:00

35459-software-auto-update-frontend

Auto software update frontend (#37677)

2026-01-05 10:43:26 -06:00

35565-ipa-cloudfront-signing

Cloudfront signing for in-house apps (#37650)

2026-01-05 16:30:31 -05:00

35567-validate-android-policy-struct-on-upload

validate android profile JSON on upload (#37756)

2025-12-30 12:10:06 -04:00

35941-auto-uninstall-managed-apps-ios-ipados

UMA: update management flags for ios/ipados vpp and ipa installs (#37734)

2026-01-05 12:15:38 -05:00

36069-fix-patch-categories-software-installer

Bugfix: patch categories for software installer (#38334)

2026-01-20 09:39:13 -05:00

36324-fix-permission-issue-custom-software-installer-icon

Custom software installer icons: fix permission issue (#38326)

2026-01-14 16:24:05 -05:00

36541-missing-vpp-version-add-software

Fleet UI: Show VPP version for software setup (#38412)

2026-01-15 21:33:52 -05:00

36621-harmonize-installer-conflict-error-messages

IPA: validate conflicts with other installers, return proper error (#38005)

2026-01-13 10:30:03 -05:00

36644-randomize-apns-query

randomize APNS query (#38222)

2026-01-13 13:06:33 -05:00

36652-okta-ca

Updated NDES SCEP proxy to auto-detect response encoding (#37873)

2026-01-06 10:47:34 -06:00

36702-fix-fleetctl-config-help

Fix fleetctl config help display for missing arguments (#37769)

2026-01-08 09:55:18 -05:00

36724-vpp-app-install-retry

VPP app install retry on 9610 (#38008)

2026-01-09 13:39:10 -05:00

36770-limit-process-dep-cooldowns

limit DEP cooldowns to sync limit and order by oldest first (#38535)

2026-01-21 09:25:55 -05:00

36862-fix-flash-message-link-color

Fleet UI: Fixed hover color of links in error flash messages (#38634)

2026-01-22 11:25:21 -05:00

37003-bootstrap-pkg-ui

Update UI for Controls > Setup experience > Bootstrap package to fix inconsistent styling (#37868)

2026-01-06 10:37:00 -06:00

37008-manual-agent-install-only-blocks-macos-se-software

manual agent install should only block macOS SE software (#38434)

2026-01-20 11:37:39 -05:00

37009-setup-exp-android-ui

Fix loading state for Android setup experience UI (#37907)

2026-01-07 11:54:15 -06:00

37192-refactor-endpoint_utils

Moved common endpointer packages to platform dir. (#37780)

2026-01-06 14:23:07 -06:00

37244-refactor-common_mysql

Moved common_mysql package to server/platform/mysql (#38017)

2026-01-08 13:17:19 -06:00

37264-gitops-fma-icons

Use custom icons in GitOps for Fleet Maintained Apps (#38497)

2026-01-20 11:56:40 -05:00

37271-use-writer-when-linking-scim-data

Fix issue linking SCIM data to newly-enrolled hosts (#38408)

2026-01-16 14:11:51 -06:00

37278-okta-fail-my-device-page

Redirect to my device page if device fails okta cond. access (#38342)

2026-01-15 11:02:35 -05:00

37290-fix-xcode-vpp-verification

Bugfix: apply a special-case for Xcode VPP app verification (#38539)

2026-01-21 17:16:13 -05:00

37397-byod-idevices-software-ingestion

iBYOD Apps: only ingest and report Fleet-managed apps for manual-enrolled iOS/iPadOS (#37856)

2026-01-06 10:50:47 -05:00

37464-installer-size

Bump installer max size, make configurable (#38122)

2026-01-19 13:36:01 -06:00

37508-gitops-team-software-display_name

GitOps: Allow team yml to apply display_name to software package (#38364)

2026-01-20 09:32:25 -05:00

37597-ignore-build-version-compare

Fleet UI: Strip build from compareVersion x.x (build x.x) (#38433)

2026-01-16 10:59:46 -05:00

37602-fix-vpp-versions-refresh

…

37686-rollback-legacy-device-id-ingestion

Rollback Entra legacy 'device ID' ingestion (#37687)

2026-01-05 13:28:43 -03:00

37710-package-parsing

Compare pkg-info bundle id with bundles in pkg parsing (#38577)

2026-01-21 13:43:38 -05:00

37806-fleet-activities

Activity bounded context: /api/latest/fleet/activities (1 of 2) (#38115)

2026-01-19 09:07:14 -05:00

38094-ability-to-set-alternative-browser-host

Ability to set fleet desktop alternative browser host in org settings (#38409)

2026-01-19 16:25:22 -04:00

38096-alternative-browser-host-gitops

Alternative browser host gitops (#38516)

2026-01-21 10:12:48 -04:00

38205-remove-incorrect-eua-warning-for-macos

gate orbit enrollment to windows/linux only (#38207)

2026-01-14 08:41:50 -06:00

38369-ui-mdm-commands-off

Hide host MDM commands activity UI when MDM is turned off (#38394)

2026-01-16 11:03:22 -06:00

38452-display-name

move deletion into block that only executes when the package itself changes (#38595)

2026-01-21 16:59:40 -05:00

38473-add-ipad-screenshot-in-lock-modal

Display iPad screenshot in lock modal (#38475)

2026-01-20 13:26:01 +01:00

38479-otel-shutdown

Improved OpenTelemetry tracing (#38483)

2026-01-20 12:22:20 -06:00

38557-read-users

Global observers and maintainers can now officially read user details (#38558)

2026-01-21 13:55:10 -06:00

38579-micromdm-scep-fix

Porting fix from micromdm/scep (#38638)

2026-01-22 13:34:53 -06:00

add-trusted-proxies-config

Implement trusted proxies config (#38471)

2026-01-19 22:13:37 -06:00

fix-query-author-styles

…

fix-vpp-displayVersion-with-spaces

Trim spaces in VPP app versions (#38236)

2026-01-13 13:59:48 -03:00

issue-32110-new-err-message-license-ca-gitops

Improved error message when trying to apply CAs via gitops without a premium license (#37981)

2026-01-08 11:07:38 +00:00

issue-33291-fix-issues-abm-token-banner

Fix expired abm token banner and tooltip (#37898)

2026-01-07 11:54:52 +00:00

issue-36935-better-message-error-token

improve err message when getting android enrollment token during ota enrollment (#38428)

2026-01-16 16:43:19 +00:00

issue-37371-not-now-status

handle NotNow status from device so that it does not block the DEP setup experience flow (#38319)

2026-01-21 15:14:57 +00:00

issue-37832-alignment-host-status-tag

update alignment and styles of host status tag (#37832)

2026-01-06 14:09:09 +00:00