fleet

.keep

…

33555-better-error-handling-of-win-pre-install-setup

Update changelog for fleetd 1.55.0 release (#44733 )

2026-05-05 19:18:08 -03:00

33557-inconsistent-team-name-conflicts

Enforce consistent fleet name uniqueness across UI and GitOps (#33557 )

2026-04-23 16:44:09 -04:00

34103-sso-invite-accept

Fix SSO invite acceptance error when accepting invitation (#34103 )

2026-05-07 12:25:24 -04:00

34104-smtp-starttls-error-message

Clarify SMTP TLS error and surface STARTTLS toggle (#34104 )

2026-05-07 10:24:18 -04:00

34229-gitops-label-validation

Fix missing GitOps label validation for invalid field combinations (#44410 )

2026-05-05 16:19:41 -04:00

34464-gitops-dry-run-manual-agent-install-script-conflict

Fix gitops dry-run to catch manual_agent_install + macos_script conflict (#44432 )

2026-05-04 15:32:21 -04:00

34924-expired-license-cli-banner

Fixed bug with about to expire CLI banner (#34924 )

2026-05-04 07:17:08 -04:00

35089-fleetctl-released-as-pkg

Create fleetctl pkg asset every release (#35089 )

2026-05-07 10:04:07 -05:00

35171-macos-15-cis-2.0.0

Update macOS 15 to CIS Benchmark 2.0.0 (#43909 )

2026-04-23 16:17:34 -04:00

35172-macos-14-cis-3.0

macOS 14 CIS benchmark v3.0.0 update (#43797 )

2026-04-23 12:56:38 -04:00

35173-cis-macos-26-v1

Add macOS 26 Tahoe CIS benchmark v1.0.0 (#44090 )

2026-04-29 17:15:25 -04:00

35195-slate-homebrew-cpe-mismatch

Fix homebrew package matching incorrect CPE (#45186 )

2026-05-13 09:20:59 -04:00

35483-empty-states

Fleet UI: New empty states (#43896 )

2026-04-27 17:54:34 -05:00

36976-activities-for-labels

Add activities for user actions on labels (#44522 )

2026-05-01 10:19:45 -03:00

37012-host-details-activity-upcoming-count

Fix upcoming activity count not refreshing after host software install (#37012 )

2026-05-11 10:38:20 -04:00

37142-local-admin-password-rotation

43885: MLAPR migration + UUID capture (#44244 )

2026-04-29 11:14:50 -04:00

37682-clear-state-on-abm-re-enrollment

CSAH: clear state on ABM re-enrollment (#44722 )

2026-05-06 09:57:58 +02:00

38348-allow-saving-invalid-sql

Allow saving policies with invalid SQL (#38348 ) (#43952 )

2026-04-22 14:22:33 -04:00

38437-activity-list-date-filter-consistency

Make activity list end-date filter consistent (#38437 )

2026-05-08 15:29:59 -04:00

38647-remove-duplicate-disk-encryption-activity

remove unused disk encryption type (#42974 )

2026-04-08 17:05:25 -05:00

38785-windows-setup-experience-cancel

Revert "Partial revert of #38785 work-in-progress (#44061 )" (#44285 )

2026-04-28 13:35:50 -05:00

39016-upload-custom-org-logo

Add ability to upload custom org logos (#44390 )

2026-05-05 14:42:52 +02:00

39570-clear-passcode

Implement clear passcode backend (#43072 )

2026-04-07 15:23:59 -05:00

39727-creating-queries-back-to-hosts-bug

Fix back-to-host-details button on report details page (#39727 ) (#45238 )

2026-05-12 14:08:59 -04:00

40322-fix-ddm-pending-issues

Fix various DDM stuck remove/pending issues (#43382 )

2026-04-22 13:05:09 -06:00

40322-make-ddm-name-check-case-insensitive

make DDM name check case insensitive (#43347 )

2026-04-21 08:31:30 -06:00

40459-wipe-host-cancels-upcoming-activities

Wipe host cancels all upcoming activities (#44323 )

2026-05-01 14:01:46 -06:00

40623-failed-enrollment-renewal

produce failed enrollment renewal activity (#44511 )

2026-05-01 11:38:08 -06:00

40702-simplif-os-modal

simplify OS modal (#43252 )

2026-04-09 16:30:15 -05:00

40856-eula-upload-updated-to-default-max-request-body-size-and-error

Updated eula pdf upload size check to default max request body size (#43517 )

2026-04-23 16:01:09 +01:00

40905-update-default-automatic-enrollment-profile

updated default profile, added endpoint for seeing what default is applied (#44236 )

2026-04-28 07:38:15 -06:00

40952-fallback-team-script-execution-timeout-to-global

Bugfix: fallback the script execution timeout from agent options to global if not set for team (#43911 )

2026-04-22 12:00:58 -04:00

41147-update-input-action-buttons

Update input action buttons app wide (#43906 )

2026-04-21 17:54:05 -06:00

41167-skip-bootstrap-clear-on-cert-renewal

don't clear bootstrap token when doing MDM cert renewals (#43098 )

2026-04-13 14:37:05 -06:00

41381-eua-ms-installer

Added EUA to the Fleet MSI installer (#43295 )

2026-04-13 12:17:23 -05:00

41472-android-cert-san-server

Add support for SAN in Android certificate templates. (#44690 )

2026-05-06 14:43:09 -05:00

41565-policy-report-new-scopes-frontend

Add include_all label scope UI to policies and reports (#41565 )

2026-05-04 07:16:09 -04:00

41566-policy-report-labels-gitops

Add include_all label scope to GitOps and fleetctl (#41566 )

2026-05-05 15:13:22 -04:00

41568-enroll-page-enroll-button-update-to-full-width-for-larger-res-mobiles

Enroll page media screen max width updated (#43666 )

2026-04-23 13:57:41 +01:00

41592-eua-broken-with-custom-apple-mdm-url‎

redirect to correct URL, and allow both URLs for MDM SSO SAML validation if set (#44156 )

2026-04-29 08:43:58 -06:00

41676-update-APNS-cert-invalid-domain-error-message

41676 updated apple crs invalid domain error message (#43396 )

2026-04-23 16:44:23 +01:00

41753-policy-details-page

Fleet UI: Policy details page followup (#43324 )

2026-04-10 09:43:42 -04:00

41996-department-idp-host-vital-not-populating-for-some-users

Fix IdP department host vital missing when SCIM PATCH carries extra attrs (#41996 )

2026-05-07 08:34:36 -04:00

42026-show-uninstall-button

Show uninstall button even if software title is not found in inventory (#45273 )

2026-05-12 17:09:42 -04:00

42103-accept-89-on-profile-removal

accept 89 error on RemoveProfile as valid (#43172 )

2026-04-07 15:23:37 -05:00

42218-ios-supplemental-os-version-extra

42218 updated ios version number to include supplemental extra (#44727 )

2026-05-07 15:16:31 +01:00

42240-add-gitops-stats

Adding gitOpsModeEnabled and gitOpsModeExceptions to anonymous statistics payload (#44161 )

2026-04-27 08:28:49 -03:00

42290-wipe-activity

Windows wipe failed acivitiy (#43795 )

2026-04-22 17:53:59 -05:00

42405-android-onc-after-cert

Android Wi-Fi profile withheld until cert installed on device (#42877 )

2026-04-07 16:26:09 -05:00

42427-cleanup-stale-mdm-profiles

Fixed stale MDM profiles after MDM toggle (#43719 )

2026-04-20 09:23:55 -05:00

42440-renew-ab-tokens-gitopsmode-dropdown-fix

updated AB tokens renew and delete options to enabled in gitops mode (#43510 )

2026-04-27 17:45:34 +01:00

42477-gitops-dry-run-label-platform

Validate label platform during gitops --dry-run (#42477 ) (#44594 )

2026-05-04 07:18:07 -04:00

42494-android-pubsub-panic-deleted-host

Fixed Android pubsub panic when host was deleted (#43788 )

2026-04-21 16:01:51 -05:00

42503-deprecate-software-under-setup-experience

Officially deprecated setup_experience.software (#44549 )

2026-05-11 13:49:11 -05:00

42522-labels-not-supported-in-no-team

Warn when labels key appears in no-team/unassigned GitOps files (#44865 )

2026-05-11 09:54:59 -04:00

42545-skip-noop-host-writes

Don't update host values that didn't change (reduce writer load) (#43992 )

2026-04-24 10:46:47 -05:00

42545-windows-profile-delete-batching

Reworked Windows profile delete batching (#44047 )

2026-04-24 11:42:59 -05:00

42545-windows-profile-reconciliation-batching

Improved the performance of Windows MDM profile reconciliation (#44075 )

2026-04-28 15:37:43 -05:00

42568-host-policy-empty-state

Fleet UI: Improve host policy empty modal (#43805 )

2026-04-21 09:09:37 -04:00

42607-gitops-dry-run-empty-software

Short-circuit for empty software config in Gitops dry run (#44405 )

2026-04-29 14:54:49 -04:00

42613-dedupe-network-errors-in-error-store

Dedupe network errors so usage_statistics cron stops failing (#45142 )

2026-05-11 22:21:57 +02:00

42637-clear-stale-broken-label-associations

Clear stale broken label rows on profile batch upsert (#44847 )

2026-05-07 16:10:15 +02:00

42675-conditional-download-cache

Add cache option for software packages to skip re-downloading unchanged content (#42216 )

2026-04-14 13:01:33 -05:00

42741-fix-goval-dictionary-fd-leak

Fix FD leak in goval_dictionary Analyze (#42741 ) (#43983 )

2026-04-29 12:31:04 -04:00

42751-r2-fma

🤖 Add fallback for FMA manifest URL pulls (#43312 )

2026-04-09 17:36:18 -05:00

42879-api-only-user-management-ui

[Frontend] Create API-only users that only have access to customer-defined Fleet API endpoints (#43281 )

2026-04-20 09:18:02 -04:00

42881-api-endpoints-initial-models

API endpoints initial models (#42881 )

2026-04-07 10:40:39 -04:00

42882-42880-42884-allow-creation-of-api-only-users

Allow the creation of API-only users (#43440 )

2026-04-16 11:11:39 -04:00

42883-api-endpoint-for-listing-rest-api-endpoints

Implement GET /api/v1/fleet/rest_api (#42883 )

2026-04-10 11:12:38 -04:00

42885-api-only-endpoints-middleware

Added middleware for api-only users auth (#43772 )

2026-04-21 07:11:33 -04:00

42886-fix-google-cal-gitops-validation

Fix google calendar key validation (#44556 )

2026-05-11 13:41:28 -05:00

42930-show-retries-script-software-automations-host-details

Add host activity entries for retried software installs and script runs from policy automations (#45233 )

2026-05-12 13:44:18 -03:00

42972-add-fleetctl-msi-to-release

Build fleetctl MSI packages (#43403 )

2026-04-29 17:09:19 -05:00

42979-fix-for-multi-team-user

…

43031-post-queries-null-name-or-query-500

Fix POST /queries returning 500 on JSON null name/query (#43031 )

2026-05-13 07:25:02 -04:00

43032-post-packs-null-name

Reject null name on POST /packs (#43032 )

2026-05-13 07:24:06 -04:00

43070-fix-exceptions-padding

Update class on exceptions field to fix padding (#43927 )

2026-04-22 11:53:31 -05:00

43114-pagination-bug

Fleet UI: Fix page oscillation (#43151 )

2026-04-07 14:31:07 -04:00

43135-fix-stale-label-hosts

Fix: Label shows outdated manually selected host after navigating back to the Edit page (#44216 )

2026-04-27 21:09:28 +02:00

43142-script-package-icon-gitops

Allow icon in team level yaml for script-only packages (#43783 )

2026-04-20 16:56:23 -04:00

43162-software-table-bookmarkable-page

Fleet UI: Fix software table bookmarkability for pages (#43166 )

2026-04-07 15:59:48 -04:00

43222-support-fleet-variables-in-ddm

DDMV: Support Fleet variables in DDM (#43222 )

2026-04-20 09:14:52 -04:00

43228-dont-send-account-configuration-for-non-mac

don't send AccountConfiguration for non macs (#44085 )

2026-04-24 09:40:52 -06:00

43279-my-device-page-location-vital-looks-clickable

Fix Location and MDM status vitals looking clickable on My device page (#43279 )

2026-05-12 14:09:40 -04:00

43311-script-only-pkg-gitops

Do not replace EVs in script-only packages (#43606 )

2026-04-17 14:02:05 -05:00

43341-gitops-mode-wonkiness

Fleet UI: Fix gitops mode wonkiness (#43428 )

2026-04-14 09:31:34 -04:00

43342-improved-button-link-styling

Fleet UI: Improve internal links/buttons (#43470 )

2026-04-14 09:30:26 -04:00

43389-patch-policy-gitops-bugs

Fix patch policy bugs (#43420 )

2026-04-10 21:42:14 -04:00

43484-msi-docker-on-arm64

Use Docker as default WiX runtime on macOS arm64 (#43715 )

2026-04-21 10:53:46 -05:00

43511-gitops-icon-update-recovers

Fix gitops 500 when software title icon bytes are missing (#44735 )

2026-05-05 18:47:16 -04:00

43591-fix-stale-host-activities

Fix: Navigating to a a new host displays activity feed for a previously opened host details page (#44218 )

2026-04-27 19:06:06 +02:00

43598-fix-gitops-glob-path-validation

Allow glob literals in filenames (#44547 )

2026-05-11 13:49:31 -05:00

43609-gitops-mode-false-positive-activity

Fix cond access bypass activity on unrelated app config saves

2026-05-13 09:38:36 -04:00

43646-inconsistent-alignment-fleet-premium

inconsistent alignment fleet premium (#45125 )

2026-05-11 19:22:53 +02:00

43656-scim-users-duplicate-host-id

Fix: SCIM user creation 500s when host already has a SCIM mapping (#44275 )

2026-05-11 16:28:46 +02:00

43659-script-only-hash-ref-preserves-install-script

Fix script-only packages not setting install script file (#44299 )

2026-04-28 13:37:03 -04:00

43688-fix-text-alignment-issues

Fleet UI: Fix dataset text alignment (#44659 )

2026-05-05 08:50:18 -04:00

43721-clean-up-gitops-errors

Remove verb and url from gitops errors (#44555 )

2026-05-11 13:48:52 -05:00

43738-duplicate-installers

🤖 Fix GitOps leaving duplicate software installer rows (#43903 )

2026-04-22 13:48:56 -04:00

43767-delete-label-error-msg

Fleet UI: Improved error message when deleting a label that is for targeting a software installation (#44320 )

2026-04-28 15:53:28 -04:00

43769-added-charts-to-dashboard

Allow disabling chart datasets: frontend (#44797 )

2026-05-06 16:28:37 -05:00

43846-vpp-app-store-non-us-abm

Support VPP apps from non-US App Store regions (#44368 )

2026-05-06 12:01:07 -04:00

43857-improve-error-on-missing-gitops-name

Improve name key validation in GitOps (#44553 )

2026-05-11 13:49:02 -05:00

43910-implement-chart-module

Dashboard charts backend (#43910 )

2026-04-23 12:43:23 -05:00

43928-host-by-nodekey-cache

Redis-backed cache for host-by-key lookups (#43936 )

2026-05-01 12:06:16 -05:00

43955-gitops-escape-json-in-vars

Bugfix: escape characters not supported in JSON when resolving variables (#43955 )

2026-04-23 10:34:12 -06:00

43959-duplicate-installers

Check for duplicate linux software installers (#44234 )

2026-04-27 17:14:47 -04:00

43978-fma-sync-bundle-identifier-index

Added an index on software.bundle_identifier (#43979 )

2026-04-22 14:30:43 -05:00

44046-create-team-labels-before-consumers

Apply labels before consumers in GitOps (#45194 )

2026-05-12 17:15:33 -05:00

44071-team-transfer-race-with-update-host

Fixed a race where a host could silently revert to its previous team (#44074 )

2026-04-24 14:34:37 -05:00

44082-add-script-output-to-gitops

add script output to GitOps (#44728 )

2026-05-07 09:38:25 +02:00

44084-fix-install-loop-on-deleted-installer

Bound orbit retries on missing installer details to 5 mins (#44284 )

2026-04-28 12:58:10 -04:00

44111-scep-autorenew-fail

Recover stuck SCEP managed-cert state via matcher extension (#44691 )

2026-05-07 11:52:25 -06:00

44124-add-vulnerabilities-chart

Add Vulnerabilities exposure dataset (#44124 )

2026-04-29 09:30:31 -05:00

44127-remove-unused-windows_updates

Remove unused windows_updates MySQL table and ingestion (#44128 )

2026-04-24 15:21:34 -03:00

44170-list-mdm-commands-perf

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297 )

2026-04-30 15:44:19 -05:00

44189-host-profile-perf

Windows MDM improved host profile status performance (#44225 )

2026-04-27 20:09:27 -05:00

44190-mdm-queue-cleanup

Periodic background job to cleanup Windows MDM command queue (#44458 )

2026-05-04 11:32:45 -05:00

44194-team-bitlocker-windows-only

Enable disk encryption when only Windows MDM is configured. (#44462 )

2026-05-01 09:19:34 -05:00

44196-script-library-gitops-fixes

fix UI elements in script library not respecting GitOps mode (#44743 )

2026-05-05 18:56:18 +02:00

44198-ios-refetch-defensive-decoding

🤖 #44198 : Add guards on iOS/iPadOS refetch paths (#44205 )

2026-04-27 12:02:34 -04:00

44242-fleetctl-vuln-data-stream-osv

fleetctl vulnerability-data-stream to download OSV data (#44260 )

2026-04-30 10:46:51 -06:00

44252-unable-to-edit-existing-user-to-use-2fa-422-error

Fixed patch logic on EditUperPage component (#44302 )

2026-04-28 13:24:24 -04:00

44286-deleted-policy-activity-for-patch-policies

Fix missing deleted_policy activity for auto-cleaned patch policies (#45045 )

2026-05-09 00:33:00 -04:00

44298-fix-goquery-dependency-side-effects

Fix issue with fleet's docker image in k8s environments (#44373 )

2026-04-29 11:19:13 -03:00

44333-gitops-custom-org-logo-upload

GitOps changes for custom org's logo uploads (#44550 )

2026-05-05 18:18:08 +02:00

44376-stale-apns-push-cert-not-updated

check push cert staleness after 5 minutes of in-memory cache time (#44919 )

2026-05-08 11:02:22 +02:00

44391-osv-vuln-optimizations

Optimize OSV vulnerability scanning (#44684 )

2026-05-07 22:21:22 -06:00

44391-vuln-scan-product-index

Creating product index to speed up vulnerability scanning (#44910 )

2026-05-07 22:20:58 -06:00

44422-list-mdm-commands-host-identifier-after

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297 )

2026-04-30 15:44:19 -05:00

44456-validate-payload-scope-dry-run

validate apple payload scope conflict, and unknown variable use in dry-run (#45139 )

2026-05-12 08:51:30 +02:00

44459-recovery-password-key-team-transfer

Recovery Key can be viewed after team transfer if still present (#45280 )

2026-05-13 09:20:37 -04:00

44533-request-pem-certificate

Allow returning x509 PEM cert instead of PEM-encoded PKCS7 envelope from request_certificate endpoint (#44541 )

2026-05-04 09:51:50 -04:00

44696-add-list-software-perms-for-gitops

Allow GitOps user to list software (#44721 )

2026-05-05 13:27:57 -05:00

44798-scope-windows-mdm-profiles-query

Scope windows mdm profile removal query (#45203 )

2026-05-12 11:49:33 -05:00

44801-end-user-auth-windows-linux-only

Fixed validation that rejected enabling end user authentication on Fleet deployments without Apple MDM configured (#45162 )

2026-05-11 14:55:16 -05:00

44816-fast-fail-device-auth

Check device auth token individual before querying host tables on auth (#44817 )

2026-05-06 16:55:35 -03:00

44950-gitops-null-label-id

Fix GitOps failure when moving labels from global to fleet scope (#44983 )

2026-05-08 07:49:23 +02:00

44980-always-assign-profile-missing-devices

always assign profile to missing devices due to replica lag (#45008 )

2026-05-08 15:33:36 +02:00

45018-export-host-bug

Fleet UI: Fix export button dependencies (#45020 )

2026-05-08 15:32:37 -04:00

45024-android-sso-missing-profile

Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046 )

2026-05-12 12:42:16 -04:00

45141-edit-label-form-mention-fleets

LabelForm: replace 'teams' with 'fleets' (#44770 )

2026-05-11 16:50:49 +02:00

45256-reduce-fleet-and-fleetctl-binary-sizes

Reduce fleet and fleetctl binary sizes by removing debug symbols (#45260 )

2026-05-12 15:14:05 -03:00

415640-policy-reports-new-custom-option

Add include_all label scope to policies and reports (#44305 )

2026-04-30 11:28:30 -04:00

add-svg-support-custom-logos

Add SVG support for custom organization logos (#44748 )

2026-05-06 15:20:53 +02:00

cleanup-list-opts

🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385 )

2026-05-05 10:26:47 -04:00

docs-read-replica-config-clarity

Docs: Clarify MySQL read replica config is independent from primary (#43013 )

2026-04-08 17:43:14 -05:00

fix-android-host-software-filter

fix(android): remove tautological NCR filter in hostVPPInstalls (#42873 )

2026-04-30 15:30:19 +01:00

fix-get-policy-id-endpoint-and-unify-access-in-ui

Fix get policy by id endpoint and unify access in UI (#45048 )

2026-05-11 09:39:52 -03:00

fix-gitops-controls-set-criteria

Fix gitops controls set criteria (#45007 )

2026-05-08 22:43:09 +02:00

fix-hosts-in-label-filtering

Fix filtering in /api/v1/fleet/labels/:id/hosts endpoint (#44293 )

2026-04-29 10:43:39 -03:00

fix-mdm-commands-filtering

Improve filtering on commands endpoints (#44426 )

2026-04-29 16:08:49 -04:00

fleetd-base-windows-secret

Don't write the secret.txt when the secret is the dummy placeholder value (#45041 )

2026-05-08 15:26:33 -04:00

input-field-to-ts

🤖 Switch InputField + InputFieldWithIcon JSX components to TS, add more test coverage, fix Storybook build (#43307 )

2026-04-09 08:41:48 -05:00

issue-40809-bitlocker-loop

Bitlocker: do not decrypt already encrypted drive. (#43130 )

2026-04-09 18:33:03 -04:00

ts6

Update to TypeScript 6.0 (#43141 )

2026-04-09 08:28:59 -05:00

turn-off-prom-in-dev-mode

Don't turn Prometheus on in --dev mode (#43129 )

2026-04-07 12:01:26 -05:00

update-go-1.26.2

Update go to 1.26.2 and update tooling to update it (#43771 )

2026-04-20 13:40:57 -03:00

update-go-1.26.3

Bump Go to 1.26.3 to clear stdlib CVEs (#45277 )

2026-05-12 17:19:16 -05:00