fleet

T

dependabot[bot] a617be90b6 Bump webpack from 5.94.0 to 5.105.0 in /ee/fleetd-chrome (#39451 )

Bumps [webpack](https://github.com/webpack/webpack) from 5.94.0 to
5.105.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/releases">webpack's
releases</a>.</em></p>
<blockquote>
<h2>v5.105.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>Allow resolving worker module by export condition name when using
<code>new Worker()</code> (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20353">#20353</a>)</p>
</li>
<li>
<p>Detect conditional imports to avoid compile-time linking errors for
non-existent exports. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20320">#20320</a>)</p>
</li>
<li>
<p>Added the <code>tsconfig</code> option for the <code>resolver</code>
options (replacement for <code>tsconfig-paths-webpack-plugin</code>).
Can be <code>false</code> (disabled), <code>true</code> (use the default
<code>tsconfig.json</code> file to search for it), a string path to
<code>tsconfig.json</code>, or an object with <code>configFile</code>
and <code>references</code> options. (by <a
href="https://github.com/alexander-akait"><code>@alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20400">#20400</a>)</p>
</li>
<li>
<p>Support <code>import.defer()</code> for context modules. (by <a
href="https://github.com/ahabhgk"><code>@ahabhgk</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20399">#20399</a>)</p>
</li>
<li>
<p>Added support for array values to the <code>devtool</code> option.
(by <a href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20191">#20191</a>)</p>
</li>
<li>
<p>Improve rendering node built-in modules for ECMA module output. (by
<a href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20255">#20255</a>)</p>
</li>
<li>
<p>Unknown import.meta properties are now determined at runtime instead
of being statically analyzed at compile time. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20312">#20312</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Fixed ESM default export handling for <code>.mjs</code> files in
Module Federation (by <a
href="https://github.com/y-okt"><code>@y-okt</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20189">#20189</a>)</p>
</li>
<li>
<p>Optimized <code>import.meta.env</code> handling in destructuring
assignments by using cached stringified environment definitions. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20313">#20313</a>)</p>
</li>
<li>
<p>Respect the <code>stats.errorStack</code> option in stats output. (by
<a
href="https://github.com/samarthsinh2660"><code>@samarthsinh2660</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20258">#20258</a>)</p>
</li>
<li>
<p>Fixed a bug where declaring a <code>module</code> variable in module
scope would conflict with the default <code>moduleArgument</code>. (by
<a href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/20265">#20265</a>)</p>
</li>
<li>
<p>Fix VirtualUrlPlugin to set resourceData.context for proper module
resolution. Previously, when context was not set, it would fallback to
the virtual scheme path (e.g., <code>virtual:routes</code>), which is
not a valid filesystem path, causing subsequent resolve operations to
fail. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20390">#20390</a>)</p>
</li>
<li>
<p>Fixed Worker self-import handling to support various URL patterns
(e.g., <code>import.meta.url</code>, <code>new
URL(import.meta.url)</code>, <code>new URL(import.meta.url,
import.meta.url)</code>, <code>new URL(&quot;./index.js&quot;,
import.meta.url)</code>). Workers that resolve to the same module are
now properly deduplicated, regardless of the URL syntax used. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20381">#20381</a>)</p>
</li>
<li>
<p>Reuse the same async entrypoint for the same Worker URL within a
module to avoid circular dependency warnings when multiple Workers
reference the same resource. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20345">#20345</a>)</p>
</li>
<li>
<p>Fixed a bug where a self-referencing dependency would have an unused
export name when imported inside a web worker. (by <a
href="https://github.com/samarthsinh2660"><code>@samarthsinh2660</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20251">#20251</a>)</p>
</li>
<li>
<p>Fix missing export generation when concatenated modules in different
chunks share the same runtime in module library bundles. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20346">#20346</a>)</p>
</li>
<li>
<p>Fixed <code>import.meta.env.xxx</code> behavior: when accessing a
non-existent property, it now returns empty object instead of full
object at runtime. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20289">#20289</a>)</p>
</li>
<li>
<p>Improved parsing error reporting by adding a link to the loader
documentation. (by <a
href="https://github.com/gaurav10gg"><code>@gaurav10gg</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20244">#20244</a>)</p>
</li>
<li>
<p>Fix typescript types. (by <a
href="https://github.com/alexander-akait"><code>@alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20305">#20305</a>)</p>
</li>
<li>
<p>Add declaration for unused harmony import specifier. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20286">#20286</a>)</p>
</li>
<li>
<p>Fix compressibility of modules while retaining portability. (by <a
href="https://github.com/dmichon-msft"><code>@dmichon-msft</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20287">#20287</a>)</p>
</li>
<li>
<p>Optimize source map generation: only include <code>ignoreList</code>
property when it has content, avoiding empty arrays in source maps. (by
<a href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/20319">#20319</a>)</p>
</li>
<li>
<p>Preserve star exports for dependencies in ECMA module output. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20293">#20293</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md">webpack's
changelog</a>.</em></p>
<blockquote>
<h2>5.105.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>Allow resolving worker module by export condition name when using
<code>new Worker()</code> (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20353">#20353</a>)</p>
</li>
<li>
<p>Detect conditional imports to avoid compile-time linking errors for
non-existent exports. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20320">#20320</a>)</p>
</li>
<li>
<p>Added the <code>tsconfig</code> option for the <code>resolver</code>
options (replacement for <code>tsconfig-paths-webpack-plugin</code>).
Can be <code>false</code> (disabled), <code>true</code> (use the default
<code>tsconfig.json</code> file to search for it), a string path to
<code>tsconfig.json</code>, or an object with <code>configFile</code>
and <code>references</code> options. (by <a
href="https://github.com/alexander-akait"><code>@alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20400">#20400</a>)</p>
</li>
<li>
<p>Support <code>import.defer()</code> for context modules. (by <a
href="https://github.com/ahabhgk"><code>@ahabhgk</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20399">#20399</a>)</p>
</li>
<li>
<p>Added support for array values to the <code>devtool</code> option.
(by <a href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20191">#20191</a>)</p>
</li>
<li>
<p>Improve rendering node built-in modules for ECMA module output. (by
<a href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20255">#20255</a>)</p>
</li>
<li>
<p>Unknown import.meta properties are now determined at runtime instead
of being statically analyzed at compile time. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20312">#20312</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Fixed ESM default export handling for <code>.mjs</code> files in
Module Federation (by <a
href="https://github.com/y-okt"><code>@y-okt</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20189">#20189</a>)</p>
</li>
<li>
<p>Optimized <code>import.meta.env</code> handling in destructuring
assignments by using cached stringified environment definitions. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20313">#20313</a>)</p>
</li>
<li>
<p>Respect the <code>stats.errorStack</code> option in stats output. (by
<a
href="https://github.com/samarthsinh2660"><code>@samarthsinh2660</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20258">#20258</a>)</p>
</li>
<li>
<p>Fixed a bug where declaring a <code>module</code> variable in module
scope would conflict with the default <code>moduleArgument</code>. (by
<a href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/20265">#20265</a>)</p>
</li>
<li>
<p>Fix VirtualUrlPlugin to set resourceData.context for proper module
resolution. Previously, when context was not set, it would fallback to
the virtual scheme path (e.g., <code>virtual:routes</code>), which is
not a valid filesystem path, causing subsequent resolve operations to
fail. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20390">#20390</a>)</p>
</li>
<li>
<p>Fixed Worker self-import handling to support various URL patterns
(e.g., <code>import.meta.url</code>, <code>new
URL(import.meta.url)</code>, <code>new URL(import.meta.url,
import.meta.url)</code>, <code>new URL(&quot;./index.js&quot;,
import.meta.url)</code>). Workers that resolve to the same module are
now properly deduplicated, regardless of the URL syntax used. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20381">#20381</a>)</p>
</li>
<li>
<p>Reuse the same async entrypoint for the same Worker URL within a
module to avoid circular dependency warnings when multiple Workers
reference the same resource. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20345">#20345</a>)</p>
</li>
<li>
<p>Fixed a bug where a self-referencing dependency would have an unused
export name when imported inside a web worker. (by <a
href="https://github.com/samarthsinh2660"><code>@samarthsinh2660</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20251">#20251</a>)</p>
</li>
<li>
<p>Fix missing export generation when concatenated modules in different
chunks share the same runtime in module library bundles. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20346">#20346</a>)</p>
</li>
<li>
<p>Fixed <code>import.meta.env.xxx</code> behavior: when accessing a
non-existent property, it now returns empty object instead of full
object at runtime. (by <a
href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20289">#20289</a>)</p>
</li>
<li>
<p>Improved parsing error reporting by adding a link to the loader
documentation. (by <a
href="https://github.com/gaurav10gg"><code>@gaurav10gg</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20244">#20244</a>)</p>
</li>
<li>
<p>Fix typescript types. (by <a
href="https://github.com/alexander-akait"><code>@alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20305">#20305</a>)</p>
</li>
<li>
<p>Add declaration for unused harmony import specifier. (by <a
href="https://github.com/hai-x"><code>@hai-x</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/20286">#20286</a>)</p>
</li>
<li>
<p>Fix compressibility of modules while retaining portability. (by <a
href="https://github.com/dmichon-msft"><code>@dmichon-msft</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/20287">#20287</a>)</p>
</li>
<li>
<p>Optimize source map generation: only include <code>ignoreList</code>
property when it has content, avoiding empty arrays in source maps. (by
<a href="https://github.com/xiaoxiaojx"><code>@xiaoxiaojx</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/20319">#20319</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack/commit/1486f9aacca11d79dbb7ddbceed29b7e6df7a7ab"><code>1486f9a</code></a>
chore(release): new release</li>
<li><a
href="https://github.com/webpack/webpack/commit/1a517f665aae7b4d3d29c8b408d09488a21fbf94"><code>1a517f6</code></a>
feat: added the <code>tsconfig</code> option for the
<code>resolver</code> options (<a
href="https://redirect.github.com/webpack/webpack/issues/20400">#20400</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/7b3b0f795df377a9d0073822a2d60c1390d03109"><code>7b3b0f7</code></a>
feat: support <code>import.defer()</code> for context modules</li>
<li><a
href="https://github.com/webpack/webpack/commit/c4a6a922de4af37a92d05c0ddc975b5348cfa9a1"><code>c4a6a92</code></a>
refactor: more types and increase types coverage</li>
<li><a
href="https://github.com/webpack/webpack/commit/5ecc58d722da7715ede7de59b97108dd715d1bfa"><code>5ecc58d</code></a>
feat: consider asset module as side-effect-free (<a
href="https://redirect.github.com/webpack/webpack/issues/20352">#20352</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/cce0f6989888771ec279777ab8f8dce8e39198a0"><code>cce0f69</code></a>
test: avoid comma operator in BinaryMiddleware test (<a
href="https://redirect.github.com/webpack/webpack/issues/20398">#20398</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/cd4793d50e8e1e519ecd07b76d9e5dc06357341e"><code>cd4793d</code></a>
feat: support import specifier guard (<a
href="https://redirect.github.com/webpack/webpack/issues/20320">#20320</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/fe486552d060f6d2815a39a6bd0fb351d348658c"><code>fe48655</code></a>
docs: update examples (<a
href="https://redirect.github.com/webpack/webpack/issues/20397">#20397</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/de107f8767a2a11759f8261ed1ac49bcddec34b6"><code>de107f8</code></a>
fix(VirtualUrlPlugin): set resourceData.context to avoid invalid
fallback (<a
href="https://redirect.github.com/webpack/webpack/issues/2">#2</a>...</li>
<li><a
href="https://github.com/webpack/webpack/commit/a656ab1fd1064ef8dd3eef1a2f3071fc176b948f"><code>a656ab1</code></a>
test: add self-import test case for dynamic import (<a
href="https://redirect.github.com/webpack/webpack/issues/20389">#20389</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack/compare/v5.94.0...v5.105.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for webpack since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.94.0&new-version=5.105.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-02-06 10:45:20 -06:00

.github

Use nilaway to incrementally check for unsafe nil pointer dereferences (#39030 )

2026-02-06 08:51:17 -06:00

.storybook

Updating UI for Okta config (#35204 )

2025-11-18 19:34:59 -06:00

.vscode

Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744 )

2026-01-28 16:08:33 -06:00

android

Android app: add worker mutex (#39297 )

2026-02-05 10:58:01 -07:00

articles

[Guide] Only install the bootstrap package during first time Mac setup (#39480 )

2026-02-06 11:10:09 -05:00

assets

Display iPad screenshot in lock modal (#38475 )

2026-01-20 13:26:01 +01:00

changes

Fleet UI (GitOps Mode): Disable edit software modal fields for FMAs, add GitOps tooltips on Save buttons (#39335 )

2026-02-06 11:19:35 -05:00

charts

Adding changes for Fleet v4.80.0 (#38255 ) (#39217 )

2026-02-03 08:38:20 -06:00

cmd

Fix panic in gRPC launcher API handler (#39409 )

2026-02-06 09:31:14 -03:00

docs

Added OTEL contributor docs (#39285 )

2026-02-05 07:21:27 -06:00

Bump webpack from 5.94.0 to 5.105.0 in /ee/fleetd-chrome (#39451 )

2026-02-06 10:45:20 -06:00

frontend

Fleet UI (GitOps Mode): Disable edit software modal fields for FMAs, add GitOps tooltips on Save buttons (#39335 )

2026-02-06 11:19:35 -05:00

git-hooks

Merge Android datastore into main Fleet datastore (#32233 )

2025-08-25 11:41:28 -04:00

handbook

remove count of scrum items (#39426 )

2026-02-06 10:35:35 -05:00

infrastructure

Adding changes for Fleet v4.80.0 (#38255 ) (#39217 )

2026-02-03 08:38:20 -06:00

it-and-security

Standardize macOS app update queries and related automation (#39164 )

2026-02-03 17:52:07 -06:00

orbit

Harden app_sso_platform command execution (#39397 )

2026-02-05 17:31:10 -03:00

pkg

Fix flaky test: Use setSkipWorkerJobs (#39106 )

2026-02-02 10:00:35 -06:00

proposals

…

schema

Add SQL query for last connected times in wifi_networks (#37919 )

2026-02-04 17:40:34 -06:00

security

Add note around linux trivy (#39100 )

2026-02-04 06:56:32 -03:00

server

Fixing order by clause (#39476 )

2026-02-06 10:24:19 -06:00

terraform

…

test/upgrade

…

third_party

Bump Alpine (to 3.23.3), Go (to 1.25.6) to resolve vulns (#38973 )

2026-01-28 18:51:15 -06:00

tools

Harden app_sso_platform command execution (#39397 )

2026-02-05 17:31:10 -03:00

website

Updated Fleet GitOps landing page (#39456 )

2026-02-06 02:07:53 -06:00

.coderabbit.yaml

turn off issue auto-enrichment in coderabbit (#36763 )

2025-12-05 11:13:14 -06:00

.custom-gcl.yml

Use nilaway to incrementally check for unsafe nil pointer dereferences (#39030 )

2026-02-06 08:51:17 -06:00

.dockerignore

…

.eslintignore

Allow ESCAPE in LIKE clauses to be valid SQL (#31222 )

2025-07-25 10:13:55 -05:00

.eslintrc.js

…

.gitattributes

…

.gitignore

Use nilaway to incrementally check for unsafe nil pointer dereferences (#39030 )

2026-02-06 08:51:17 -06:00

.gitpod.yml

…

.golangci-incremental.yml

Use nilaway to incrementally check for unsafe nil pointer dereferences (#39030 )

2026-02-06 08:51:17 -06:00

.golangci.yml

Add dependency check for some libraries (#37915 )

2026-01-07 17:43:09 -03:00

.goreleaser-snapshot.yml

Do not build fleetdm/fleetctl on every PR (#37180 )

2025-12-12 10:09:54 -06:00

.goreleaser.yml

…

.npmignore

…

.pre-commit-config.yaml

Updating golangci-lint to 2.7.1 (#36678 )

2025-12-04 10:45:50 -06:00

.prettierignore

Allow ESCAPE in LIKE clauses to be valid SQL (#31222 )

2025-07-25 10:13:55 -05:00

.prettierrc.json

…

.yarnrc

…

babel.config.json

…

CHANGELOG.md

Adding changes for Fleet v4.80.0 (#38255 ) (#39217 )

2026-02-03 08:38:20 -06:00

CODE_OF_CONDUCT.md

…

codecov.yml

Updating Android app for remove certs (#37640 )

2026-01-05 19:17:13 -06:00

CODEOWNERS

Update codeowners to remove myself where not needed (#39282 )

2026-02-03 16:13:11 -06:00

docker-compose-redis-cluster.yml

Target Redis 6 everywhere rather than a mix of 5 and 6 (#35373 )

2025-11-10 17:05:44 -06:00

docker-compose.yml

Bump to latest release of RustFS docker-compose dependency (#38469 )

2026-01-19 11:20:46 -06:00

Dockerfile-desktop-linux

Bump Alpine (to 3.23.3), Go (to 1.25.6) to resolve vulns (#38973 )

2026-01-28 18:51:15 -06:00

go.mod

Fix panic in gRPC launcher API handler (#39409 )

2026-02-06 09:31:14 -03:00

go.sum

Fix panic in gRPC launcher API handler (#39409 )

2026-02-06 09:31:14 -03:00

LICENSE

…

Makefile

Use nilaway to incrementally check for unsafe nil pointer dereferences (#39030 )

2026-02-06 08:51:17 -06:00

manifest.yml.cloudgov.example

…

osv-scanner.toml

…

package.json

Bump react-markdown and remark-gfm packages to resolve transitive dep vulns (#38411 )

2026-01-30 16:44:19 +00:00

postcss.config.js

…

README.md

Removing run tests badge from README (#32131 )

2025-08-20 12:54:48 -05:00

render.yaml

…

SECURITY.md

…

tsconfig.json

Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744 )

2026-01-28 16:08:33 -06:00

webpack.config.js

Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744 )

2026-01-28 16:08:33 -06:00

yarn.lock

Bump react-markdown and remark-gfm packages to resolve transitive dep vulns (#38411 )

2026-01-30 16:44:19 +00:00

README.md

News · Report a bug · Handbook · Why open source? · Art

Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans.

What's it for?

Organizations like Fastly and Gusto use Fleet for vulnerability reporting, detection engineering, device management (MDM), device health monitoring, posture-based access control, managing unused software licenses, and more.

Explore data

To see what kind of data you can use Fleet to gather, check out the table reference documentation.

Out-of-the-box policies

Fleet includes out-of-the box support for all CIS benchmarks for macOS and Windows, as well as many simpler queries.

Take as much or as little as you need for your organization.

Supported platforms

Here are the platforms Fleet currently supports:

Linux (all distros)
macOS
Windows
Chromebooks
Amazon Web Services (AWS)
Google Cloud (GCP)
Azure (Microsoft cloud)
Data centers
Containers (kube, etc)
Linux-based IoT devices

Lighter than air

Fleet is lightweight and modular. You can use it for security without using it for MDM, and vice versa. You can turn off features you are not using.

Openness

Fleet is dedicated to flexibility, accessibility, and clarity. We think everyone can contribute and that tools should be as easy as possible for everyone to understand.

Good neighbors

Fleet has no ambition to replace all of your other tools. (Though it might replace some, if you want it to.) Ready-to-use, enterprise-friendly integrations exist for Snowflake, Splunk, GitHub Actions, Vanta, Elastic Jira, Zendesk, and more.

Fleet plays well with Munki, Chef, Puppet, and Ansible, as well as with security tools like Crowdstrike and SentinelOne. For example, you can use the free version of Fleet to quickly report on what hosts are actually running your EDR agent.

Free as in free

The free version of Fleet will always be free. Fleet is independently backed and actively maintained with the help of many amazing contributors.

Longevity

The company behind Fleet is founded (and majority-owned) by true believers in open source. The company's business model is influenced by GitLab (NYSE: GTLB), with great investors, happy customers, and the capacity to become profitable at any time.

In keeping with Fleet's value of openness, Fleet Device Management's company handbook is public and open source. You can read about the history of Fleet and osquery and our commitment to improving the product.

Is it any good?

Fleet is used in production by IT and security teams with thousands of laptops and servers. Many deployments support tens of thousands of hosts, and a few large organizations manage deployments as large as 400,000+ hosts.

Chat

Please join us in MacAdmins Slack or in osquery Slack.

The Fleet community is full of kind and helpful people. Whether or not you are a paying customer, if you need help, just ask.

Contributing

The landscape of cybersecurity and IT is too complex. Let's open it up.

Contributions are welcome, whether you answer questions on Slack / GitHub / StackOverflow / LinkedIn / Twitter, improve the documentation or website, write a tutorial, give a talk at a conference or local meetup, give an interview on a podcast, troubleshoot reported issues, or submit a patch. The Fleet code of conduct is on GitHub.

What's next?

To see what Fleet can do, head over to fleetdm.com and try it out for yourself, grab time with one of the maintainers to discuss, or visit the docs and roll it out to your organization.

Production deployment

Fleet is simple enough to spin up for yourself. Or you can have us host it for you. Premium features are available either way.

Documentation

Complete documentation for Fleet can be found at https://fleetdm.com/docs.

License

The free version of Fleet is available under the MIT license. The commercial license is also designed to allow contributions to paid features for users whose employment agreements allow them to contribute to open source projects. (See LICENSE.md for details.)

Fleet is built on osquery, nanoMDM, Nudge, and swiftDialog.