fleet

.keep

…

4842-search-public-ip

…

16770-mfa-token-race

Make MFA token redemption atomic to prevent multiple sessions

2026-07-23 09:52:07 -04:00

16771-gitops-team-secret-leak

Mask team enroll secrets in team write responses (#49422 )

2026-07-17 16:45:40 -04:00

16773-query-pack-metadata-leak

Authorize packs before returning them in query responses (#50148 )

2026-07-29 13:35:47 -03:00

16774-setup-experience-script-activities

Emit created/deleted activities for setup experience scripts

2026-07-23 06:41:51 -04:00

16775-device-policies-device-safe

Scrub device policy responses in Fleet Desktop (#50094 )

2026-07-29 09:34:31 -03:00

16778-scim-deprovisioning-mutated-identifiers

Fix SCIM deprovisioning edge case during user deactivation

2026-07-21 11:33:08 -04:00

16779-secret-variable-spec-activities

Added audit activities when secret variables are upserted

2026-07-16 18:54:04 -04:00

16783-sso-invite-password-acceptance

Harden user creation from invite

2026-07-22 07:29:15 -04:00

16788-race-condition-one-time-installer-token

Fix race condition in one-time software installer download token

2026-07-21 11:33:46 -04:00

16789-modify-label-atomic-membership

Fix label update consistency issue

2026-07-23 06:41:07 -04:00

16793-scim-forbidden-last-request

Fix SCIM middleware persisting authorization failures to last_request

2026-07-21 11:32:36 -04:00

16794-login-password-oracle-mfa

Normalize login responses for MFA-enabled accounts

2026-07-23 06:41:27 -04:00

16799-password-reset-token-race

Harden password reset token handling

2026-07-22 12:46:16 -04:00

16800-reject-empty-enroll-secrets

Block host enrollment with empty enroll secrets

2026-07-24 10:29:46 -04:00

16880-windows-tos-redirect-uri-xss

Added redirect_uri validation for Windows TOS endpoint. (#49699 )

2026-07-22 09:24:40 -05:00

20413-apple-hardware-marketing-names

Add Apple marketing names to backend, frontend, and an osquery table (#46482 )

2026-07-27 22:26:30 -03:00

23242-apple-byod-enrollment-permissions

…

25217-turn-off-mdm-offline-macos

Enable "Turn off MDM" button for offline macOS devices (#46651 )

2026-07-07 11:20:45 -05:00

25574-splunk-log-destination

Add native Splunk HEC log destination (#48455 )

2026-07-03 12:14:24 -04:00

28108-multiple-custom-packages

add changes

2026-07-10 14:37:59 -04:00

31294-windows-host-certificates

Show certificates on host details page for Windows (#31294 ) (#48469 )

2026-07-06 20:28:21 +01:00

34368-searchable-fleets-dropdown

Fleet UI: Searchable fleets dropdown with add-fleet affordance (#49690 )

2026-07-23 07:26:04 -07:00

34591-add-cachyos-support

Add CachyOS support (#47757 )

2026-07-03 10:28:08 -03:00

34984-spinner-elevated-background

Fleet UI: Remove elevated background on loading spinner (#49289 )

2026-07-15 06:56:32 -07:00

35075-android-os-versions-vulnerabilities

Software > OS: Show Android versions and vulnerabilities (#49399 )

2026-07-16 10:37:57 -04:00

35328-update-text-link-styles

Update CustomLink styles (#48838 )

2026-07-13 17:07:39 +02:00

37972-improve-settings-subnav

Show individual settings sections in user menu (#48197 )

2026-07-16 06:34:46 -05:00

38214-clarify-vitals-refetch-timeout-banner

Update host vitals refresh error banner (#49526 )

2026-07-17 14:53:00 -07:00

38214-improve-ux-delayed-host-vitals-refetch

Update the refetching host error banner to reflect uncertainty (#49382 )

2026-07-16 08:47:55 -07:00

38806-macos-iosipados-rename-hosts

macOS & iOS/iPadOS: Rename hosts

2026-07-14 10:28:19 -04:00

38874-macos-enroll-url

Add /enroll URL for macOS in Add hosts modal (#47528 )

2026-07-07 11:18:45 -05:00

38986-support-ddm-assets

SAAD: Support DDM assets in sync + reconciliation (#49016 )

2026-07-10 14:47:23 +02:00

39346-certificates-list

Controls > OS settings > Certificates: View certificates (#48460 )

2026-07-08 09:59:20 -06:00

39987-clarify-not-supported-tooltips

Clarify "Not supported" on Hosts page by adding tooltip (#49301 )

2026-07-28 10:30:21 -07:00

40410-consistent-form-validation-onblur.md

Consistent URL/email on-blur validation across forms (#40410 follow-up) (#49932 )

2026-07-28 13:23:48 -04:00

40410-webhook-url-validation-onblur.md

Add onURLBlur handler for InputField (#48854 )

2026-07-07 11:52:35 -04:00

40639-non-proxied-cert-renewal

Docs: non-proxied cert renewal (#45695 )

2026-07-10 17:37:50 -05:00

41056-remove-windows-sts-auth-endpoint.md

Removed the unused /api/mdm/microsoft/auth Windows MDM STS endpoint (#48734 )

2026-07-06 20:29:05 +01:00

41470-python-script-only-packages

Allow Python script-only packages (#49070 )

2026-07-16 14:20:03 -04:00

41790-citrix-ltsr-cumulative-updates

…

42473-sso-button-overflow

…

42827-macos-mdm-certificate-ingestion

Docs: non-proxied cert renewal (#45695 )

2026-07-10 17:37:50 -05:00

43097-more-detailed-error-without-server-private-key

Surface a more detailed error message if user doesn't have server_private_key configured (#49238 )

2026-07-14 11:52:15 -07:00

43328-python3-prefix-cpe

Fix CPE matching for python3-prefixed packages on Ubuntu/Debian (#48599 )

2026-07-13 09:46:49 -04:00

43379-windows-mdm-end-user-experience-labels

Update Windows MDM end user experience language (#47635 )

2026-07-09 06:07:30 -05:00

43518-enable-disk-encryption-bitlocker

Add FLEET_MDM_ENABLE_DISK_ENCRYPTION alias for custom BitLocker profiles (#43518 ) (#48737 )

2026-07-06 22:38:45 +01:00

44199-embedded-bundle-title-name

Fix macOS software titles mis-named from embedded helper bundles (#44199 ) (#47831 )

2026-07-09 10:01:27 -06:00

44352-500-error-page

Update 404 and 500 error pages (#48826 )

2026-07-07 10:54:26 -03:00

44406-windows-fma-title-matching

Match Windows software with version in name to FMA software title

2026-07-30 09:49:52 -04:00

44428-tpm-backed-disk-encryption.md

escrow snapd TPM-backed FDE recovery keys from orbit (#48452 )

2026-07-07 16:25:20 -04:00

44624-policies-automations-filter-unassigned

Fix Policies automations filter disappearing for the Unassigned fleet (#49224 )

2026-07-13 15:58:53 -03:00

44800-ollama-resolved-in-version

Add resolved-in-version override for CVE-2025-63389 on Ollama (#48525 )

2026-07-07 16:24:41 -04:00

44954-custom-host-vitals.md

44954 custom host vitals (#49334 )

2026-07-15 19:35:27 -03:00

45524-macos-password-sync

macos password sync feature branch (#47422 )

2026-07-09 14:57:48 -04:00

45550-surface-windows-scep-proxy-failures.md

Surface proxied Windows SCEP certificate failures (#45550 ) (#48842 )

2026-07-09 07:38:47 +01:00

45650-windows-mdm-command-results-insert-perf.md

Improved the performance of Windows MDM profile installation (#48733 )

2026-07-06 18:34:10 +01:00

45682-cache-control-static-assets

…

45710-zorin-os-support

Add Zorin OS as a recognized Linux platform (#45712 )

2026-07-06 13:00:10 -03:00

45729-self-service-show-version

Add installed and available versions to self-service (#47526 )

2026-07-16 06:33:05 -05:00

46057-vpp-tokens-maintainer-authz

Fix App Store picker 403 for non-admin roles (#48856 )

2026-07-07 16:15:58 -04:00

46077-newly-created-reports-do-not-show-up

Refresh reports list cache after report create/update (#49402 )

2026-07-16 10:46:35 -03:00

46193-duplicate-patch-policy-gitops-check

Add duplicate patch policy check to GitOps (#48896 )

2026-07-07 16:08:23 -04:00

46235-dep-syncer-cursor-not-advanced-on-callback-error

46235 dep profile assigner context cancelled (#48473 )

2026-07-06 14:16:14 +01:00

46282-handle-client-error-decoding-errors

handle client error decoding errors in ACME urls (#49137 )

2026-07-10 12:31:17 -04:00

46380-ndes-error-location

Fix NDES invalid credentials error to point to correct settings location (#49298 )

2026-07-15 12:34:59 -04:00

46387-windows-mdm-enrollment-auth-error

…

46399-query-errors-can-cause-label-membership-unassigned.md

Fix label membership being cleared when a label query errors (#49403 )

2026-07-20 10:31:09 -03:00

46644-bypass-end-user-auth

Flag to bypass end user auth (#49683 )

2026-07-22 15:32:58 -05:00

46811-citrix-workspace-cpe

…

46837-fleet-variables-in-scripts

Add support for fleet vars in scripts(controls scripts, software scripts/script-only packages and setup experience scripts) (#49781 )

2026-07-27 11:24:42 +02:00

46959-fpsso-configure-ui

46959 Add Account Provisioning settings to UI for FPSSO configuration (#47655 )

2026-07-10 16:19:47 -04:00

46965-time-ago-timestamps-use-days

Time ago timestamps: use days instead of months when under 90 days (#48964 )

2026-07-08 15:07:48 -03:00

46973-setup-experience-icon-alignment.md

Center-align setup experience app icons (#49962 )

2026-07-27 19:42:22 +05:30

47290-long-fleet-name-ui

Fleet UI: Handle long fleet names across the Fleets UI (#49216 )

2026-07-24 11:22:06 -04:00

47303-redis-moved-errors-query-results-counts

Fix Redis MOVED errors from query results counts in cluster mode

2026-07-02 07:37:42 -04:00

47388-getclientconfig-nil-map-panic

Fix panic in GetClientConfig with null agent options config (#47388 ) (#48584 )

2026-07-02 11:17:04 -03:00

47430-specific-API-endpoints-search-improvements

Fix Add API-only user > Specific API endpoints table search (#49613 )

2026-07-22 08:10:02 -07:00

47488-render-mysql-version

…

47492-windows-scep-challenge-failed-profile

Windows SCEP profiles now fail with non-printable chars (#49887 )

2026-07-27 12:49:14 -05:00

47530-my-device-policy-click-highlight

Fleet UI: Remove blue click flash on clickable table rows (#49228 )

2026-07-14 07:47:28 -07:00

47626-use-generated-uuid-for-mdm_idp_account

Use generated UUID for mdm_idp_account table on Linux and Windows (#49215 )

2026-07-13 14:43:39 -03:00

47633-release-ab-device

Release from AB backend support (#49680 )

2026-07-22 20:01:41 +02:00

47661-hosts-online-chart-include-mobile-by-default

Include mobile hosts by default in "Hosts online" chart (#48769 )

2026-07-08 11:38:26 -05:00

47683-windows-mdm-fleetd-install-ordering

…

47699-entra-conditional-access-self-hosted

Allow Microsoft conditional access on premium self-hosted (#49414 )

2026-07-17 10:59:32 -03:00

47700-abm-token-invalid-dep-error

47700 abm token invalid errors (#49770 )

2026-07-27 10:35:27 +01:00

47722-host-device-mapping-reader-load

…

47832-filevault-escrow-banner-ade-copy

Update macOS disk encryption banner copy for ADE-enrolled hosts

2026-07-28 15:33:26 -04:00

47922-fix-jumping-symbol

Disable Inter contextual alternates in input fields (#49358 )

2026-07-15 16:37:51 -04:00

47943-premium-calls-on-fleet-free

Stop premium calls on Fleet free (#49118 )

2026-07-10 15:42:15 +02:00

47963-enroll-500-os-updates-settings-not-found

Fix 500 on Apple MDM enroll when host has no DEP assignment (#47963 ) (#49623 )

2026-07-22 09:18:57 -05:00

48003-trim-whitespace-mdm-sso

trim MDM SSO whitespace in GitOps and API (#49378 )

2026-07-22 19:19:48 +02:00

48054-fma-duplicate-software-titles

Fix GitOps creating duplicate software titles (#48664 )

2026-07-02 19:16:28 -04:00

48077-observer-managed-account-action.md

Show managed account host action for observers (#48748 )

2026-07-07 14:38:50 +02:00

48102-fix-msix-detecting-as-ipa

Differentiate between ipa and other zip file types in ExtractInstallerMetadata (#48802 )

2026-07-06 18:18:16 -04:00

48125-tooltip-not-showing-idp

Tooltips not always showing for full name (IdP) (#49116 )

2026-07-10 15:42:39 +02:00

48129-404-page

Update 404 and 500 error pages (#48826 )

2026-07-07 10:54:26 -03:00

48177-rename-create-buttons-to-add

Rename "Create" buttons and links to "Add" across the Fleet UI (#48284 )

2026-07-01 15:04:12 -05:00

48217-fix-icon-text-gap

fix icon text gap across product (#50209 )

2026-07-30 14:21:08 +02:00

48226-gitops-android-mdm-buttons

Gitops mode disables android MDM connect and turn off buttons (#49685 )

2026-07-22 11:31:27 -04:00

48229-inconsistent-font-size-tooltip

inconsistent font size tooltip (#49121 )

2026-07-10 15:46:42 +02:00

48252-redirect-software-title-404-on-fleet-switch

Redirect to software inventory on 404 when switching fleets on title (#48389 )

2026-07-28 13:58:55 -07:00

48314-updated-missed-abm-references

update missed ABM references (#49027 )

2026-07-09 18:00:06 +02:00

48340-windows-config-profiles-summary-scale

Improved the performance of the configuration profiles status summary (#48873 )

2026-07-23 11:59:37 -05:00

48342-edit-config-profile-endpoint

48342 edit config profile endpoint (#49141 )

2026-07-21 08:20:03 -04:00

48349-windows-batch-modify-async

Fixed Windows profile modify batch (#48474 )

2026-07-07 16:29:53 +01:00

48379-android-serial-hosts-page

Show managed Android serial number on Hosts page (#49711 )

2026-07-21 16:50:46 -04:00

48448-remove-bomutils-docker

Drop Docker fleetdm/bomutils dependency in fleetctl when generating pkg fleetd installers (#48915 )

2026-07-15 10:14:57 -03:00

48485-hide-install-all-on-all-category

Supress install all for all/undefined software category (#48999 )

2026-07-13 10:51:12 -04:00

48486-scep-renew

Fix re-enrollment with pending SCEP(and ACME) renewals (#48661 )

2026-07-07 09:26:14 -04:00

48497-cron-interrupted-run-status

Fix cron jobs stuck in "expired" when a run is interrupted mid-flight

2026-07-02 07:38:11 -04:00

48531-dark-mode-hover-state

Fix invisible hover state in dark mode (#49001 )

2026-07-10 12:48:12 -04:00

48542-table-reload-on-window-focus

Fix tables losing row selection on window focus (#48742 )

2026-07-13 13:10:33 -03:00

48567-user-scoped-declarations

Add user-scoped declaration support (#48796 )

2026-07-07 13:15:14 -04:00

48614-hide-empty-self-service-categories

Hide empty self-service categories on My device page (#48614 ) (#48619 )

2026-07-07 17:05:38 +02:00

48641-policies-empty-page-after-delete

Return to previous page when the last policy on a page is deleted (#48683 )

2026-07-08 13:14:14 -03:00

48653-empty-ab-when-only-updated-via-ui

create new appCfg entry on AB fleet updates if not found (#49559 )

2026-07-21 21:33:36 +02:00

48685-mdm-enrolled-host-usage-stats

Added anonymous usage statistics reporting the number of macOS and Windows hosts enrolled in Fleet's MDM (#48840 )

2026-07-07 19:22:31 +01:00

48689-firefox-developer-edition-cpe.md

Generate CPE for Firefox Developer Edition on macOS

2026-07-22 08:04:38 -04:00

48719-49805-software-ingestion-perf

Fix software ingestion lock convoys and unbatched deletes (#49894 )

2026-07-24 15:46:14 -04:00

48752-windows-reserved-locuri-scopeless-bypass

Fix Windows CSP bypass issue (#48843 )

2026-07-08 14:38:10 +01:00

48792-actions-dropdown-layout-shift

48792 fix actions dropdown layout shift (#49430 )

2026-07-28 13:56:50 -07:00

48845-dont-reconcile-profiles-for-non-mdm-enrolled-hosts

Don't queue profiles for non host_mdm.enrolled Apple hosts (#49611 )

2026-07-21 21:33:29 +02:00

48883-nano-queue-index

Add better index to nano_enrollment_queue (#48865 )

2026-07-10 15:51:14 -04:00

48914-ab-toast-org-name.md

Show ABM organization name in edit-fleets success toast (#49877 )

2026-07-24 13:30:57 +05:30

48948-delete-cert-modal-overflow

Fix long certificate name overflow in delete certificate modal (#48948 ) (#49019 )

2026-07-10 06:40:30 -06:00

48951-certificate-ca-dropdown-scep-only

Filter Add certificate CA dropdown to custom SCEP only (#49020 )

2026-07-10 11:14:28 -06:00

48960-android-os-updates-mdm-message

Clarify which OS supports OS Updates (#49716 )

2026-07-22 10:48:28 -04:00

48965-escrow-requires-fleet-mdm.md

Require Fleet MDM enrollment before escrowing macOS disk encryption key (#50042 )

2026-07-29 14:01:35 +05:30

48987-vulnerabilities-tooltip

Fleet UI: Show tooltip for truncated vulnerabilities list in Update details modal (#49236 )

2026-07-13 15:37:07 -07:00

49134-windows-esp-user-release-retry

Fix Windows Autopilot ESP hang: gate release on user-scope ack (#49134 ) (#49542 )

2026-07-21 09:03:54 -05:00

49260-swupdate

Speculative fix for iOS/iPadOS enrollment w/ required sw update (#49280 )

2026-07-15 17:52:57 -07:00

49276-secondary-subdued-button-styles

Clear button styles (#49292 )

2026-07-23 07:11:59 -05:00

49297-free-tier-linux-summary-cards

Fleet UI: Restore dashboard cards hidden despite the API returning their data (#49349 )

2026-07-15 13:22:13 -07:00

49329-windows-discovery-request-version

Windows MDM: accept discovery RequestVersion >= 4.0 (#49329 ) (#49380 )

2026-07-15 17:42:22 -07:00

49346-setup-experience-account-type-default.md

Default setup experience account type to admin when serving team config (#50034 )

2026-07-28 20:04:41 +05:30

49421-android-custom-host-vitals

Add Android support for custom host vitals (#49696 )

2026-07-29 08:22:57 -03:00

49474-fix-patch-policy-query-not-updating

Fix FMA pinning not changing patch policy (#49519 )

2026-07-17 19:00:13 -04:00

49475-failed-installs-reported-successful

Fix false-success reporting for failed software installs (#49515 )

2026-07-17 17:59:14 -04:00

49489-custom-host-vitals-in-name-templates

Support custom host vitals in host name templates (#49586 )

2026-07-22 09:38:24 -03:00

49495-stale-fma-installer-version

Redirect FMA installs to the active version after auto-update (#49525 )

2026-07-18 06:01:45 -04:00

49682-firefox-esr-conflict-message

Add clear error for Firefox / Firefox ESR conflict (#49714 )

2026-07-23 12:39:17 -04:00

49734-checkbox-radio-help-text-alignment

Align helper text with checkbox/radio labels (#49977 )

2026-07-27 08:07:54 -06:00

49756-revert-scep-challenge-printable-validation

Reverting printableCharacters SCEP validation (#49758 )

2026-07-22 13:46:47 -05:00

49777-mdm-enrolled-host-id-apple.md

Add host_id and host_serial to Apple mdm_enrolled activity (#49969 )

2026-07-28 14:27:42 +05:30

49811-fma-installing-wrong-version

Fix gitops not updating FMA installer (#50000 )

2026-07-29 10:00:16 -04:00

50001-android-refetch-tooltip

Add tooltip explaining missing Refetch button for Android hosts (#50017 )

2026-07-27 15:39:22 -07:00

add-missing-error-fma-dynamic-policy

Fix fleet_maintained_app_slug being allowed in a dynamic policy (#49034 )

2026-07-09 13:17:03 -04:00

allow-network-blocking-bypass-in-prod

Allow bypassing network blocking in production via config (#49747 )

2026-07-22 13:23:21 -03:00

api-endpoints-add-reports-run

Add POST /reports/run to the API endpoints catalog (#48790 )

2026-07-07 09:59:12 -03:00

batch-extension-label-check

Batch extension label-membership checks in GetOrbitConfig (#49154 )

2026-07-15 09:55:54 -04:00

bug-16902-msi-memory-amplification

Fix resource exhaustion in MSI metadata parser (#49739 )

2026-07-28 12:26:40 -04:00

cache-pack-config-json

Cache pack config JSON per team to reduce redundant marshaling (#48702 )

2026-07-13 13:51:02 -04:00

cis-win10-benchmark-v4

Update Windows 10 CIS benchmark policies to v4.0.0 (#48986 )

2026-07-13 12:52:38 -04:00

fix-48277-live-results-translate-crash

Fix live results error page from browser auto-translate (#48277 ) (#48705 )

2026-07-06 09:19:56 -03:00

fix-49438-issues-count-text-cursor

Fleet UI: Drop I-beam cursor on non-underlined tooltips (#49859 )

2026-07-24 07:01:48 -07:00

fix-49441-free-tier-empty-summary-card

Fleet UI: Hide empty host summary card on Free-tier Android hosts (#49848 )

2026-07-23 12:54:18 -07:00

fix-chart-api-only-enforcement

Enforce API-only endpoint restrictions on chart routes (#49477 )

2026-07-23 10:44:13 -04:00

fix-delete-host-response-mismatch

Stop the delete host endpoint from revealing out-of-fleet host existence (#49645 )

2026-07-22 11:12:16 -03:00

fix-enroll-page-styling

Fix enroll page and Add hosts modal styling issues (#48968 )

2026-07-14 17:32:04 -07:00

fix-hosts-software-title-filter-response

Stop leaking cross-team software title names via the hosts endpoint (#49638 )

2026-07-24 10:39:13 -03:00

fix-macos-software-memory-recursive-cask-glob

Fix performance regression in software_macos query (#48649 )

2026-07-03 11:04:30 -03:00

fix-stream-campaign-results-existence-leak

Stop leaking live query campaign existence via the websocket results stream (#50210 )

2026-07-30 12:01:39 -03:00

fix-undeletable-ddm-declarations.md

Fix undeletable Apple DDM declarations when allowed types change (#49810 )

2026-07-24 11:10:38 +05:30

friendly-base64-error-mobileconfig

Better error message: Configuration profiles has characters that need escaping (#40073 )

2026-07-02 14:32:49 -05:00

gitops-windows-profiles-mdm-state

…

missing-keyboard-accessibility-os-settings

Fix resend button not showing on keyboard navigation in OS settings modal (#49728 )

2026-07-22 16:12:29 +02:00

my-device-applications-filter

Add macOS app filter to My device software (#48637 )

2026-07-13 09:08:26 -05:00

normalize-locuri-validation

Normalize LocURI values before validation in Windows profiles (#49708 )

2026-07-21 17:20:53 -04:00

optimize-query-aggregated-stats

Optimize query aggregated stats cron to skip queries without execution data (#48698 )

2026-07-03 13:29:49 -04:00

policies-targeted-platforms-filter

Add Targeted platforms column and platform filter to Policies page (#44125 )

2026-07-10 13:32:16 -05:00

scim-admin-only-access

Restrict SCIM endpoints to global admin only (#48858 )

2026-07-10 11:53:48 -04:00

scim-idp-associate-all-matching-hosts

…

stale-policy-membership-cleanup.md

Cleanup policy_membership stale entries in distributed/write (#48674 )

2026-07-03 14:12:08 -03:00