Sharon Katz cfa90d442e Add changelog for CIS Win11 v5.0.1 update (#45374) ...

## Summary
- Adds missing changelog entry for #45173 (CIS Win11 Enterprise
benchmark v4.0.0 to v5.0.1 update)

2026-05-13 12:27:58 -04:00

..

.keep

…

33555-better-error-handling-of-win-pre-install-setup

Update changelog for fleetd 1.55.0 release (#44733)

2026-05-05 19:18:08 -03:00

33557-inconsistent-team-name-conflicts

Enforce consistent fleet name uniqueness across UI and GitOps (#33557)

2026-04-23 16:44:09 -04:00

34103-sso-invite-accept

Fix SSO invite acceptance error when accepting invitation (#34103)

2026-05-07 12:25:24 -04:00

34104-smtp-starttls-error-message

Clarify SMTP TLS error and surface STARTTLS toggle (#34104)

2026-05-07 10:24:18 -04:00

34229-gitops-label-validation

Fix missing GitOps label validation for invalid field combinations (#44410)

2026-05-05 16:19:41 -04:00

34464-gitops-dry-run-manual-agent-install-script-conflict

Fix gitops dry-run to catch manual_agent_install + macos_script conflict (#44432)

2026-05-04 15:32:21 -04:00

34924-expired-license-cli-banner

Fixed bug with about to expire CLI banner (#34924)

2026-05-04 07:17:08 -04:00

35089-fleetctl-released-as-pkg

Create fleetctl pkg asset every release (#35089)

2026-05-07 10:04:07 -05:00

35171-macos-15-cis-2.0.0

Update macOS 15 to CIS Benchmark 2.0.0 (#43909)

2026-04-23 16:17:34 -04:00

35172-macos-14-cis-3.0

macOS 14 CIS benchmark v3.0.0 update (#43797)

2026-04-23 12:56:38 -04:00

35173-cis-macos-26-v1

Add macOS 26 Tahoe CIS benchmark v1.0.0 (#44090)

2026-04-29 17:15:25 -04:00

35195-slate-homebrew-cpe-mismatch

Fix homebrew package matching incorrect CPE (#45186)

2026-05-13 09:20:59 -04:00

35483-empty-states

Fleet UI: New empty states (#43896)

2026-04-27 17:54:34 -05:00

36976-activities-for-labels

Add activities for user actions on labels (#44522)

2026-05-01 10:19:45 -03:00

37012-host-details-activity-upcoming-count

Fix upcoming activity count not refreshing after host software install (#37012)

2026-05-11 10:38:20 -04:00

37142-local-admin-password-rotation

43885: MLAPR migration + UUID capture (#44244)

2026-04-29 11:14:50 -04:00

37682-clear-state-on-abm-re-enrollment

CSAH: clear state on ABM re-enrollment (#44722)

2026-05-06 09:57:58 +02:00

38348-allow-saving-invalid-sql

Allow saving policies with invalid SQL (#38348) (#43952)

2026-04-22 14:22:33 -04:00

38437-activity-list-date-filter-consistency

Make activity list end-date filter consistent (#38437)

2026-05-08 15:29:59 -04:00

38647-remove-duplicate-disk-encryption-activity

…

38785-windows-setup-experience-cancel

Revert "Partial revert of #38785 work-in-progress (#44061)" (#44285)

2026-04-28 13:35:50 -05:00

39016-upload-custom-org-logo

Add ability to upload custom org logos (#44390)

2026-05-05 14:42:52 +02:00

39096-cis-win11-v5

Add changelog for CIS Win11 v5.0.1 update (#45374)

2026-05-13 12:27:58 -04:00

39570-clear-passcode

…

39727-creating-queries-back-to-hosts-bug

Fix back-to-host-details button on report details page (#39727) (#45238)

2026-05-12 14:08:59 -04:00

40322-fix-ddm-pending-issues

Fix various DDM stuck remove/pending issues (#43382)

2026-04-22 13:05:09 -06:00

40322-make-ddm-name-check-case-insensitive

make DDM name check case insensitive (#43347)

2026-04-21 08:31:30 -06:00

40459-wipe-host-cancels-upcoming-activities

Wipe host cancels all upcoming activities (#44323)

2026-05-01 14:01:46 -06:00

40623-failed-enrollment-renewal

produce failed enrollment renewal activity (#44511)

2026-05-01 11:38:08 -06:00

40702-simplif-os-modal

…

40856-eula-upload-updated-to-default-max-request-body-size-and-error

Updated eula pdf upload size check to default max request body size (#43517)

2026-04-23 16:01:09 +01:00

40905-update-default-automatic-enrollment-profile

updated default profile, added endpoint for seeing what default is applied (#44236)

2026-04-28 07:38:15 -06:00

40952-fallback-team-script-execution-timeout-to-global

Bugfix: fallback the script execution timeout from agent options to global if not set for team (#43911)

2026-04-22 12:00:58 -04:00

41147-update-input-action-buttons

Update input action buttons app wide (#43906)

2026-04-21 17:54:05 -06:00

41167-skip-bootstrap-clear-on-cert-renewal

…

41381-eua-ms-installer

…

41472-android-cert-san-server

Add support for SAN in Android certificate templates. (#44690)

2026-05-06 14:43:09 -05:00

41565-policy-report-new-scopes-frontend

Add include_all label scope UI to policies and reports (#41565)

2026-05-04 07:16:09 -04:00

41566-policy-report-labels-gitops

Add include_all label scope to GitOps and fleetctl (#41566)

2026-05-05 15:13:22 -04:00

41568-enroll-page-enroll-button-update-to-full-width-for-larger-res-mobiles

Enroll page media screen max width updated (#43666)

2026-04-23 13:57:41 +01:00

41592-eua-broken-with-custom-apple-mdm-url‎

redirect to correct URL, and allow both URLs for MDM SSO SAML validation if set (#44156)

2026-04-29 08:43:58 -06:00

41676-update-APNS-cert-invalid-domain-error-message

41676 updated apple crs invalid domain error message (#43396)

2026-04-23 16:44:23 +01:00

41753-policy-details-page

…

41996-department-idp-host-vital-not-populating-for-some-users

Fix IdP department host vital missing when SCIM PATCH carries extra attrs (#41996)

2026-05-07 08:34:36 -04:00

42026-show-uninstall-button

Show uninstall button even if software title is not found in inventory (#45273)

2026-05-12 17:09:42 -04:00

42103-accept-89-on-profile-removal

…

42218-ios-supplemental-os-version-extra

42218 updated ios version number to include supplemental extra (#44727)

2026-05-07 15:16:31 +01:00

42240-add-gitops-stats

Adding gitOpsModeEnabled and gitOpsModeExceptions to anonymous statistics payload (#44161)

2026-04-27 08:28:49 -03:00

42290-wipe-activity

Windows wipe failed acivitiy (#43795)

2026-04-22 17:53:59 -05:00

42405-android-onc-after-cert

…

42427-cleanup-stale-mdm-profiles

…

42440-renew-ab-tokens-gitopsmode-dropdown-fix

updated AB tokens renew and delete options to enabled in gitops mode (#43510)

2026-04-27 17:45:34 +01:00

42477-gitops-dry-run-label-platform

Validate label platform during gitops --dry-run (#42477) (#44594)

2026-05-04 07:18:07 -04:00

42494-android-pubsub-panic-deleted-host

Fixed Android pubsub panic when host was deleted (#43788)

2026-04-21 16:01:51 -05:00

42503-deprecate-software-under-setup-experience

Officially deprecated setup_experience.software (#44549)

2026-05-11 13:49:11 -05:00

42522-labels-not-supported-in-no-team

Warn when labels key appears in no-team/unassigned GitOps files (#44865)

2026-05-11 09:54:59 -04:00

42545-skip-noop-host-writes

Don't update host values that didn't change (reduce writer load) (#43992)

2026-04-24 10:46:47 -05:00

42545-windows-profile-delete-batching

Reworked Windows profile delete batching (#44047)

2026-04-24 11:42:59 -05:00

42545-windows-profile-reconciliation-batching

Improved the performance of Windows MDM profile reconciliation (#44075)

2026-04-28 15:37:43 -05:00

42568-host-policy-empty-state

Fleet UI: Improve host policy empty modal (#43805)

2026-04-21 09:09:37 -04:00

42607-gitops-dry-run-empty-software

Short-circuit for empty software config in Gitops dry run (#44405)

2026-04-29 14:54:49 -04:00

42613-dedupe-network-errors-in-error-store

Dedupe network errors so usage_statistics cron stops failing (#45142)

2026-05-11 22:21:57 +02:00

42637-clear-stale-broken-label-associations

Clear stale broken label rows on profile batch upsert (#44847)

2026-05-07 16:10:15 +02:00

42675-conditional-download-cache

…

42741-fix-goval-dictionary-fd-leak

Fix FD leak in goval_dictionary Analyze (#42741) (#43983)

2026-04-29 12:31:04 -04:00

42751-r2-fma

…

42879-api-only-user-management-ui

…

42881-api-endpoints-initial-models

…

42882-42880-42884-allow-creation-of-api-only-users

…

42883-api-endpoint-for-listing-rest-api-endpoints

…

42885-api-only-endpoints-middleware

…

42886-fix-google-cal-gitops-validation

Fix google calendar key validation (#44556)

2026-05-11 13:41:28 -05:00

42930-show-retries-script-software-automations-host-details

Add host activity entries for retried software installs and script runs from policy automations (#45233)

2026-05-12 13:44:18 -03:00

42972-add-fleetctl-msi-to-release

Build fleetctl MSI packages (#43403)

2026-04-29 17:09:19 -05:00

42979-fix-for-multi-team-user

…

43031-post-queries-null-name-or-query-500

Fix POST /queries returning 500 on JSON null name/query (#43031)

2026-05-13 07:25:02 -04:00

43032-post-packs-null-name

Reject null name on POST /packs (#43032)

2026-05-13 07:24:06 -04:00

43070-fix-exceptions-padding

Update class on exceptions field to fix padding (#43927)

2026-04-22 11:53:31 -05:00

43114-pagination-bug

…

43135-fix-stale-label-hosts

Fix: Label shows outdated manually selected host after navigating back to the Edit page (#44216)

2026-04-27 21:09:28 +02:00

43142-script-package-icon-gitops

…

43162-software-table-bookmarkable-page

…

43222-support-fleet-variables-in-ddm

…

43228-dont-send-account-configuration-for-non-mac

don't send AccountConfiguration for non macs (#44085)

2026-04-24 09:40:52 -06:00

43279-my-device-page-location-vital-looks-clickable

Fix Location and MDM status vitals looking clickable on My device page (#43279)

2026-05-12 14:09:40 -04:00

43311-script-only-pkg-gitops

…

43341-gitops-mode-wonkiness

…

43342-improved-button-link-styling

…

43389-patch-policy-gitops-bugs

…

43484-msi-docker-on-arm64

Use Docker as default WiX runtime on macOS arm64 (#43715)

2026-04-21 10:53:46 -05:00

43511-gitops-icon-update-recovers

Fix gitops 500 when software title icon bytes are missing (#44735)

2026-05-05 18:47:16 -04:00

43591-fix-stale-host-activities

Fix: Navigating to a a new host displays activity feed for a previously opened host details page (#44218)

2026-04-27 19:06:06 +02:00

43598-fix-gitops-glob-path-validation

Allow glob literals in filenames (#44547)

2026-05-11 13:49:31 -05:00

43609-gitops-mode-false-positive-activity

Fix cond access bypass activity on unrelated app config saves

2026-05-13 09:38:36 -04:00

43640-actions-dropdown-auto-closing

fix Actions dropdown in Run script modal auto-closing (#45349)

2026-05-13 16:21:48 +02:00

43646-inconsistent-alignment-fleet-premium

inconsistent alignment fleet premium (#45125)

2026-05-11 19:22:53 +02:00

43656-scim-users-duplicate-host-id

Fix: SCIM user creation 500s when host already has a SCIM mapping (#44275)

2026-05-11 16:28:46 +02:00

43659-script-only-hash-ref-preserves-install-script

Fix script-only packages not setting install script file (#44299)

2026-04-28 13:37:03 -04:00

43688-fix-text-alignment-issues

Fleet UI: Fix dataset text alignment (#44659)

2026-05-05 08:50:18 -04:00

43721-clean-up-gitops-errors

Remove verb and url from gitops errors (#44555)

2026-05-11 13:48:52 -05:00

43738-duplicate-installers

🤖 Fix GitOps leaving duplicate software installer rows (#43903)

2026-04-22 13:48:56 -04:00

43767-delete-label-error-msg

Fleet UI: Improved error message when deleting a label that is for targeting a software installation (#44320)

2026-04-28 15:53:28 -04:00

43769-added-charts-to-dashboard

Allow disabling chart datasets: frontend (#44797)

2026-05-06 16:28:37 -05:00

43846-vpp-app-store-non-us-abm

Support VPP apps from non-US App Store regions (#44368)

2026-05-06 12:01:07 -04:00

43857-improve-error-on-missing-gitops-name

Improve name key validation in GitOps (#44553)

2026-05-11 13:49:02 -05:00

43910-implement-chart-module

Dashboard charts backend (#43910)

2026-04-23 12:43:23 -05:00

43928-host-by-nodekey-cache

Redis-backed cache for host-by-key lookups (#43936)

2026-05-01 12:06:16 -05:00

43955-gitops-escape-json-in-vars

Bugfix: escape characters not supported in JSON when resolving variables (#43955)

2026-04-23 10:34:12 -06:00

43959-duplicate-installers

Check for duplicate linux software installers (#44234)

2026-04-27 17:14:47 -04:00

43978-fma-sync-bundle-identifier-index

Added an index on software.bundle_identifier (#43979)

2026-04-22 14:30:43 -05:00

44046-create-team-labels-before-consumers

Apply labels before consumers in GitOps (#45194)

2026-05-12 17:15:33 -05:00

44071-team-transfer-race-with-update-host

Fixed a race where a host could silently revert to its previous team (#44074)

2026-04-24 14:34:37 -05:00

44082-add-script-output-to-gitops

add script output to GitOps (#44728)

2026-05-07 09:38:25 +02:00

44084-fix-install-loop-on-deleted-installer

Bound orbit retries on missing installer details to 5 mins (#44284)

2026-04-28 12:58:10 -04:00

44111-scep-autorenew-fail

Recover stuck SCEP managed-cert state via matcher extension (#44691)

2026-05-07 11:52:25 -06:00

44124-add-vulnerabilities-chart

Add Vulnerabilities exposure dataset (#44124)

2026-04-29 09:30:31 -05:00

44127-remove-unused-windows_updates

Remove unused windows_updates MySQL table and ingestion (#44128)

2026-04-24 15:21:34 -03:00

44170-list-mdm-commands-perf

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297)

2026-04-30 15:44:19 -05:00

44189-host-profile-perf

Windows MDM improved host profile status performance (#44225)

2026-04-27 20:09:27 -05:00

44190-mdm-queue-cleanup

Periodic background job to cleanup Windows MDM command queue (#44458)

2026-05-04 11:32:45 -05:00

44194-team-bitlocker-windows-only

Enable disk encryption when only Windows MDM is configured. (#44462)

2026-05-01 09:19:34 -05:00

44196-script-library-gitops-fixes

fix UI elements in script library not respecting GitOps mode (#44743)

2026-05-05 18:56:18 +02:00

44198-ios-refetch-defensive-decoding

🤖 #44198: Add guards on iOS/iPadOS refetch paths (#44205)

2026-04-27 12:02:34 -04:00

44242-fleetctl-vuln-data-stream-osv

fleetctl vulnerability-data-stream to download OSV data (#44260)

2026-04-30 10:46:51 -06:00

44252-unable-to-edit-existing-user-to-use-2fa-422-error

Fixed patch logic on EditUperPage component (#44302)

2026-04-28 13:24:24 -04:00

44286-deleted-policy-activity-for-patch-policies

Fix missing deleted_policy activity for auto-cleaned patch policies (#45045)

2026-05-09 00:33:00 -04:00

44298-fix-goquery-dependency-side-effects

Fix issue with fleet's docker image in k8s environments (#44373)

2026-04-29 11:19:13 -03:00

44333-gitops-custom-org-logo-upload

GitOps changes for custom org's logo uploads (#44550)

2026-05-05 18:18:08 +02:00

44376-stale-apns-push-cert-not-updated

check push cert staleness after 5 minutes of in-memory cache time (#44919)

2026-05-08 11:02:22 +02:00

44391-osv-vuln-optimizations

Optimize OSV vulnerability scanning (#44684)

2026-05-07 22:21:22 -06:00

44391-vuln-scan-product-index

Creating product index to speed up vulnerability scanning (#44910)

2026-05-07 22:20:58 -06:00

44422-list-mdm-commands-host-identifier-after

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297)

2026-04-30 15:44:19 -05:00

44456-validate-payload-scope-dry-run

validate apple payload scope conflict, and unknown variable use in dry-run (#45139)

2026-05-12 08:51:30 +02:00

44459-recovery-password-key-team-transfer

Recovery Key can be viewed after team transfer if still present (#45280)

2026-05-13 09:20:37 -04:00

44533-request-pem-certificate

Allow returning x509 PEM cert instead of PEM-encoded PKCS7 envelope from request_certificate endpoint (#44541)

2026-05-04 09:51:50 -04:00

44696-add-list-software-perms-for-gitops

Allow GitOps user to list software (#44721)

2026-05-05 13:27:57 -05:00

44798-scope-windows-mdm-profiles-query

Scope windows mdm profile removal query (#45203)

2026-05-12 11:49:33 -05:00

44801-end-user-auth-windows-linux-only

Fixed validation that rejected enabling end user authentication on Fleet deployments without Apple MDM configured (#45162)

2026-05-11 14:55:16 -05:00

44816-fast-fail-device-auth

Check device auth token individual before querying host tables on auth (#44817)

2026-05-06 16:55:35 -03:00

44950-gitops-null-label-id

Fix GitOps failure when moving labels from global to fleet scope (#44983)

2026-05-08 07:49:23 +02:00

44980-always-assign-profile-missing-devices

always assign profile to missing devices due to replica lag (#45008)

2026-05-08 15:33:36 +02:00

45018-export-host-bug

Fleet UI: Fix export button dependencies (#45020)

2026-05-08 15:32:37 -04:00

45024-android-sso-missing-profile

Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046)

2026-05-12 12:42:16 -04:00

45141-edit-label-form-mention-fleets

LabelForm: replace 'teams' with 'fleets' (#44770)

2026-05-11 16:50:49 +02:00

45256-reduce-fleet-and-fleetctl-binary-sizes

Reduce fleet and fleetctl binary sizes by removing debug symbols (#45260)

2026-05-12 15:14:05 -03:00

415640-policy-reports-new-custom-option

Add include_all label scope to policies and reports (#44305)

2026-04-30 11:28:30 -04:00

add-svg-support-custom-logos

Add SVG support for custom organization logos (#44748)

2026-05-06 15:20:53 +02:00

cleanup-list-opts

🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385)

2026-05-05 10:26:47 -04:00

docs-read-replica-config-clarity

…

fix-android-host-software-filter

fix(android): remove tautological NCR filter in hostVPPInstalls (#42873)

2026-04-30 15:30:19 +01:00

fix-get-policy-id-endpoint-and-unify-access-in-ui

Fix get policy by id endpoint and unify access in UI (#45048)

2026-05-11 09:39:52 -03:00

fix-gitops-controls-set-criteria

Fix gitops controls set criteria (#45007)

2026-05-08 22:43:09 +02:00

fix-hosts-in-label-filtering

Fix filtering in /api/v1/fleet/labels/:id/hosts endpoint (#44293)

2026-04-29 10:43:39 -03:00

fix-mdm-commands-filtering

Improve filtering on commands endpoints (#44426)

2026-04-29 16:08:49 -04:00

fleetd-base-windows-secret

Don't write the secret.txt when the secret is the dummy placeholder value (#45041)

2026-05-08 15:26:33 -04:00

input-field-to-ts

…

issue-40809-bitlocker-loop

…

ts6

…

turn-off-prom-in-dev-mode

…

update-go-1.26.2

…

update-go-1.26.3

Bump Go to 1.26.3 to clear stdlib CVEs (#45277)

2026-05-12 17:19:16 -05:00