Juan Fernandez ff7955c0f0 Fix race condition in one-time software installer download token ...

Token redemption consumed the key via a non-atomic read-then-delete,
which allowed concurrent requests to redeem the same one-time token more
than once. Made consumption atomic so a token can only be used once,
even under concurrent access, and added coverage for the concurrent
path.

2026-07-21 11:33:46 -04:00

..

.keep

…

4842-search-public-ip

Add public IP address to host search (#46809)

2026-06-30 16:20:37 -03:00

16771-gitops-team-secret-leak

Mask team enroll secrets in team write responses (#49422)

2026-07-17 16:45:40 -04:00

16778-scim-deprovisioning-mutated-identifiers

Fix SCIM deprovisioning edge case during user deactivation

2026-07-21 11:33:08 -04:00

16779-secret-variable-spec-activities

Added audit activities when secret variables are upserted

2026-07-16 18:54:04 -04:00

16788-race-condition-one-time-installer-token

Fix race condition in one-time software installer download token

2026-07-21 11:33:46 -04:00

16793-scim-forbidden-last-request

Fix SCIM middleware persisting authorization failures to last_request

2026-07-21 11:32:36 -04:00

16800-reject-empty-enroll-secrets

Rejected empty and whitespace-only enroll secrets when creating or updating teams

2026-07-16 18:54:38 -04:00

23242-apple-byod-enrollment-permissions

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

25217-turn-off-mdm-offline-macos

Enable "Turn off MDM" button for offline macOS devices (#46651)

2026-07-07 11:20:45 -05:00

25574-splunk-log-destination

Add native Splunk HEC log destination (#48455)

2026-07-03 12:14:24 -04:00

28108-multiple-custom-packages

add changes

2026-07-10 14:37:59 -04:00

31294-windows-host-certificates

Show certificates on host details page for Windows (#31294) (#48469)

2026-07-06 20:28:21 +01:00

34591-add-cachyos-support

Add CachyOS support (#47757)

2026-07-03 10:28:08 -03:00

34984-spinner-elevated-background

Fleet UI: Remove elevated background on loading spinner (#49289)

2026-07-15 06:56:32 -07:00

35075-android-os-versions-vulnerabilities

Software > OS: Show Android versions and vulnerabilities (#49399)

2026-07-16 10:37:57 -04:00

35328-update-text-link-styles

Update CustomLink styles (#48838)

2026-07-13 17:07:39 +02:00

37972-improve-settings-subnav

Show individual settings sections in user menu (#48197)

2026-07-16 06:34:46 -05:00

38214-clarify-vitals-refetch-timeout-banner

Update host vitals refresh error banner (#49526)

2026-07-17 14:53:00 -07:00

38214-improve-ux-delayed-host-vitals-refetch

Update the refetching host error banner to reflect uncertainty (#49382)

2026-07-16 08:47:55 -07:00

38806-macos-iosipados-rename-hosts

macOS & iOS/iPadOS: Rename hosts

2026-07-14 10:28:19 -04:00

38874-macos-enroll-url

Add /enroll URL for macOS in Add hosts modal (#47528)

2026-07-07 11:18:45 -05:00

38986-support-ddm-assets

SAAD: Support DDM assets in sync + reconciliation (#49016)

2026-07-10 14:47:23 +02:00

39346-certificates-list

Controls > OS settings > Certificates: View certificates (#48460)

2026-07-08 09:59:20 -06:00

40410-webhook-url-validation-onblur.md

Add onURLBlur handler for InputField (#48854)

2026-07-07 11:52:35 -04:00

40639-non-proxied-cert-renewal

Docs: non-proxied cert renewal (#45695)

2026-07-10 17:37:50 -05:00

41056-remove-windows-sts-auth-endpoint.md

Removed the unused /api/mdm/microsoft/auth Windows MDM STS endpoint (#48734)

2026-07-06 20:29:05 +01:00

41470-python-script-only-packages

Allow Python script-only packages (#49070)

2026-07-16 14:20:03 -04:00

41790-citrix-ltsr-cumulative-updates

Detect Citrix Workspace LTSR cumulative updates (#41790) (#47591)

2026-06-29 14:45:06 -06:00

42473-sso-button-overflow

Fix IdP name overflowing button in login page (#48426)

2026-06-30 08:55:03 -03:00

42827-macos-mdm-certificate-ingestion

Docs: non-proxied cert renewal (#45695)

2026-07-10 17:37:50 -05:00

43097-more-detailed-error-without-server-private-key

Surface a more detailed error message if user doesn't have server_private_key configured (#49238)

2026-07-14 11:52:15 -07:00

43328-python3-prefix-cpe

Fix CPE matching for python3-prefixed packages on Ubuntu/Debian (#48599)

2026-07-13 09:46:49 -04:00

43379-windows-mdm-end-user-experience-labels

Update Windows MDM end user experience language (#47635)

2026-07-09 06:07:30 -05:00

43518-enable-disk-encryption-bitlocker

Add FLEET_MDM_ENABLE_DISK_ENCRYPTION alias for custom BitLocker profiles (#43518) (#48737)

2026-07-06 22:38:45 +01:00

44199-embedded-bundle-title-name

Fix macOS software titles mis-named from embedded helper bundles (#44199) (#47831)

2026-07-09 10:01:27 -06:00

44352-500-error-page

Update 404 and 500 error pages (#48826)

2026-07-07 10:54:26 -03:00

44428-tpm-backed-disk-encryption.md

escrow snapd TPM-backed FDE recovery keys from orbit (#48452)

2026-07-07 16:25:20 -04:00

44624-policies-automations-filter-unassigned

Fix Policies automations filter disappearing for the Unassigned fleet (#49224)

2026-07-13 15:58:53 -03:00

44800-ollama-resolved-in-version

Add resolved-in-version override for CVE-2025-63389 on Ollama (#48525)

2026-07-07 16:24:41 -04:00

44954-custom-host-vitals.md

44954 custom host vitals (#49334)

2026-07-15 19:35:27 -03:00

45524-macos-password-sync

macos password sync feature branch (#47422)

2026-07-09 14:57:48 -04:00

45550-surface-windows-scep-proxy-failures.md

Surface proxied Windows SCEP certificate failures (#45550) (#48842)

2026-07-09 07:38:47 +01:00

45650-windows-mdm-command-results-insert-perf.md

Improved the performance of Windows MDM profile installation (#48733)

2026-07-06 18:34:10 +01:00

45682-cache-control-static-assets

Add Cache-Control to static assets served under /assets/ (#48409)

2026-06-30 10:13:07 -03:00

45710-zorin-os-support

Add Zorin OS as a recognized Linux platform (#45712)

2026-07-06 13:00:10 -03:00

45729-self-service-show-version

Add installed and available versions to self-service (#47526)

2026-07-16 06:33:05 -05:00

46057-vpp-tokens-maintainer-authz

Fix App Store picker 403 for non-admin roles (#48856)

2026-07-07 16:15:58 -04:00

46077-newly-created-reports-do-not-show-up

Refresh reports list cache after report create/update (#49402)

2026-07-16 10:46:35 -03:00

46193-duplicate-patch-policy-gitops-check

Add duplicate patch policy check to GitOps (#48896)

2026-07-07 16:08:23 -04:00

46227-luks-key-escrow-any-slot

LUKS key escrow validate against any keyslot (#48815)

2026-07-09 13:04:31 -04:00

46235-dep-syncer-cursor-not-advanced-on-callback-error

46235 dep profile assigner context cancelled (#48473)

2026-07-06 14:16:14 +01:00

46282-handle-client-error-decoding-errors

handle client error decoding errors in ACME urls (#49137)

2026-07-10 12:31:17 -04:00

46380-ndes-error-location

Fix NDES invalid credentials error to point to correct settings location (#49298)

2026-07-15 12:34:59 -04:00

46387-windows-mdm-enrollment-auth-error

Reject unsupported OnPremise Windows MDM enrollment with an actionable message (#46387) (#48300)

2026-07-01 19:21:02 +01:00

46399-query-errors-can-cause-label-membership-unassigned.md

Fix label membership being cleared when a label query errors (#49403)

2026-07-20 10:31:09 -03:00

46811-citrix-workspace-cpe

Fix CPE generation for Citrix Workspace without YYMM suffix (#46811) (#47545)

2026-06-29 14:44:47 -06:00

46959-fpsso-configure-ui

46959 Add Account Provisioning settings to UI for FPSSO configuration (#47655)

2026-07-10 16:19:47 -04:00

46965-time-ago-timestamps-use-days

Time ago timestamps: use days instead of months when under 90 days (#48964)

2026-07-08 15:07:48 -03:00

47303-redis-moved-errors-query-results-counts

Fix Redis MOVED errors from query results counts in cluster mode

2026-07-02 07:37:42 -04:00

47388-getclientconfig-nil-map-panic

Fix panic in GetClientConfig with null agent options config (#47388) (#48584)

2026-07-02 11:17:04 -03:00

47488-render-mysql-version

Bump Render blueprint MySQL to 8.0.44 (#47488) (#48481)

2026-06-30 12:26:57 -03:00

47530-my-device-policy-click-highlight

Fleet UI: Remove blue click flash on clickable table rows (#49228)

2026-07-14 07:47:28 -07:00

47626-use-generated-uuid-for-mdm_idp_account

Use generated UUID for mdm_idp_account table on Linux and Windows (#49215)

2026-07-13 14:43:39 -03:00

47661-hosts-online-chart-include-mobile-by-default

Include mobile hosts by default in "Hosts online" chart (#48769)

2026-07-08 11:38:26 -05:00

47683-windows-mdm-fleetd-install-ordering

Fix out-of-order Windows MDM fleetd install commands (#47683) (#47736)

2026-06-18 17:17:23 +01:00

47699-entra-conditional-access-self-hosted

Allow Microsoft conditional access on premium self-hosted (#49414)

2026-07-17 10:59:32 -03:00

47722-host-device-mapping-reader-load

Reduce MySQL reader load on GET /hosts with device_mapping + search query (#47722) (#48488)

2026-07-01 10:28:30 -03:00

47922-fix-jumping-symbol

Disable Inter contextual alternates in input fields (#49358)

2026-07-15 16:37:51 -04:00

47943-premium-calls-on-fleet-free

Stop premium calls on Fleet free (#49118)

2026-07-10 15:42:15 +02:00

48054-fma-duplicate-software-titles

Fix GitOps creating duplicate software titles (#48664)

2026-07-02 19:16:28 -04:00

48077-observer-managed-account-action.md

Show managed account host action for observers (#48748)

2026-07-07 14:38:50 +02:00

48102-fix-msix-detecting-as-ipa

Differentiate between ipa and other zip file types in ExtractInstallerMetadata (#48802)

2026-07-06 18:18:16 -04:00

48125-tooltip-not-showing-idp

Tooltips not always showing for full name (IdP) (#49116)

2026-07-10 15:42:39 +02:00

48129-404-page

Update 404 and 500 error pages (#48826)

2026-07-07 10:54:26 -03:00

48177-rename-create-buttons-to-add

Rename "Create" buttons and links to "Add" across the Fleet UI (#48284)

2026-07-01 15:04:12 -05:00

48229-inconsistent-font-size-tooltip

inconsistent font size tooltip (#49121)

2026-07-10 15:46:42 +02:00

48314-updated-missed-abm-references

update missed ABM references (#49027)

2026-07-09 18:00:06 +02:00

48342-edit-config-profile-endpoint

48342 edit config profile endpoint (#49141)

2026-07-21 08:20:03 -04:00

48349-windows-batch-modify-async

Fixed Windows profile modify batch (#48474)

2026-07-07 16:29:53 +01:00

48448-remove-bomutils-docker

Drop Docker fleetdm/bomutils dependency in fleetctl when generating pkg fleetd installers (#48915)

2026-07-15 10:14:57 -03:00

48485-hide-install-all-on-all-category

Supress install all for all/undefined software category (#48999)

2026-07-13 10:51:12 -04:00

48486-scep-renew

Fix re-enrollment with pending SCEP(and ACME) renewals (#48661)

2026-07-07 09:26:14 -04:00

48497-cron-interrupted-run-status

Fix cron jobs stuck in "expired" when a run is interrupted mid-flight

2026-07-02 07:38:11 -04:00

48531-dark-mode-hover-state

Fix invisible hover state in dark mode (#49001)

2026-07-10 12:48:12 -04:00

48542-table-reload-on-window-focus

Fix tables losing row selection on window focus (#48742)

2026-07-13 13:10:33 -03:00

48567-user-scoped-declarations

Add user-scoped declaration support (#48796)

2026-07-07 13:15:14 -04:00

48614-hide-empty-self-service-categories

Hide empty self-service categories on My device page (#48614) (#48619)

2026-07-07 17:05:38 +02:00

48641-policies-empty-page-after-delete

Return to previous page when the last policy on a page is deleted (#48683)

2026-07-08 13:14:14 -03:00

48685-mdm-enrolled-host-usage-stats

Added anonymous usage statistics reporting the number of macOS and Windows hosts enrolled in Fleet's MDM (#48840)

2026-07-07 19:22:31 +01:00

48752-windows-reserved-locuri-scopeless-bypass

Fix Windows CSP bypass issue (#48843)

2026-07-08 14:38:10 +01:00

48883-nano-queue-index

Add better index to nano_enrollment_queue (#48865)

2026-07-10 15:51:14 -04:00

48948-delete-cert-modal-overflow

Fix long certificate name overflow in delete certificate modal (#48948) (#49019)

2026-07-10 06:40:30 -06:00

48951-certificate-ca-dropdown-scep-only

Filter Add certificate CA dropdown to custom SCEP only (#49020)

2026-07-10 11:14:28 -06:00

48987-vulnerabilities-tooltip

Fleet UI: Show tooltip for truncated vulnerabilities list in Update details modal (#49236)

2026-07-13 15:37:07 -07:00

49134-windows-esp-user-release-retry

Fix Windows Autopilot ESP hang: gate release on user-scope ack (#49134) (#49542)

2026-07-21 09:03:54 -05:00

49260-swupdate

Speculative fix for iOS/iPadOS enrollment w/ required sw update (#49280)

2026-07-15 17:52:57 -07:00

49297-free-tier-linux-summary-cards

Fleet UI: Restore dashboard cards hidden despite the API returning their data (#49349)

2026-07-15 13:22:13 -07:00

49329-windows-discovery-request-version

Windows MDM: accept discovery RequestVersion >= 4.0 (#49329) (#49380)

2026-07-15 17:42:22 -07:00

49474-fix-patch-policy-query-not-updating

Fix FMA pinning not changing patch policy (#49519)

2026-07-17 19:00:13 -04:00

49475-failed-installs-reported-successful

Fix false-success reporting for failed software installs (#49515)

2026-07-17 17:59:14 -04:00

49495-stale-fma-installer-version

Redirect FMA installs to the active version after auto-update (#49525)

2026-07-18 06:01:45 -04:00

add-missing-error-fma-dynamic-policy

Fix fleet_maintained_app_slug being allowed in a dynamic policy (#49034)

2026-07-09 13:17:03 -04:00

api-endpoints-add-reports-run

Add POST /reports/run to the API endpoints catalog (#48790)

2026-07-07 09:59:12 -03:00

batch-extension-label-check

Batch extension label-membership checks in GetOrbitConfig (#49154)

2026-07-15 09:55:54 -04:00

cache-pack-config-json

Cache pack config JSON per team to reduce redundant marshaling (#48702)

2026-07-13 13:51:02 -04:00

cis-win10-benchmark-v4

Update Windows 10 CIS benchmark policies to v4.0.0 (#48986)

2026-07-13 12:52:38 -04:00

fix-48277-live-results-translate-crash

Fix live results error page from browser auto-translate (#48277) (#48705)

2026-07-06 09:19:56 -03:00

fix-enroll-page-styling

Fix enroll page and Add hosts modal styling issues (#48968)

2026-07-14 17:32:04 -07:00

fix-macos-software-memory-recursive-cask-glob

Fix performance regression in software_macos query (#48649)

2026-07-03 11:04:30 -03:00

friendly-base64-error-mobileconfig

Better error message: Configuration profiles has characters that need escaping (#40073)

2026-07-02 14:32:49 -05:00

gitops-windows-profiles-mdm-state

Improved GitOps consistency for Windows BatchSetMDMProfiles (#48467)

2026-06-30 21:33:07 +01:00

my-device-applications-filter

Add macOS app filter to My device software (#48637)

2026-07-13 09:08:26 -05:00

optimize-query-aggregated-stats

Optimize query aggregated stats cron to skip queries without execution data (#48698)

2026-07-03 13:29:49 -04:00

policies-targeted-platforms-filter

Add Targeted platforms column and platform filter to Policies page (#44125)

2026-07-10 13:32:16 -05:00

scim-admin-only-access

Restrict SCIM endpoints to global admin only (#48858)

2026-07-10 11:53:48 -04:00

scim-idp-associate-all-matching-hosts

Associate all matching hosts with a SCIM/IdP user (not just the first) (#48351)

2026-07-01 10:40:31 -03:00

stale-policy-membership-cleanup.md

Cleanup policy_membership stale entries in distributed/write (#48674)

2026-07-03 14:12:08 -03:00