Juan Fernandez e1512dacc9 Fix nil-pointer panic in Android Enterprise Pub/Sub endpoint (#45520) ...

Fixes #45520 

The Pub/Sub status-report and enrollment handlers dereferenced
device.HardwareInfo before any nil check, so a payload from Google's
Android Management API with hardwareInfo omitted panicked the request
goroutine.

2026-05-18 13:29:45 -04:00

..

.keep

…

31138-user-enrolled-software-install

gkarr 44008 setup experience (#45202)

2026-05-15 12:35:26 -05:00

33555-better-error-handling-of-win-pre-install-setup

Update changelog for fleetd 1.55.0 release (#44733)

2026-05-05 19:18:08 -03:00

34103-sso-invite-accept

Fix SSO invite acceptance error when accepting invitation (#34103)

2026-05-07 12:25:24 -04:00

34104-smtp-starttls-error-message

Clarify SMTP TLS error and surface STARTTLS toggle (#34104)

2026-05-07 10:24:18 -04:00

34229-gitops-label-validation

Fix missing GitOps label validation for invalid field combinations (#44410)

2026-05-05 16:19:41 -04:00

34464-gitops-dry-run-manual-agent-install-script-conflict

Fix gitops dry-run to catch manual_agent_install + macos_script conflict (#44432)

2026-05-04 15:32:21 -04:00

34924-expired-license-cli-banner

Fixed bug with about to expire CLI banner (#34924)

2026-05-04 07:17:08 -04:00

35089-fleetctl-released-as-pkg

Create fleetctl pkg asset every release (#35089)

2026-05-07 10:04:07 -05:00

35173-cis-macos-26-v1

Add macOS 26 Tahoe CIS benchmark v1.0.0 (#44090)

2026-04-29 17:15:25 -04:00

35195-slate-homebrew-cpe-mismatch

Fix homebrew package matching incorrect CPE (#45186)

2026-05-13 09:20:59 -04:00

35483-empty-states

…

36976-activities-for-labels

Add activities for user actions on labels (#44522)

2026-05-01 10:19:45 -03:00

37012-host-details-activity-upcoming-count

Fix upcoming activity count not refreshing after host software install (#37012)

2026-05-11 10:38:20 -04:00

37142-local-admin-password-rotation

43885: MLAPR migration + UUID capture (#44244)

2026-04-29 11:14:50 -04:00

37682-clear-state-on-abm-re-enrollment

CSAH: clear state on ABM re-enrollment (#44722)

2026-05-06 09:57:58 +02:00

38437-activity-list-date-filter-consistency

Make activity list end-date filter consistent (#38437)

2026-05-08 15:29:59 -04:00

38785-windows-setup-experience-cancel

Revert "Partial revert of #38785 work-in-progress (#44061)" (#44285)

2026-04-28 13:35:50 -05:00

38790-ios-ipados-managed-app-configuration

Fleet UI: Update error messages for config variables (#45467)

2026-05-15 07:15:29 -04:00

39016-upload-custom-org-logo

Add ability to upload custom org logos (#44390)

2026-05-05 14:42:52 +02:00

39096-cis-win11-v5

Add changelog for CIS Win11 v5.0.1 update (#45374)

2026-05-13 12:27:58 -04:00

39727-creating-queries-back-to-hosts-bug

Fix back-to-host-details button on report details page (#39727) (#45238)

2026-05-12 14:08:59 -04:00

40459-wipe-host-cancels-upcoming-activities

Wipe host cancels all upcoming activities (#44323)

2026-05-01 14:01:46 -06:00

40623-failed-enrollment-renewal

produce failed enrollment renewal activity (#44511)

2026-05-01 11:38:08 -06:00

40905-update-default-automatic-enrollment-profile

…

41472-android-cert-san-server

Add support for SAN in Android certificate templates. (#44690)

2026-05-06 14:43:09 -05:00

41565-policy-report-new-scopes-frontend

Add include_all label scope UI to policies and reports (#41565)

2026-05-04 07:16:09 -04:00

41566-policy-report-labels-gitops

Add include_all label scope to GitOps and fleetctl (#41566)

2026-05-05 15:13:22 -04:00

41592-eua-broken-with-custom-apple-mdm-url‎

redirect to correct URL, and allow both URLs for MDM SSO SAML validation if set (#44156)

2026-04-29 08:43:58 -06:00

41985-idp-host-vitals-tahoe-migration

Fix IdP host vitals not populating for MDM-migrated hosts (#41985)

2026-05-13 15:16:55 -04:00

41996-department-idp-host-vital-not-populating-for-some-users

Fix IdP department host vital missing when SCIM PATCH carries extra attrs (#41996)

2026-05-07 08:34:36 -04:00

42026-show-uninstall-button

Show uninstall button even if software title is not found in inventory (#45273)

2026-05-12 17:09:42 -04:00

42218-ios-supplemental-os-version-extra

42218 updated ios version number to include supplemental extra (#44727)

2026-05-07 15:16:31 +01:00

42477-gitops-dry-run-label-platform

Validate label platform during gitops --dry-run (#42477) (#44594)

2026-05-04 07:18:07 -04:00

42503-deprecate-software-under-setup-experience

Officially deprecated setup_experience.software (#44549)

2026-05-11 13:49:11 -05:00

42522-labels-not-supported-in-no-team

Warn when labels key appears in no-team/unassigned GitOps files (#44865)

2026-05-11 09:54:59 -04:00

42545-windows-profile-reconciliation-batching

Improved the performance of Windows MDM profile reconciliation (#44075)

2026-04-28 15:37:43 -05:00

42607-gitops-dry-run-empty-software

Short-circuit for empty software config in Gitops dry run (#44405)

2026-04-29 14:54:49 -04:00

42613-dedupe-network-errors-in-error-store

Dedupe network errors so usage_statistics cron stops failing (#45142)

2026-05-11 22:21:57 +02:00

42637-clear-stale-broken-label-associations

Clear stale broken label rows on profile batch upsert (#44847)

2026-05-07 16:10:15 +02:00

42741-fix-goval-dictionary-fd-leak

Fix FD leak in goval_dictionary Analyze (#42741) (#43983)

2026-04-29 12:31:04 -04:00

42874-saml-jit-empty-role-values

Fix SAML JIT login failing when role attributes have empty values (#42874)

2026-05-18 12:13:19 -04:00

42886-fix-google-cal-gitops-validation

Fix google calendar key validation (#44556)

2026-05-11 13:41:28 -05:00

42930-show-retries-script-software-automations-host-details

Add host activity entries for retried software installs and script runs from policy automations (#45233)

2026-05-12 13:44:18 -03:00

42972-add-fleetctl-msi-to-release

Build fleetctl MSI packages (#43403)

2026-04-29 17:09:19 -05:00

43027-return-404-for-missing-resources

Return 404's for not found resources in some batch script endpoints (#45348)

2026-05-15 07:59:36 +02:00

43031-post-queries-null-name-or-query-500

Fix POST /queries returning 500 on JSON null name/query (#43031)

2026-05-13 07:25:02 -04:00

43032-post-packs-null-name

Reject null name on POST /packs (#43032)

2026-05-13 07:24:06 -04:00

43091-inaccurate-total-disk-space

Fix double-counted Linux disk space from bind-mounted filesystems (#44969)

2026-05-15 08:48:17 +02:00

43135-fix-stale-label-hosts

…

43279-my-device-page-location-vital-looks-clickable

Fix Location and MDM status vitals looking clickable on My device page (#43279)

2026-05-12 14:09:40 -04:00

43294-sticky-team-enrollment

Made host team assignment sticky across orbit and osquery re-enrollments (#45339)

2026-05-14 10:14:49 -03:00

43511-gitops-icon-update-recovers

Fix gitops 500 when software title icon bytes are missing (#44735)

2026-05-05 18:47:16 -04:00

43598-fix-gitops-glob-path-validation

Allow glob literals in filenames (#44547)

2026-05-11 13:49:31 -05:00

43609-gitops-mode-false-positive-activity

Fix cond access bypass activity on unrelated app config saves

2026-05-13 09:38:36 -04:00

43640-actions-dropdown-auto-closing

fix Actions dropdown in Run script modal auto-closing (#45349)

2026-05-13 16:21:48 +02:00

43643-conditional-access-header-fleet-free

Add missing header on Fleet free for Conditional Access (#43643)

2026-05-15 08:03:40 -04:00

43645-timestamps-are-not-consistently-styled-as-hoverable-missing-dotted-underlines

Fixed cursor style on timestamps shown on host Vitals (#43645)

2026-05-15 07:31:34 -04:00

43646-inconsistent-alignment-fleet-premium

inconsistent alignment fleet premium (#45125)

2026-05-11 19:22:53 +02:00

43647-close-policy-details-modal-when-navigating-back-to-host-details

fix: close policy details modal when navigating back to host details (#45394)

2026-05-15 08:39:26 +02:00

43656-scim-users-duplicate-host-id

Fix: SCIM user creation 500s when host already has a SCIM mapping (#44275)

2026-05-11 16:28:46 +02:00

43659-script-only-hash-ref-preserves-install-script

Fix script-only packages not setting install script file (#44299)

2026-04-28 13:37:03 -04:00

43673-sort-software-titles-by-display-name

Sort software titles by display name instead of installer filename (#44873)

2026-05-14 12:55:16 -04:00

43688-fix-text-alignment-issues

Fleet UI: Fix dataset text alignment (#44659)

2026-05-05 08:50:18 -04:00

43721-clean-up-gitops-errors

Remove verb and url from gitops errors (#44555)

2026-05-11 13:48:52 -05:00

43767-delete-label-error-msg

Fleet UI: Improved error message when deleting a label that is for targeting a software installation (#44320)

2026-04-28 15:53:28 -04:00

43769-added-charts-to-dashboard

Allow disabling chart datasets: frontend (#44797)

2026-05-06 16:28:37 -05:00

43846-vpp-app-store-non-us-abm

Support VPP apps from non-US App Store regions (#44368)

2026-05-06 12:01:07 -04:00

43857-improve-error-on-missing-gitops-name

Improve name key validation in GitOps (#44553)

2026-05-11 13:49:02 -05:00

43928-host-by-nodekey-cache

Redis-backed cache for host-by-key lookups (#43936)

2026-05-01 12:06:16 -05:00

43959-duplicate-installers

…

43984-setup-experience-users-ui-updates

43984 setup experience psso UI updates (#45023)

2026-05-14 15:35:14 +01:00

43997-orbit-debug-logging-on-enroll

Add server-side orbit debug logging enablement - currently only configurable as a duration-after-enrollment setting (#45367)

2026-05-14 13:32:02 -04:00

44046-create-team-labels-before-consumers

Apply labels before consumers in GitOps (#45194)

2026-05-12 17:15:33 -05:00

44082-add-script-output-to-gitops

add script output to GitOps (#44728)

2026-05-07 09:38:25 +02:00

44084-fix-install-loop-on-deleted-installer

…

44111-scep-autorenew-fail

Recover stuck SCEP managed-cert state via matcher extension (#44691)

2026-05-07 11:52:25 -06:00

44124-add-vulnerabilities-chart

Add Vulnerabilities exposure dataset (#44124)

2026-04-29 09:30:31 -05:00

44170-fleetctl-mdm-commands-require-host

fleetctl get mdm-commands now requires the --host flag (#45476)

2026-05-14 12:58:52 -05:00

44170-list-mdm-commands-perf

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297)

2026-04-30 15:44:19 -05:00

44189-host-profile-perf

…

44190-mdm-queue-cleanup

Periodic background job to cleanup Windows MDM command queue (#44458)

2026-05-04 11:32:45 -05:00

44194-team-bitlocker-windows-only

Enable disk encryption when only Windows MDM is configured. (#44462)

2026-05-01 09:19:34 -05:00

44196-script-library-gitops-fixes

fix UI elements in script library not respecting GitOps mode (#44743)

2026-05-05 18:56:18 +02:00

44242-fleetctl-vuln-data-stream-osv

fleetctl vulnerability-data-stream to download OSV data (#44260)

2026-04-30 10:46:51 -06:00

44252-unable-to-edit-existing-user-to-use-2fa-422-error

…

44286-deleted-policy-activity-for-patch-policies

Fix missing deleted_policy activity for auto-cleaned patch policies (#45045)

2026-05-09 00:33:00 -04:00

44298-fix-goquery-dependency-side-effects

Fix issue with fleet's docker image in k8s environments (#44373)

2026-04-29 11:19:13 -03:00

44333-gitops-custom-org-logo-upload

GitOps changes for custom org's logo uploads (#44550)

2026-05-05 18:18:08 +02:00

44376-stale-apns-push-cert-not-updated

check push cert staleness after 5 minutes of in-memory cache time (#44919)

2026-05-08 11:02:22 +02:00

44391-osv-vuln-optimizations

Optimize OSV vulnerability scanning (#44684)

2026-05-07 22:21:22 -06:00

44391-vuln-scan-product-index

Creating product index to speed up vulnerability scanning (#44910)

2026-05-07 22:20:58 -06:00

44422-list-mdm-commands-host-identifier-after

Fixed GET /api/v1/fleet/commands timeout in large Fleet deployments (#44297)

2026-04-30 15:44:19 -05:00

44456-validate-payload-scope-dry-run

validate apple payload scope conflict, and unknown variable use in dry-run (#45139)

2026-05-12 08:51:30 +02:00

44459-recovery-password-key-team-transfer

Recovery Key can be viewed after team transfer if still present (#45280)

2026-05-13 09:20:37 -04:00

44533-request-pem-certificate

Allow returning x509 PEM cert instead of PEM-encoded PKCS7 envelope from request_certificate endpoint (#44541)

2026-05-04 09:51:50 -04:00

44630-fix-enable-host-users-default

Fix enable_host_users defaulting to false on fresh install (#45393)

2026-05-14 09:05:45 -04:00

44696-add-list-software-perms-for-gitops

Allow GitOps user to list software (#44721)

2026-05-05 13:27:57 -05:00

44798-scope-windows-mdm-profiles-query

Scope windows mdm profile removal query (#45203)

2026-05-12 11:49:33 -05:00

44801-end-user-auth-windows-linux-only

Fixed validation that rejected enabling end user authentication on Fleet deployments without Apple MDM configured (#45162)

2026-05-11 14:55:16 -05:00

44804-win-mdm-profile-bulk-insert

windows mdm profile bulk insert (#45401)

2026-05-14 11:00:43 -05:00

44816-fast-fail-device-auth

Check device auth token individual before querying host tables on auth (#44817)

2026-05-06 16:55:35 -03:00

44950-gitops-null-label-id

Fix GitOps failure when moving labels from global to fleet scope (#44983)

2026-05-08 07:49:23 +02:00

44980-always-assign-profile-missing-devices

always assign profile to missing devices due to replica lag (#45008)

2026-05-08 15:33:36 +02:00

45018-export-host-bug

Fleet UI: Fix export button dependencies (#45020)

2026-05-08 15:32:37 -04:00

45024-android-sso-missing-profile

Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046)

2026-05-12 12:42:16 -04:00

45141-edit-label-form-mention-fleets

LabelForm: replace 'teams' with 'fleets' (#44770)

2026-05-11 16:50:49 +02:00

45256-reduce-fleet-and-fleetctl-binary-sizes

Reduce fleet and fleetctl binary sizes by removing debug symbols (#45260)

2026-05-12 15:14:05 -03:00

45258-android-host-expiry-loop

Fixed Android hosts being auto-deleted by host expiry (#45471)

2026-05-14 10:02:11 -05:00

45330-gitops-mode-from-yaml

allow gitops mode to be set in yaml (#45537)

2026-05-15 11:21:10 -05:00

45491-mdm-name-from-server-url-nondeterministic

Fixed an issue where the MDM solution name reported for a host could flip between values across osquery ingestions (#45496)

2026-05-14 12:37:48 -05:00

45520-nil-pointer-panic-in-android-enterprise-pubsub-endpoint

Fix nil-pointer panic in Android Enterprise Pub/Sub endpoint (#45520)

2026-05-18 13:29:45 -04:00

415640-policy-reports-new-custom-option

Add include_all label scope to policies and reports (#44305)

2026-04-30 11:28:30 -04:00

add-svg-support-custom-logos

Add SVG support for custom organization logos (#44748)

2026-05-06 15:20:53 +02:00

cleanup-list-opts

🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385)

2026-05-05 10:26:47 -04:00

fix-android-host-software-filter

fix(android): remove tautological NCR filter in hostVPPInstalls (#42873)

2026-04-30 15:30:19 +01:00

fix-fleetctl-new-checkout-action

Fix checkout action version in fleetctl new template (#45502)

2026-05-14 16:38:04 -05:00

fix-get-policy-id-endpoint-and-unify-access-in-ui

Fix get policy by id endpoint and unify access in UI (#45048)

2026-05-11 09:39:52 -03:00

fix-gitops-controls-set-criteria

Fix gitops controls set criteria (#45007)

2026-05-08 22:43:09 +02:00

fix-hosts-in-label-filtering

Fix filtering in /api/v1/fleet/labels/:id/hosts endpoint (#44293)

2026-04-29 10:43:39 -03:00

fix-mdm-commands-filtering

Improve filtering on commands endpoints (#44426)

2026-04-29 16:08:49 -04:00

fleetd-base-windows-secret

Don't write the secret.txt when the secret is the dummy placeholder value (#45041)

2026-05-08 15:26:33 -04:00

update-go-1.26.3

Bump Go to 1.26.3 to clear stdlib CVEs (#45277)

2026-05-12 17:19:16 -05:00