Lucas Manuel Rodriguez 863363561b Fix fleet-scoped host vitals labels (#46953) ...

**Related issue:** Resolves #46869

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Bug Fixes**
* Host vitals labels based on identity-provider group membership now
correctly apply to both global and team-scoped hosts, preventing
cross-team leakage.

* **Tests**
* Added and updated tests to validate IdP-group-backed vitals label
membership across global and per-team hosts.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-06-08 10:46:56 -03:00

..

.keep

…

4890-optimize-label-query

Optimize ListLabels host-count query

2026-06-05 12:29:30 -04:00

16054-target-search-secret-leak

POST /api/latest/fleet/targets returns more info than needed (#46082)

2026-05-27 11:33:05 -04:00

32073-cpie-integration-test2

Add combined include/exclude label targeting for MDM profiles (API and GitOps) (#46437)

2026-06-03 15:24:33 +01:00

34668-resend-config-profiles-on-no-idp-user

resend config profiles on no device mapping user (#46623)

2026-06-03 10:18:34 +02:00

35148-python-cve-false-positives

Add rules to deal with some python CVE false positives (#46673)

2026-06-05 16:21:09 -04:00

38802-deploy-custom-os-updates-profile

CSUD: Add validation for OS Update profiles and OS updates being configured (#46545)

2026-06-02 17:28:58 +02:00

40303-gcs-iam-auth

Add GCS IAM authentication for S3-compatible storage (#40303) (#40374)

2026-06-05 09:04:35 -05:00

40362-foreign-key-constraint-policy-membership

Fix FK constraint failure in RecordPolicyQueryExecutions when policy deleted mid-flight (#46587)

2026-06-02 08:45:51 -04:00

41053-android-host-names

Better android host names (#46135)

2026-05-26 15:19:14 -05:00

41683-android-lock-wipe-clear-passcode

Remove unenroll pending and add Android COBO wipe to Free (#46653)

2026-06-02 18:59:13 -05:00

41781-macos-primary-account-type

support standard and none end user account types (#46179)

2026-05-29 09:33:02 +02:00

41783-technician-transfer-hosts

…

42219-windows-profile-syncml-validation

Windows MDM validation fixes (#46029)

2026-05-24 08:02:01 -05:00

42224-windows-locuri-format-validation

Windows MDM validation fixes (#46029)

2026-05-24 08:02:01 -05:00

42249-hide-rotate-password-observer

Hide "Rotate password" button for Observer role in Recovery Lock modal (#45649)

2026-05-28 15:45:16 -04:00

42288-ses-sender-domain

…

42427-stale-mdm-profiles-reconciler-fix

Fixed stale pending MDM profiles reappearing (#46111)

2026-05-26 19:34:44 -05:00

42508-rename-abm-to-ab

42508 Rename abm to ab in API (#46657)

2026-06-03 14:58:17 -04:00

42651-continuous-policy-automations

Add backend changes for continuous automations on policies (#45999)

2026-05-26 21:11:18 -03:00

42651-policy-automations-continuous-retry

Easier-to-manage policy automations with continuous retry option (#46056)

2026-06-03 09:22:54 -03:00

42744-setup-experience-edit-software

Make software installer edits not cancel setup experience installs (#46236)

2026-05-27 13:52:58 -04:00

42757-okta-conditional-access-duplicate-scep-cert-cleanup

Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)

2026-06-05 16:20:32 -04:00

43030-fix-software-versions-too-many-placeholders

Fix GET /software/versions 422 too many placeholders without per_page (#45737)

2026-05-28 17:11:04 -04:00

43045-s3-carve-cleanup-never-runs

Fix S3 carve cleanup never running and panic on empty carves (#43045) (#46462)

2026-06-01 10:11:49 -04:00

43116-fix-linux-wipe-btrfs-snapshots

43116 fix Fedora wipe btrfs snapshots (#45704)

2026-06-02 10:14:02 +01:00

43319-fix-scep-pkiop-url-query-plus-sign

Fix "400 bad request" from SCEP PKIOperation when base64 message contains "+" (#43319)

2026-06-04 20:21:26 -04:00

43456-android-profile-checksum

Android profile content checksums (#46276)

2026-05-28 16:50:33 -05:00

43722-macos_applications-filter-backend

Add macos_applications filter for host software list (#46223)

2026-06-05 11:59:43 -04:00

43729-show-software-gitops-will-delete.md

Track software deletions in GitOps (#46764)

2026-06-04 13:11:49 -05:00

43757-command-palette

Fleet UI: "Fleet spotlight" (Command palette menu) (#43756)

2026-05-28 09:25:54 -04:00

43773-windows-mdm-relaxed-poll

fleetd Windows MDM wake (push vs poll) (#46594)

2026-06-03 17:38:14 -05:00

43863-fma-replace-list-install-label-mismatch

Fix host software label scope after FMA replacement (#46649)

2026-06-02 15:09:21 -04:00

43895-host-my-device-link

…

44053-improve-env-var-error-msg

Update error message in GitOps when unknown env vars are encountered (#46476)

2026-06-02 14:48:06 -05:00

44440-lower-clean-lock-timeout

Decrease lock state cleanup time to 1 minute (#46730)

2026-06-05 15:41:03 +02:00

44652-trace-sampler

Added trace sampler to use OTEL in prod. (#46595)

2026-06-02 18:53:00 -05:00

44805-fix-custom-variable-modal-clears-on-focus-switch

Fix custom variable modal clearing when switching browser focus

2026-06-05 16:11:30 -04:00

44821-certificate-template-err

Certificate template duplicate name error (#46414)

2026-06-01 10:01:47 -05:00

44854-1password-autofill-icon-interferes-with

Stop 1Password autofill icon from interfering with Fleet UI form fields (#46808)

2026-06-05 09:15:04 -03:00

44901-ui-add-host-modal-read-only-resize

Fix resizable read-only installer command in Add host modal (#46806)

2026-06-05 09:09:00 -03:00

44970-fix-apply

Fix fleetctl get fleets to use source of truth (DB) for software (#46480)

2026-06-01 11:41:34 -03:00

44970-get-fleets-setup-experience

Fix fleetctl get fleets to use source of truth (DB) for software (#46480)

2026-06-01 11:41:34 -03:00

45022-android-profile-cert-race-condition

Android provision certificates before dependent profiles (#46759)

2026-06-03 20:46:08 -05:00

45066-windows-idp-device-mapping

…

45091-suppress-offline-banner-recent-enrollment

Fixed the "host is offline" banner on the My device page incorrectly appearing (#46091)

2026-05-22 18:37:57 -05:00

45107-android-enterprise-errors

Surface real error message on android enterprise connect (#46466)

2026-05-29 14:44:42 -05:00

45110-linux-vuln-coverage-docs

Update CVE documentation to list Linux distributions supported (#46828)

2026-06-05 16:22:39 -04:00

45190-patch-policy-wrong-installer-automation

…

45192-duplicate-dep-host-delete

Fix restoration of DEP hosts when a duplicate exists (#46815)

2026-06-05 08:30:56 -04:00

45227-long-policy-res

Fleet UI: Allow DataSet value to wrap, apply to policy (#46733)

2026-06-03 15:17:27 -04:00

45263-android-transfer-bug

Preserve android device team assignment (#46868)

2026-06-05 14:18:16 -05:00

45306-update-gitops-exceptions-error

Update error message for GitOps exceptions violations (#46700)

2026-06-04 09:50:04 -05:00

45369-ade-filevault-query

Fix FileVault key escrow on ADE-enrolled Macs (#45928)

2026-05-28 16:18:12 -04:00

45380-windows-mdm-enrollment-row-linkage

windows_mdm: link enrollment row via DevDetail at first management session (#46268)

2026-06-02 09:41:07 -05:00

45441-bootstrap-package-not-found-not-handled

Handle not found bootstrap package in GitOps flows (#46802)

2026-06-05 11:48:13 +02:00

45602-vuln-corrupted-download

Don't process empty vuln data and remove existing records (#46075)

2026-05-27 17:08:47 -04:00

45635-shared-reconcile-primitives

Extract platform-neutral MDM reconcile label primitives (#47032)

2026-06-08 12:28:27 +01:00

45711-android-os-version-filter

…

45789-fix-checkerboard-relative-scale

…

45843-vuln-cursor-pagination

Fix ListVulnerabilities cursor pagination with ambiguous column names (#45983)

2026-06-04 20:17:28 -04:00

45862-android-enterprise-page-refresh

…

45969-list-certificate-templates-null

…

46066-fix-on-automatic-mdm-status-display

Use new MDM status on hosts page and show tooltip; show "Not supported" for Linux (#46377)

2026-06-01 13:16:56 -05:00

46119-mdm-unenrolled-host-activity

Fixed the mdm_unenrolled activity not appearing in host details page (#46573)

2026-06-01 18:01:15 -05:00

46153-optimize-apple-profile-reconciler

Optimize Apple profile reconciler approach by moving logic to code (#45573)

2026-05-29 09:46:17 +02:00

46164-fix-patch-policy-wrong-slug

Fix GitOps policy install software parse function setting the wrong FMA slug field. (#46167)

2026-05-26 10:13:10 -04:00

46190-change-semantics-around-api-endpoints-init

Changed semantics around api_endpoints init.

2026-06-03 10:13:11 -04:00

46214-cert-rollover

Add cert rollover tool, update Filevault key decryption for rollover process (#46226)

2026-05-28 16:31:18 -04:00

46283-android-mdm-routing-bug

Corrected configuration profiles endpoint handler (#46580)

2026-06-01 15:23:20 -05:00

46338-host-cache-ttl-and-invalidation

Redis host cache optimizations (#46458)

2026-06-01 08:12:50 -05:00

46388-windows-entra-v2-access-tokens

Added support for validating Microsoft Entra v2 access tokens (#46416)

2026-06-01 17:58:51 -05:00

46554-refactor-listhostsoftware-modifyappconfig-nilaway

Refactored ListHostSoftware and ModifyAppConfig for nilaway (#46555)

2026-06-02 08:48:56 -05:00

46591-script-actions-keyboard

Fleet UI: Script action buttons now keyboard accessible (#46720)

2026-06-03 15:15:55 -04:00

46639-login-logout-redirects-ignore-url-prefix

Fix logout/login redirects in subpath deployments (#46715)

2026-06-03 10:12:48 -04:00

46640-fix-root-url-404-subpath-deployments

Fix root URL 404 in subpath deployments

2026-06-03 10:12:18 -04:00

46656-vpp-api-derecursion-oom

Fix VPP API retry recursion causing server OOM (#46659)

2026-06-02 16:18:02 -03:00

46869-idp-team-vitals-labels

Fix fleet-scoped host vitals labels (#46953)

2026-06-08 10:46:56 -03:00

clean-up-policy-query-builder

Clean up policy query to use parameter binding for platform filter (#46604)

2026-06-01 18:15:02 -04:00

default-columns-agent

feat: replace osquery column with agent column on hosts page (#44811)

2026-06-05 09:18:02 -05:00

fix-iOS-iPadOS-logo-in-dark-theme

…

fix-preview-historical-data

Fix preview config (#46677)

2026-06-04 09:49:47 -05:00

fix-show-example-payload-gitops-mode

Enable "Show example payload" buttons in GitOps mode (#46355)

2026-05-29 05:27:46 -05:00

hosts-enrolled-tooltip-percentage

Dashboard: show each platform's percentage of total hosts in the "Hosts enrolled" tooltip (#46477)

2026-06-04 08:19:12 -05:00

in-house-app-install-tokens

Auth in-house iOS app downloads with install tokens (#46819)

2026-06-05 16:34:20 -04:00

migration-cleanup-script

Cleanup script for failed starts after renumbered migrations (#46177)

2026-05-27 11:04:45 +02:00