Juan Fernandez 29f41af47d Fix NDES dynamic SCEP regression caused by ntlmssp anonymous probe (#45784) ...

Fixes #45763 

The recent bump of github.com/Azure/go-ntlmssp to v0.1.1 changed the
Negotiator to send an unauthenticated probe before NTLM. NTLM is
connection-bound on IIS, and the extra round-trip breaks the handshake
on NDES setups behind reverse proxies, Okta Access, or a WAF.

2026-05-20 11:16:15 -04:00

..

.keep

…

31138-user-enrolled-software-install

gkarr 44008 setup experience (#45202)

2026-05-15 12:35:26 -05:00

33555-better-error-handling-of-win-pre-install-setup

Update changelog for fleetd 1.55.0 release (#44733)

2026-05-05 19:18:08 -03:00

34103-sso-invite-accept

Fix SSO invite acceptance error when accepting invitation (#34103)

2026-05-07 12:25:24 -04:00

34104-smtp-starttls-error-message

Clarify SMTP TLS error and surface STARTTLS toggle (#34104)

2026-05-07 10:24:18 -04:00

34229-gitops-label-validation

Fix missing GitOps label validation for invalid field combinations (#44410)

2026-05-05 16:19:41 -04:00

34464-gitops-dry-run-manual-agent-install-script-conflict

…

34924-expired-license-cli-banner

…

35089-fleetctl-released-as-pkg

Create fleetctl pkg asset every release (#35089)

2026-05-07 10:04:07 -05:00

35173-cis-macos-26-v1

…

35195-slate-homebrew-cpe-mismatch

Fix homebrew package matching incorrect CPE (#45186)

2026-05-13 09:20:59 -04:00

35483-empty-states

…

36417-update-enrolling-activities-display-name

Update enrolling activities and preserve osquery display name (#45697)

2026-05-18 14:33:10 -03:00

36976-activities-for-labels

…

37012-host-details-activity-upcoming-count

Fix upcoming activity count not refreshing after host software install (#37012)

2026-05-11 10:38:20 -04:00

37142-local-admin-password-rotation

…

37682-clear-state-on-abm-re-enrollment

CSAH: clear state on ABM re-enrollment (#44722)

2026-05-06 09:57:58 +02:00

38437-activity-list-date-filter-consistency

Make activity list end-date filter consistent (#38437)

2026-05-08 15:29:59 -04:00

38785-windows-setup-experience-cancel

…

38790-ios-ipados-managed-app-configuration

Fleet UI: Update error messages for config variables (#45467)

2026-05-15 07:15:29 -04:00

39016-upload-custom-org-logo

…

39096-cis-win11-v5

Add changelog for CIS Win11 v5.0.1 update (#45374)

2026-05-13 12:27:58 -04:00

39727-creating-queries-back-to-hosts-bug

Fix back-to-host-details button on report details page (#39727) (#45238)

2026-05-12 14:08:59 -04:00

40459-wipe-host-cancels-upcoming-activities

…

40623-failed-enrollment-renewal

…

40905-update-default-automatic-enrollment-profile

…

41472-android-cert-san-server

Add support for SAN in Android certificate templates. (#44690)

2026-05-06 14:43:09 -05:00

41565-policy-report-new-scopes-frontend

…

41566-policy-report-labels-gitops

Add include_all label scope to GitOps and fleetctl (#41566)

2026-05-05 15:13:22 -04:00

41592-eua-broken-with-custom-apple-mdm-url‎

…

41985-idp-host-vitals-tahoe-migration

Fix IdP host vitals not populating for MDM-migrated hosts (#41985)

2026-05-13 15:16:55 -04:00

41996-department-idp-host-vital-not-populating-for-some-users

Fix IdP department host vital missing when SCIM PATCH carries extra attrs (#41996)

2026-05-07 08:34:36 -04:00

42026-show-uninstall-button

Show uninstall button even if software title is not found in inventory (#45273)

2026-05-12 17:09:42 -04:00

42218-ios-supplemental-os-version-extra

42218 updated ios version number to include supplemental extra (#44727)

2026-05-07 15:16:31 +01:00

42288-ses-sender-domain

Add optional SES sender domain configuration (#43811)

2026-05-19 11:21:46 -05:00

42477-gitops-dry-run-label-platform

…

42503-deprecate-software-under-setup-experience

Officially deprecated setup_experience.software (#44549)

2026-05-11 13:49:11 -05:00

42522-labels-not-supported-in-no-team

Warn when labels key appears in no-team/unassigned GitOps files (#44865)

2026-05-11 09:54:59 -04:00

42545-windows-profile-reconciliation-batching

…

42607-gitops-dry-run-empty-software

…

42613-dedupe-network-errors-in-error-store

Dedupe network errors so usage_statistics cron stops failing (#45142)

2026-05-11 22:21:57 +02:00

42637-clear-stale-broken-label-associations

Clear stale broken label rows on profile batch upsert (#44847)

2026-05-07 16:10:15 +02:00

42741-fix-goval-dictionary-fd-leak

…

42827-macos-mdm-certificate-ingestion

Cert renewal for non-proxied SCEP and ACME (Phase 1 + Phase 2) (#45696)

2026-05-18 11:41:02 -06:00

42874-saml-jit-empty-role-values

Fix SAML JIT login failing when role attributes have empty values (#42874)

2026-05-18 12:13:19 -04:00

42886-fix-google-cal-gitops-validation

Fix google calendar key validation (#44556)

2026-05-11 13:41:28 -05:00

42930-show-retries-script-software-automations-host-details

Add host activity entries for retried software installs and script runs from policy automations (#45233)

2026-05-12 13:44:18 -03:00

42972-add-fleetctl-msi-to-release

…

43027-return-404-for-missing-resources

Return 404's for not found resources in some batch script endpoints (#45348)

2026-05-15 07:59:36 +02:00

43031-post-queries-null-name-or-query-500

Fix POST /queries returning 500 on JSON null name/query (#43031)

2026-05-13 07:25:02 -04:00

43032-post-packs-null-name

Reject null name on POST /packs (#43032)

2026-05-13 07:24:06 -04:00

43091-inaccurate-total-disk-space

Fix double-counted Linux disk space from bind-mounted filesystems (#44969)

2026-05-15 08:48:17 +02:00

43135-fix-stale-label-hosts

…

43279-my-device-page-location-vital-looks-clickable

Fix Location and MDM status vitals looking clickable on My device page (#43279)

2026-05-12 14:09:40 -04:00

43294-sticky-team-enrollment

Made host team assignment sticky across orbit and osquery re-enrollments (#45339)

2026-05-14 10:14:49 -03:00

43511-gitops-icon-update-recovers

Fix gitops 500 when software title icon bytes are missing (#44735)

2026-05-05 18:47:16 -04:00

43598-fix-gitops-glob-path-validation

Allow glob literals in filenames (#44547)

2026-05-11 13:49:31 -05:00

43609-gitops-mode-false-positive-activity

Fix cond access bypass activity on unrelated app config saves

2026-05-13 09:38:36 -04:00

43637-disk-encryption-table-horizontal-scroll

Fix disk encryption table horizontal scroll at narrow viewports (#45736)

2026-05-18 16:26:08 -04:00

43640-actions-dropdown-auto-closing

fix Actions dropdown in Run script modal auto-closing (#45349)

2026-05-13 16:21:48 +02:00

43643-conditional-access-header-fleet-free

Add missing header on Fleet free for Conditional Access (#43643)

2026-05-15 08:03:40 -04:00

43645-timestamps-are-not-consistently-styled-as-hoverable-missing-dotted-underlines

Fixed cursor style on timestamps shown on host Vitals (#43645)

2026-05-15 07:31:34 -04:00

43646-inconsistent-alignment-fleet-premium

inconsistent alignment fleet premium (#45125)

2026-05-11 19:22:53 +02:00

43647-close-policy-details-modal-when-navigating-back-to-host-details

fix: close policy details modal when navigating back to host details (#45394)

2026-05-15 08:39:26 +02:00

43656-scim-users-duplicate-host-id

Fix: SCIM user creation 500s when host already has a SCIM mapping (#44275)

2026-05-11 16:28:46 +02:00

43659-script-only-hash-ref-preserves-install-script

…

43673-sort-software-titles-by-display-name

Sort software titles by display name instead of installer filename (#44873)

2026-05-14 12:55:16 -04:00

43688-fix-text-alignment-issues

Fleet UI: Fix dataset text alignment (#44659)

2026-05-05 08:50:18 -04:00

43721-clean-up-gitops-errors

Remove verb and url from gitops errors (#44555)

2026-05-11 13:48:52 -05:00

43767-delete-label-error-msg

…

43769-added-charts-to-dashboard

Allow disabling chart datasets: frontend (#44797)

2026-05-06 16:28:37 -05:00

43846-vpp-app-store-non-us-abm

Support VPP apps from non-US App Store regions (#44368)

2026-05-06 12:01:07 -04:00

43857-improve-error-on-missing-gitops-name

Improve name key validation in GitOps (#44553)

2026-05-11 13:49:02 -05:00

43895-host-my-device-link

Adding my device link on host details page with backend logic to generate it if needed (#45659)

2026-05-18 16:05:44 -05:00

43928-host-by-nodekey-cache

…

43959-duplicate-installers

…

43984-setup-experience-users-ui-updates

43984 setup experience psso UI updates (#45023)

2026-05-14 15:35:14 +01:00

43997-orbit-debug-logging-on-enroll

Add server-side orbit debug logging enablement - currently only configurable as a duration-after-enrollment setting (#45367)

2026-05-14 13:32:02 -04:00

44046-create-team-labels-before-consumers

Apply labels before consumers in GitOps (#45194)

2026-05-12 17:15:33 -05:00

44082-add-script-output-to-gitops

add script output to GitOps (#44728)

2026-05-07 09:38:25 +02:00

44084-fix-install-loop-on-deleted-installer

…

44111-scep-autorenew-fail

Recover stuck SCEP managed-cert state via matcher extension (#44691)

2026-05-07 11:52:25 -06:00

44124-add-vulnerabilities-chart

…

44170-fleetctl-mdm-commands-require-host

fleetctl get mdm-commands now requires the --host flag (#45476)

2026-05-14 12:58:52 -05:00

44170-list-mdm-commands-perf

…

44189-host-profile-perf

…

44190-mdm-queue-cleanup

…

44194-team-bitlocker-windows-only

…

44196-script-library-gitops-fixes

fix UI elements in script library not respecting GitOps mode (#44743)

2026-05-05 18:56:18 +02:00

44242-fleetctl-vuln-data-stream-osv

…

44252-unable-to-edit-existing-user-to-use-2fa-422-error

…

44286-deleted-policy-activity-for-patch-policies

Fix missing deleted_policy activity for auto-cleaned patch policies (#45045)

2026-05-09 00:33:00 -04:00

44298-fix-goquery-dependency-side-effects

…

44326-empty-states

Fleet UI: Add add variable button, update no results live empty state (#45808)

2026-05-19 12:18:53 -04:00

44333-gitops-custom-org-logo-upload

GitOps changes for custom org's logo uploads (#44550)

2026-05-05 18:18:08 +02:00

44376-stale-apns-push-cert-not-updated

check push cert staleness after 5 minutes of in-memory cache time (#44919)

2026-05-08 11:02:22 +02:00

44391-osv-vuln-optimizations

Optimize OSV vulnerability scanning (#44684)

2026-05-07 22:21:22 -06:00

44391-vuln-scan-product-index

Creating product index to speed up vulnerability scanning (#44910)

2026-05-07 22:20:58 -06:00

44422-list-mdm-commands-host-identifier-after

…

44456-validate-payload-scope-dry-run

validate apple payload scope conflict, and unknown variable use in dry-run (#45139)

2026-05-12 08:51:30 +02:00

44459-recovery-password-key-team-transfer

Recovery Key can be viewed after team transfer if still present (#45280)

2026-05-13 09:20:37 -04:00

44533-request-pem-certificate

…

44630-fix-enable-host-users-default

Fix enable_host_users defaulting to false on fresh install (#45393)

2026-05-14 09:05:45 -04:00

44696-add-list-software-perms-for-gitops

Allow GitOps user to list software (#44721)

2026-05-05 13:27:57 -05:00

44798-scope-windows-mdm-profiles-query

Scope windows mdm profile removal query (#45203)

2026-05-12 11:49:33 -05:00

44801-end-user-auth-windows-linux-only

Fixed validation that rejected enabling end user authentication on Fleet deployments without Apple MDM configured (#45162)

2026-05-11 14:55:16 -05:00

44804-win-mdm-profile-bulk-insert

windows mdm profile bulk insert (#45401)

2026-05-14 11:00:43 -05:00

44816-fast-fail-device-auth

Check device auth token individual before querying host tables on auth (#44817)

2026-05-06 16:55:35 -03:00

44950-gitops-null-label-id

Fix GitOps failure when moving labels from global to fleet scope (#44983)

2026-05-08 07:49:23 +02:00

44980-always-assign-profile-missing-devices

always assign profile to missing devices due to replica lag (#45008)

2026-05-08 15:33:36 +02:00

45018-export-host-bug

Fleet UI: Fix export button dependencies (#45020)

2026-05-08 15:32:37 -04:00

45024-android-sso-missing-profile

Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046)

2026-05-12 12:42:16 -04:00

45141-edit-label-form-mention-fleets

LabelForm: replace 'teams' with 'fleets' (#44770)

2026-05-11 16:50:49 +02:00

45256-reduce-fleet-and-fleetctl-binary-sizes

Reduce fleet and fleetctl binary sizes by removing debug symbols (#45260)

2026-05-12 15:14:05 -03:00

45258-android-host-expiry-loop

Fixed Android hosts being auto-deleted by host expiry (#45471)

2026-05-14 10:02:11 -05:00

45330-gitops-mode-from-yaml

allow gitops mode to be set in yaml (#45537)

2026-05-15 11:21:10 -05:00

45491-mdm-name-from-server-url-nondeterministic

Fixed an issue where the MDM solution name reported for a host could flip between values across osquery ingestions (#45496)

2026-05-14 12:37:48 -05:00

45520-nil-pointer-panic-in-android-enterprise-pubsub-endpoint

Fix nil-pointer panic in Android Enterprise Pub/Sub endpoint (#45520)

2026-05-18 13:29:45 -04:00

45705-android-gitops-fix

Fix Android/Windows profile edits via GitOps rejected when AppConfig is stale (#45752)

2026-05-19 14:22:58 -05:00

45711-android-os-version-filter

Add Android to the OS list (#45834)

2026-05-20 10:43:10 -03:00

45715-implement-roaring-bitmaps

Implement roaring bitmaps for historical data collection (#45709)

2026-05-19 09:34:29 -05:00

45720-remove-unneeded-query

Skip unneeded query when getting CVE chart (#45813)

2026-05-19 15:49:11 -05:00

45763-unable-to-issue-dynamic-scep-certificates-after-4850-upgrade

Fix NDES dynamic SCEP regression caused by ntlmssp anonymous probe (#45784)

2026-05-20 11:16:15 -04:00

45789-fix-checkerboard-relative-scale

Fix CheckerboardViz relative scale to use cell value instead of percentage (#45791)

2026-05-20 08:00:35 -05:00

415640-policy-reports-new-custom-option

…

add-svg-support-custom-logos

Add SVG support for custom organization logos (#44748)

2026-05-06 15:20:53 +02:00

cleanup-list-opts

🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385)

2026-05-05 10:26:47 -04:00

fix-android-host-software-filter

…

fix-fleetctl-new-checkout-action

Fix checkout action version in fleetctl new template (#45502)

2026-05-14 16:38:04 -05:00

fix-get-policy-id-endpoint-and-unify-access-in-ui

Fix get policy by id endpoint and unify access in UI (#45048)

2026-05-11 09:39:52 -03:00

fix-gitops-controls-set-criteria

Fix gitops controls set criteria (#45007)

2026-05-08 22:43:09 +02:00

fix-hosts-in-label-filtering

…

fix-mdm-commands-filtering

…

fleetd-base-windows-secret

Don't write the secret.txt when the secret is the dummy placeholder value (#45041)

2026-05-08 15:26:33 -04:00

update-go-1.26.3

Bump Go to 1.26.3 to clear stdlib CVEs (#45277)

2026-05-12 17:19:16 -05:00