Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases Wiki Activity
Files
e9ee26e70da80e5bab074902fc25b9e0ae267e62
fleet/changes
T
History
Victor Lyuboslavsky e9ee26e70d Added Android cert activity logging (#42608) 
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #37546 

Noah approved design here:
https://fleetdm.slack.com/archives/C09HG9VMRSS/p1774895365069069?thread_ts=1774647818.613419&cid=C09HG9VMRSS
Docs: https://github.com/fleetdm/fleet/pull/42609

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] QA'd all new/changed functionality manually


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Certificate installation activity logging for Android hosts (success &
failure)
* "Installed certificate" activity type displayed in host activity feed
with status
* Host activity card enabled on Android host details page to show
installs
  * Detailed install modal with error detail reveal when failures occur
  * Upcoming activities tab disabled for Android hosts where unsupported
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-31 16:26:39 -05:00
..
.keep
…
14276-post-json-redact-response-body
…
28091-vulnerabilities-cleanup
Added vulnerabilities cleanup cron (#41195)
2026-03-10 14:03:39 -05:00
29657-custom-settings-configuration-profiles
Rename custom settings to configuration profiles (#41250)
2026-03-25 10:07:53 +01:00
31303-citrix-workspace-resolved-in-version
Reapply "Update Citrix Workspace CPE generation to distinguish betwee… (#41614)
2026-03-12 16:17:40 -07:00
31914-patch-policy
Feat/31914 patch policy (#41518)
2026-03-13 16:47:09 -04:00
31921-windows-profile-verification-without-osquery
…
32026-last-opened-time
…
32126-macos-fleetd-reinstall
Fix fleetd in-band upgrade on macOS hosts (#42187)
2026-03-27 09:04:14 -03:00
32662-include-correct-cpe
Generate correct CPE from malformed ipswitch whatsup CPE, ensure matches relevant CVEs (#41704)
2026-03-16 16:17:47 -05:00
32773-preview-windows-mdm
Fix: Missing guide: How to try Windows MDM (fleetctl preview) (#42451)
2026-03-27 12:15:35 -03:00
33045-fleet-free-targetting-queries-by-label
Added license checks when targeting queries by label (33045) (#41255)
2026-03-09 16:54:53 -04:00
33106-fix-generate-gitops-vpp
Fix fleetctl generate-gitops failing to include VPP fleet assignments (#42429)
2026-03-26 19:06:51 -05:00
33418-windows-mdm-profile-deletion
SyncML <Delete> Windows profiles (#42206)
2026-03-26 18:25:54 -05:00
33421-ndes-windows
Added support for NDES CA for Windows hosts (#41356)
2026-03-12 15:36:44 -05:00
33427-batch-script-run-deleted-hosts-tooltip
…
33495-list-arch-linux-together
Trim ARM suffixes from arch linux OS names (#41656)
2026-03-13 12:14:22 -07:00
33714-inconsistent-use-of-hyphen-scripts-host-results-endpoint
Made Host Results endpoint URL consistent (33714) (#41501)
2026-03-13 14:00:26 -04:00
34068-software-install-retries
…
34433-speedup-macos-profile-delivery
speed up macOS profile delivery for initial enrollments (#41960)
2026-03-19 14:58:10 -05:00
35024-normalize-links-buttons
Fleet UI: Clean up link styling (#41485)
2026-03-12 14:11:14 -04:00
35067-windows-pro-missing-vulnerabilities
Fixed bug where Windows hosts would get 0 CVEs. (#42021)
2026-03-19 22:01:59 -05:00
35467-detail-query-config-preload
Reduced redundant database calls in the osquery distributed query results hot path (#42157)
2026-03-23 10:31:12 -05:00
35484-improve-policy_membership-contention
Improve contention around policy_membership table (35484) (#40853)
2026-03-16 15:12:25 -04:00
35528-wrong-title-platform
…
35799-software-titles
…
35805-zero-host-counts
…
36032-eua-account-name
…
36093-live-report-cross-team-targeting
Fix observer query bypass: prevent cross-team targeting (#40717)
2026-03-05 15:12:04 -03:00
36093-observer-query-bypass-followup
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
36312-trim-spaces-from-fleets-names
Trim spaces on Fleet's names (36312)
2026-03-18 12:20:23 -04:00
36321-filevault-banner-hide-for-new-enrollments
Improve UI for FileVault "action required" notifications banner (#41594)
2026-03-16 11:21:25 -05:00
36682-orphan-mdm-command-refs
Log orphan MDM command references instead of returning 500 (#40877)
2026-03-09 09:54:14 -03:00
36751-add-fmas-to-policy-automation
Implement FMA software policy automation (#42533)
2026-03-30 11:25:46 -05:00
36799-macos-disk-space-purgeable
Add disk_space fleetd table for accurate macOS disk space reporting (#41575)
2026-03-17 12:59:17 -03:00
37092-idp-throttle
Added per-IP rate limiting and response caching (#41516)
2026-03-13 15:21:16 -05:00
37249-use-username-idp-email-for-maintenance-windows
…
37323-jetbrains-cve
Updated ingestion/CVE logic to support Jetbrains software with 2 version numbers (#42003)
2026-03-19 11:14:14 -05:00
37546-android-certificate-install-activity
Added Android cert activity logging (#42608)
2026-03-31 16:26:39 -05:00
37556-resend-android-certs
Resend android cert to host - frontend, update profile API (#42297)
2026-03-26 13:06:29 -07:00
37802-fix-windows-fma-list
…
38002-throttle-ca-certificate-profiles
Throttle CA access through MDM (#42114)
2026-03-23 09:04:55 -05:00
38036-gitops-ca-delete-order
Fixed GitOps failing to delete a certificate authority (#41693)
2026-03-16 15:51:28 -05:00
38041-entra-windows-conditional-access
Windows conditional access: Ingest device_id from Windows devices (#41822)
2026-03-17 12:33:39 -03:00
38254-new-app-categories-on-older-builds
Allow FMAs to be added when default categories don't exist (#38303)
2026-03-03 14:29:28 -05:00
38356-fix-pkg-metadata-extraction
Bugfix: ignore nested .app files in .pkg metadata extraction (#40851)
2026-03-03 12:33:31 -05:00
38366-contributor-flag-for-allowing-all-declarations
…
38431-enforce-setup-experience-restrictions
…
38432-dont-allow-mai-without-bootstrap
…
38536-new-activity-bc
…
38585-ndes-selection
Fixed Microsoft NDES CA not being selectable (#41490)
2026-03-11 19:15:16 -05:00
38593-block-self-service-personal-enrollments
block self service on personal enrollments (#41054)
2026-03-06 10:23:15 -05:00
38611-remove-unused-var
Remove unused/confusing --mdm_apple_scep_signer_allow_renewal_days config (#40800)
2026-03-04 11:53:59 -05:00
38659-script-path-support
Add path support to script files (#40821)
2026-03-04 13:22:44 -05:00
38779-collect-fma-usage
…
38793-python-scripts
Add Python script support for macOS and Linux (#38562)
2026-03-24 10:01:54 -04:00
38965-preserve-team-context
refactor path generation (#41126)
2026-03-06 12:11:37 -05:00
39066-vpp-timeout-install-details
Improve VPP errors for large install failures (#41997)
2026-03-20 15:37:42 -04:00
39082-setup-logo-light-background
Save logo URL for dark and light backgrounds during setup (#41823)
2026-03-17 12:35:36 -03:00
39150-cleanup-host-isssues-on-host-delete
clean up host_issues on host deletion (#40827)
2026-03-03 14:14:29 -05:00
39190-display-sw-version-filter
Return light software metadata when listing hosts filtered by software present only on a different team (#42519)
2026-03-30 21:33:21 -07:00
39247-retry
…
39308-team-ca-read-access
Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740)
2026-03-16 12:24:31 -05:00
39324-digicert-upn-host-isolation
…
39325-dropdown-bugginess
…
39465-transparency-url
…
39713-min-os-dep
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
39723-mac-recovery-lock-passwords
UI: Add ability to manually rotate Mac Recovery Lock passwords (#41420)
2026-03-11 14:01:56 -07:00
39842-generate-gitops-bug
Use list FMA endpoint in generate-gitops to match FMAs by ID (#42483)
2026-03-26 15:52:28 -04:00
39899-deterministic-cpe-matching
Fixed nondeterministic CPE matching when multiple CPE candidates share the same product name (#41649)
2026-03-17 07:22:23 -05:00
39968-sso-validity-increase-default
Update SSO session validity from 5 to 15 min by default (#41456)
2026-03-20 10:56:54 +01:00
40007-mattermost-desktop-cpe
Fixed false positive vulnerabilities for Mattermost Desktop. (#41619)
2026-03-13 13:26:36 -05:00
40021-ubuntu-python-false-positive
…
40024-endpoint-to-create-android-webapp
…
40036-windows-server-2025-vulns
Added vulnerability scanning support for Windows Server 2025 hosts (#41232)
2026-03-10 14:03:59 -05:00
40050-server-core-msrc-differentiation
Differentiate between Windows Server Core and full desktop installations (#42034)
2026-03-21 10:03:57 -05:00
40054-slog-2
…
40108-avoid-double-encoding-fleet-secrets
avoid double encoding $FLEET_SECRET in GitOps (#40866)
2026-03-03 14:14:58 -05:00
40137-update-default-fleet
Update default fleet selected on dashboard and controls (#42688)
2026-03-31 09:11:51 -05:00
40260-5xx-on-scim-users-endpoint
Surface correct HTTP status on SCIM data constraint errors (40260) (#41530)
2026-03-13 13:22:10 -04:00
40284-android-certs
…
40287-fix-certificate-details-modal-tooltip-alignment
Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)
2026-03-06 14:02:51 -03:00
40302-support-glob-for-scripts
Support globs in script paths in GitOps (#40799)
2026-03-02 22:18:36 -06:00
40327-filter
always show the filters and search bar (#41163)
2026-03-09 09:05:36 -04:00
40415-conditional-access-critical-policy-rework
Rework conditional access policy bypass conditions to use critical column (#40736)
2026-03-05 17:05:03 -05:00
40488-add-more-aliases
Add aliases for macos fields (#40959)
2026-03-05 18:08:54 -06:00
40489-reorder-host-columns
Reorder columns on Host page (#41180)
2026-03-07 17:32:59 -06:00
40496-detect-unknown-fields
Detect unknown keys in GitOps (phase 1) (#40963)
2026-03-06 16:16:17 -06:00
40564-otel-http-client
…
40607-copy-icon
Fixed table shifting left when clicking the copy hash icon (#41411)
2026-03-11 19:15:36 -05:00
40627-add-webhooks-and-tickets-enabled-flag
Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183)
2026-03-10 15:11:27 -05:00
40641-fix-arch-linux-rolling-tooltip-alignment
Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)
2026-03-06 14:02:51 -03:00
40642-add-new-fleet-saml-attribute-prefix
Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402)
2026-03-13 08:34:29 -05:00
40685-smallstep-proxy
…
40715-allow-whitespace-end-users-form
Allow typing whitespaces on Settings > Integrations > SSO > End users form (#41817)
2026-03-17 12:35:25 -03:00
40751-google-drive-brew-version
Update how google drive fma version is created (#42270)
2026-03-27 16:54:22 -04:00
40789-fix-select-all-header-checkbox
Fix select-all header checkbox not selecting rows in a specific case (#40940)
2026-03-04 11:39:04 -03:00
40790-fix-clear-idp-error-message
Update error message when clearing End Users settings while EUA is enabled (#41243)
2026-03-10 13:20:43 -03:00
40859-update-stored-results-ui
Update stored results setting UI (#40874)
2026-03-04 09:58:27 -06:00
40881-fix-stuck-setup-experience-with-scep-renewal
don't short circuit scep renewal if awaiting configuration (#41523)
2026-03-16 10:37:06 -05:00
40887-fix-file-permission-self-heal
Fix orbit crash loop on incorrect file permissions (#40887)
2026-03-06 17:41:31 -03:00
40900-allow-omitting-secrets-key-in-gitops
Allow secrets: key to be optional in GitOps (#40901)
2026-03-03 17:16:10 -06:00
40910-correct-request-certificate-pem
Update PEM header type per hydrant spec (#42052)
2026-03-19 15:37:22 -04:00
40944-fix-gitops-policy-linked-to-software-with-env-var
Bugfix: gitops policy linked to software package with env var fails to apply (#40944)
2026-03-04 14:03:34 -05:00
40972-policy-description
Fleet UI: Add description to add/edit policies (#42692)
2026-03-31 09:35:37 -04:00
41006-support-more-globs
Add glob support to more labels, policies and reports (#41141)
2026-03-09 15:39:13 -05:00
41012-allow-omitting-top-level-gitops-keys
Make most GitOps top-level optional (#41138)
2026-03-09 08:56:05 -05:00
41073-update-table-heading-styles
UI: Update table heading and result filter styles (#41072)
2026-03-06 17:41:28 -06:00
41074-add-fleet-columns-to-csv
Add fleet_id / fleet_name columns to CSV hosts export (#41446)
2026-03-11 11:38:07 -05:00
41091-update-multiplatform-keys
Add aliases for more multi-platform setup experience fields (#41599)
2026-03-13 15:17:05 -05:00
41111-fix-table-footer-rendering
Do not show table footer under Target specific hosts table (#41252)
2026-03-09 17:23:44 -03:00
41190-audit-log-entries
Don't clear past lock/wipe (#41504)
2026-03-13 15:21:24 -05:00
41225-cpe-matching-reserved-keywords
Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT) (#41226)
2026-03-10 14:03:25 -05:00
41239-dont-trigger-resend-on-device-mapping-if-no-changes
Don't resend profiles if IdP values do not change (41239) (#41662)
2026-03-13 14:16:07 -04:00
41324-support-labels-include-all-for-installers
Backend: Support labels_include_all for installers/apps (#41324)
2026-03-18 13:27:53 -04:00
41345-add-fleetctl-new
Add fleetctl new command (#41909)
2026-03-20 17:27:27 -05:00
41500-validate-scripts
add missing validation for scripts, tests (#42424)
2026-03-30 10:13:03 -04:00
41532-ca-delete-error-message
Fixed error message when deleting a certificate authority (#41635)
2026-03-13 13:25:35 -05:00
41534-host-details-reports-api-end-point
New API endpoint for host reports (41534)
2026-03-18 11:03:48 -04:00
41540-host-details-reports-db-optimizations
Performance improvements for Host Reports (41540)
2026-03-26 07:04:18 -04:00
41542-android-cert-resend-backend
41542 android cert resend backend (#42099)
2026-03-23 17:01:52 -04:00
41586-admin-by-request-false-positive
Fixed Admin By Request false positive CVEs (#42095)
2026-03-20 10:35:56 -05:00
41601-use-multiplatform-names-in-front-end
Use new multiplatform keys on the front end (#41763)
2026-03-30 08:56:21 -05:00
41603-fix-query-responses
Fix get/create/update query response (#41966)
2026-03-20 10:30:52 -05:00
41631-not-installed
fix usage of query params in host software endpoint (#42302)
2026-03-24 17:53:19 -04:00
41644-improve-cpe-matching
Improved cpe deterministic matching (#42325)
2026-03-24 17:48:02 -05:00
41652-fix-reports-edit
Fixed editing reports on free tier failing due to triggering a premium license check (#41747)
2026-03-16 11:42:58 -03:00
41653-disallow-header-button-wraps
Disallow manage hosts page header buttons from wrapping text (#41654)
2026-03-13 09:02:40 -07:00
41663-duplicates
fix issue with duplicate entries in setup experience for FMAs (#41685)
2026-03-13 18:10:55 -04:00
41664-vulnerability-cron-db-contention
Use swap table pattern and batch delete to improve DB access patterns for vuln cron (#41729)
2026-03-17 10:34:52 -05:00
41670-auto-rotate-recovery-lock
Backend: Auto rotate recovery lock passwords (#42084)
2026-03-26 12:12:41 -06:00
41672-allow-omitting-manual-hosts-label
Allow hosts key to be empty for manual labels (#42022)
2026-03-20 10:36:14 -05:00
41688-fix-icons-via-gitops
Fix icon upload for multi-team software titles (#41785)
2026-03-17 06:55:22 -04:00
41710-overwrite-software-title
Update software title names on FMA sync and upload (#42647)
2026-03-30 15:59:19 -04:00
41742-fix-my-device-500-fleet-free
Fixed 500 and 402 on My Device page. (#41748)
2026-03-16 16:09:43 -05:00
41771-fix-fma-endpoint
Fix addFleetMaintainedAppEndpoint to accept fleet_id param (#41805)
2026-03-17 09:59:03 -05:00
41778-fix-enqueue-setup-experience-items-for-arch-linux
Bugfix: properly enqueue compatible setup experience items for arch/omarchy linux (#41778)
2026-03-17 15:04:33 -04:00
41815-override-patch-policy-query
Override patch policy query (#42322)
2026-03-25 10:32:41 -04:00
41888-otel-service-name
Allow OTEL service name to be overridden (#41890)
2026-03-18 13:59:28 -05:00
42017-host-details-reports-tab
[Host details > Reports] Frontend changes (#42017)
2026-03-24 10:45:34 -03:00
42047-android-web-app-banner
Add warning banner for Android web apps requiring Google Chrome (#42598)
2026-03-28 15:35:45 -05:00
42185-add-flatcar-coreos-linux-platforms
Add Flatcar Container Linux and CoreOS to recognized Linux platforms (#42186)
2026-03-23 10:33:48 -03:00
42260-fix-fma-apps-via-gitops
Fix missing FMA apps added via GitOps (#42306)
2026-03-24 10:53:23 -04:00
42311-fix-users-table-duplicates-and-count
Bugfix: User management table has row key collision when user and invite share the same ID (#42396)
2026-03-25 16:34:59 -03:00
42327-apple-profile-retries
Increased Apple retry from 1 to 3. (#42331)
2026-03-26 11:29:20 -05:00
42383-android-display-name
Use display name when applicable for Android config change updates (#42626)
2026-03-30 09:51:12 -05:00
42399-support-vpp-policy-automations-in-generate-gitops
fix policy software vpp automations (#42400)
2026-03-25 15:10:40 -05:00
42443-fix-show-disk-encryption-key-modal
Fix disk encryption key modal to not show stale key when switching between hosts (#42444)
2026-03-27 10:13:59 -03:00
42480-script-package-size-limit
Fixed script package size validation to use saved script limit (#42481)
2026-03-27 11:12:04 -05:00
42544-windows-profiles
Insert hmwp and windows command entries at once (#42566)
2026-03-27 22:17:34 -04:00
42572-fix-duplicate-text
Filter errors that start with Couldn't add (#42764)
2026-03-31 16:33:55 -04:00
allow-clearing-windows-update-settings
Allowed clearing Windows OS update deadline (#42272)
2026-03-25 16:02:54 -05:00
bump-mysql
Bump MySQL test version from 8.0.39 to 8.0.42 (#42122)
2026-03-20 14:24:29 -05:00
bump-mysql-8.0.42
Bump MySQL test version from 8.0.39 to 8.0.42 (#42122)
2026-03-20 14:24:29 -05:00
fix-end-user-auth-clear-form
…
host-search-always-match-email
…
improve-body-validation
Use http.MaxBytesReader on the raw body and on the gzip decode output (#42265)
2026-03-25 06:27:58 -03:00
issue-38546-fix-mdm-page-update
fix issue where mdm page wasnt updating properly when turning off apple mdm (#40854)
2026-03-05 17:02:21 +00:00
issue-39184-apns-banner-fix
show apns expiration banner in UI for free tier (#40936)
2026-03-04 13:12:33 +00:00
issue-40684-no-resend-button
…
issue-40697-fix-os-setting-overflow
…
refactor-named-functions-nil-checks
Refactored to improve NilAway coverage (#42106)
2026-03-19 22:01:44 -05:00
up-default-software-batch
up default limit for software batch (#41827)
2026-03-17 10:20:09 -05:00
update-go-1.26.1
Updated go to 1.26.1 (#42027)
2026-03-19 07:01:00 -05:00