Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 21 Packages Projects Releases Wiki Activity
Files
efe266b026bbca9b1be3c37f31fd4ae4ebaa50ce
fleet/changes
T
History
Scott Gress efe266b026 Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744) 
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34635

# Details

This PR switches us to a [fork of
node-sql-parser](https://github.com/sgress454/node-sql-parser) that I'm
maintaining to fast-track fixes to the SQLite implementation. The first
published version of the fork is 5.4.0-fork.1 (forked from v5.4.0 of the
upstream), and includes fixes for #34635 and #30109 that haven't made it
to the upstream yet.

Fixes in 5.4.0-fork.1:

* https://github.com/sgress454/node-sql-parser/pull/7
* https://github.com/sgress454/node-sql-parser/pull/5
* https://github.com/sgress454/node-sql-parser/pull/4

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- Granular tests are added [in the package
itself](https://github.com/sgress454/node-sql-parser/blob/5.4.0-fork.1/test/sqlite.spec.js),
and new regression tests for the Fleet issues are added in the Fleet.
- [X] QA'd all new/changed functionality manually
 - Pasted the offending queries into the editor and saw no syntax errors
2026-01-28 16:08:33 -06:00
..
.keep
…
13800-obfuscate-calendar-key
Obfuscate calendar key (#38687)
2026-01-26 16:59:13 -07:00
13836-cert-batch-del
Optimizing certificate template batch delete auth (#38650)
2026-01-24 17:47:17 -06:00
27322-surface-queries-in-host-details
Surface queries in host details (#37646)
2026-01-02 10:06:12 -03:00
30392-surface-failed-install-details
Populate LastInstall for failed installs (#38655)
2026-01-23 18:07:28 -05:00
30691-remove-vpp-install-data-host-delete
Remove host's VPP install rows when removing host (#38344)
2026-01-22 13:04:11 -05:00
31256-fix-windows-app-custom-package-metadata
Bugfix: windows app custom package should not be named Microsoft AutoUpdate (#37913)
2026-01-07 13:29:25 -05:00
31292-no-bootstrap-during-migration
Skip bootstrap package install during migration (#37614)
2025-12-29 12:00:24 -04:00
31569-host-installs-in-library
Fix failed software installs showing for hosts in teams without the installer for those attempts (#38238)
2026-01-13 12:52:50 -05:00
31686-tweak-timeouts
Shorten software batch timeout, add keepalive to refresh timeout periodically during batch operations (#37641)
2026-01-12 12:19:40 -06:00
31916-retry-policy-automations
Automatic retry of failed policy automations of scripts and software installs (#38018)
2026-01-12 17:30:51 -06:00
31922-do-not-send-windows-profiles-atomically
Allow <Atomic> windows profiles (#38272)
2026-01-14 14:44:47 -05:00
32461-custom-vpp-apps
Add custom VPP app support (#37969)
2026-01-08 13:13:04 -06:00
32619-gitops
make generate-gitops export FMAs correctly (#38420)
2026-01-20 16:31:41 -05:00
32965-hash-package-name-filters
Add hash_sha256 and package_name filters (#38474)
2026-01-20 09:50:56 -05:00
32997-categories
send categories from gitops (#38294)
2026-01-14 11:04:02 -05:00
33005-macvim
created mac vim mapping software transformer (#38333)
2026-01-21 12:33:14 -06:00
33272-delete-software-pending-installs-nuance
Fleet UI: Clarify delete VPP app pending install nuance (#38376)
2026-01-20 12:49:18 -05:00
33405-abm-banner
Update UI banner to inform admins of need to accept terms and conditions for multiple Apple Business Manager accounts (#38031)
2026-01-08 11:10:47 -06:00
33512-empty-software-opened-at
Use empty values in software last_opened_at when not supported (#38007)
2026-01-08 11:36:06 -08:00
33522-executable-hashes
Compute, ingest, persist, and serve .app bundle executable hashes and paths (#38118)
2026-01-14 09:18:35 -08:00
33762-ability-to-set-alternative-browser-host
Ability to set fleet desktop alternative browser host in org settings (#38409)
2026-01-19 16:25:22 -04:00
33815-fix-missing-installer-from-inventory-after-wipe-reenroll
Bugfix: Fix query to ignore host_software_installs rows where host is deleted (#38250)
2026-01-14 08:32:30 -05:00
34124-sql-editor-disabled
Fleet UI: Update the read-only SQL editor to appear non-interactive (#37764)
2025-12-31 09:38:12 -05:00
34359-long-script-names-overflow-tables
Long script names overflow tables (#38594)
2026-01-23 16:41:53 -04:00
34398-consistent-icon-buttons
Fleet UI: Update icon buttons for consistency (#38639)
2026-01-22 17:21:02 -05:00
34521-dynamic-scep-challenges-for-okta-certs
Dynamic SCEP Challenges For Okta Certs (#38908)
2026-01-28 13:28:39 -08:00
34635-fix-cte-syntax-for-frontend
Use forked node-sql-parser, fix CTE issues in parsed SQL (#38744)
2026-01-28 16:08:33 -06:00
34726-err-message
show error message (#38246)
2026-01-13 14:58:48 -05:00
34890-nats-logging-plugin
Add support for publishing logs to NATS. (#36527)
2026-01-06 09:10:32 -03:00
34960-better-error-message-for-user-scope-on-device-enrollments
Better error message for user scoped profile on iOS/iPadOS (#37542)
2026-01-02 09:52:13 -04:00
34962-profile-same-scope-error
Update error message for Apple profile scope conflict across teams (#37559)
2026-01-06 10:36:30 -06:00
35028-software-versions-search
Searching software versions by name will now return all versions that match the corresponding title name as well (#38103)
2026-01-09 17:02:33 -06:00
35086-fix-pkg-decoder-error
35086 use charset reader xar (#38459)
2026-01-16 17:19:20 -05:00
35141-table-sizes
Optionally output database table sizes after migrations complete (#38620)
2026-01-26 17:55:55 -06:00
35191-git-cve-false-positive
Fixed false positive git CVEs (#38657)
2026-01-26 12:35:08 -06:00
35192-imp-correct-classification
Differentiate between imp and Integrative Modeling Platform (#38396)
2026-01-20 16:39:50 -06:00
35193-libtiff
Libtiff false positive vuln (#38703)
2026-01-23 13:08:58 -07:00
35281-msrc-companion-apps
Fixed false positive for msrc companion apps (#38824)
2026-01-28 13:02:31 -06:00
35447-fix-cpe-translation-error-logging
Fixed unnecessary error logging when no CPE match is found (#38754)
2026-01-26 13:52:52 -06:00
35454-auto-update-db-api
…
35455-schedule-updates
Add scheduled updates functionality to iOS/iPadOS managed devices (#37704)
2026-01-06 16:04:06 -03:00
35458-update-activitiy-for-software-update-schedule
Add auto-update schedule to software activity updates (#37715)
2026-01-06 10:52:26 -06:00
35459-software-auto-update-frontend
Auto software update frontend (#37677)
2026-01-05 10:43:26 -06:00
35565-ipa-cloudfront-signing
Cloudfront signing for in-house apps (#37650)
2026-01-05 16:30:31 -05:00
35567-validate-android-policy-struct-on-upload
validate android profile JSON on upload (#37756)
2025-12-30 12:10:06 -04:00
35603-optimize-query-results
Improve performance when recording schedule query results (#38524)
2026-01-27 10:33:47 -06:00
35717-dont-enqueue-setup-experience-on-previously-enrolled-hosts
Don't run setup experience on host that was previously enrolled (#38318)
2026-01-28 08:44:42 -06:00
35941-auto-uninstall-managed-apps-ios-ipados
UMA: update management flags for ios/ipados vpp and ipa installs (#37734)
2026-01-05 12:15:38 -05:00
36069-fix-patch-categories-software-installer
Bugfix: patch categories for software installer (#38334)
2026-01-20 09:39:13 -05:00
36313-fix-timestamps-label-and-teams-creation
Fix: incorrect timestamps returned for Label and Team creation (#38846)
2026-01-27 18:02:48 -03:00
36324-fix-permission-issue-custom-software-installer-icon
Custom software installer icons: fix permission issue (#38326)
2026-01-14 16:24:05 -05:00
36335-7-zip-false-negative-cve
Fixed false negative CVE for 7-Zip installed with MSI installer (#38922)
2026-01-28 14:06:13 -06:00
36342-scroll-yml-in-gitops-mode
Fleet UI: Allow users to scroll through disabled yml fields (#38715)
2026-01-26 09:35:22 -05:00
36541-missing-vpp-version-add-software
Fleet UI: Show VPP version for software setup (#38412)
2026-01-15 21:33:52 -05:00
36621-harmonize-installer-conflict-error-messages
IPA: validate conflicts with other installers, return proper error (#38005)
2026-01-13 10:30:03 -05:00
36644-randomize-apns-query
randomize APNS query (#38222)
2026-01-13 13:06:33 -05:00
36652-okta-ca
Updated NDES SCEP proxy to auto-detect response encoding (#37873)
2026-01-06 10:47:34 -06:00
36702-fix-fleetctl-config-help
Fix fleetctl config help display for missing arguments (#37769)
2026-01-08 09:55:18 -05:00
36724-vpp-app-install-retry
VPP app install retry on 9610 (#38008)
2026-01-09 13:39:10 -05:00
36770-limit-process-dep-cooldowns
limit DEP cooldowns to sync limit and order by oldest first (#38535)
2026-01-21 09:25:55 -05:00
36862-fix-flash-message-link-color
Fleet UI: Fixed hover color of links in error flash messages (#38634)
2026-01-22 11:25:21 -05:00
37003-bootstrap-pkg-ui
Update UI for Controls > Setup experience > Bootstrap package to fix inconsistent styling (#37868)
2026-01-06 10:37:00 -06:00
37006-fix-broken-disk-space-sort
Fleet UI: Fixed broken disk space sort header on hosts table (#38732)
2026-01-26 09:35:43 -05:00
37008-manual-agent-install-only-blocks-macos-se-software
manual agent install should only block macOS SE software (#38434)
2026-01-20 11:37:39 -05:00
37009-setup-exp-android-ui
Fix loading state for Android setup experience UI (#37907)
2026-01-07 11:54:15 -06:00
37111-ninxsoft-mist-cve
Fixed CVE false positive on ninxsoft/Mist. (#38849)
2026-01-28 07:06:39 -06:00
37146-create-builtin-label-error-msg
Show error reason when trying to create a label that conflicts with a built-in label name (#38828)
2026-01-27 15:30:41 -03:00
37155-force-end-user-authentication-host-reenrollment
Fix: Deleting a host from Fleet does not delete related IdP records (#38530)
2026-01-28 10:10:00 -03:00
37183-unclear-missing-label-error
improve missing label error message (#38636)
2026-01-26 12:55:26 -05:00
37192-refactor-endpoint_utils
Moved common endpointer packages to platform dir. (#37780)
2026-01-06 14:23:07 -06:00
37244-refactor-common_mysql
Moved common_mysql package to server/platform/mysql (#38017)
2026-01-08 13:17:19 -06:00
37264-gitops-fma-icons
Use custom icons in GitOps for Fleet Maintained Apps (#38497)
2026-01-20 11:56:40 -05:00
37271-use-writer-when-linking-scim-data
Fix issue linking SCIM data to newly-enrolled hosts (#38408)
2026-01-16 14:11:51 -06:00
37278-okta-fail-my-device-page
Redirect to my device page if device fails okta cond. access (#38342)
2026-01-15 11:02:35 -05:00
37290-fix-xcode-vpp-verification
Bugfix: apply a special-case for Xcode VPP app verification (#38539)
2026-01-21 17:16:13 -05:00
37397-byod-idevices-software-ingestion
iBYOD Apps: only ingest and report Fleet-managed apps for manual-enrolled iOS/iPadOS (#37856)
2026-01-06 10:50:47 -05:00
37464-installer-size
Bump installer max size, make configurable (#38122)
2026-01-19 13:36:01 -06:00
37508-gitops-team-software-display_name
GitOps: Allow team yml to apply display_name to software package (#38364)
2026-01-20 09:32:25 -05:00
37597-ignore-build-version-compare
Fleet UI: Strip build from compareVersion x.x (build x.x) (#38433)
2026-01-16 10:59:46 -05:00
37602-fix-vpp-versions-refresh
…
37651-Android-fleet-challenge
Fixed Android certificate enrollment failures caused by SCEP challenge expiration when devices were offline. (#38753)
2026-01-28 10:33:37 -06:00
37686-rollback-legacy-device-id-ingestion
Rollback Entra legacy 'device ID' ingestion (#37687)
2026-01-05 13:28:43 -03:00
37710-package-parsing
Compare pkg-info bundle id with bundles in pkg parsing (#38577)
2026-01-21 13:43:38 -05:00
37806-fleet-activities
Activity bounded context: /api/latest/fleet/activities (1 of 2) (#38115)
2026-01-19 09:07:14 -05:00
37957-pgadmin-vulnerability
Fixed false negative CVE for pgAdmin 4. (#38813)
2026-01-28 13:30:44 -06:00
38035-android-reenroll
Android app re-enroll on 401 (#38690)
2026-01-27 09:01:01 -07:00
38094-ability-to-set-alternative-browser-host
Ability to set fleet desktop alternative browser host in org settings (#38409)
2026-01-19 16:25:22 -04:00
38096-alternative-browser-host-gitops
Alternative browser host gitops (#38516)
2026-01-21 10:12:48 -04:00
38205-remove-incorrect-eua-warning-for-macos
gate orbit enrollment to windows/linux only (#38207)
2026-01-14 08:41:50 -06:00
38369-ui-mdm-commands-off
Hide host MDM commands activity UI when MDM is turned off (#38394)
2026-01-16 11:03:22 -06:00
38452-display-name
move deletion into block that only executes when the package itself changes (#38595)
2026-01-21 16:59:40 -05:00
38473-add-ipad-screenshot-in-lock-modal
Display iPad screenshot in lock modal (#38475)
2026-01-20 13:26:01 +01:00
38479-otel-shutdown
Improved OpenTelemetry tracing (#38483)
2026-01-20 12:22:20 -06:00
38484-fleet-dev-env-vars
Only allow FLEET_DEV_* env vars when --dev is passed, allow overriding configs one at a time in dev (#38652)
2026-01-27 14:32:56 -06:00
38549-okta-cond-access-cert-format
Added conditional_access.cert_serial_format server option to allow specifying the Okta conditional access certificate serial format. (#38697)
2026-01-26 12:21:10 -06:00
38557-read-users
Global observers and maintainers can now officially read user details (#38558)
2026-01-21 13:55:10 -06:00
38579-micromdm-scep-fix
Porting fix from micromdm/scep (#38638)
2026-01-22 13:34:53 -06:00
38622-vpp-metadata-api-server-config
Expose VPP metadata bearer token as public config, interact directly with Apple when set (#38817)
2026-01-27 16:50:40 -06:00
38704-fail-ipa-installs
Fail in-house app installs when host unenrolls (#38803)
2026-01-26 15:45:52 -05:00
38756-otel-client-errors
Improved OpenTelemetry error handling (#38757)
2026-01-26 17:07:32 -06:00
add-trusted-proxies-config
Implement trusted proxies config (#38471)
2026-01-19 22:13:37 -06:00
fix-query-author-styles
Fix query & policy author styles (#37605)
2025-12-23 10:03:27 -06:00
fix-vpp-displayVersion-with-spaces
Trim spaces in VPP app versions (#38236)
2026-01-13 13:59:48 -03:00
issue-32110-new-err-message-license-ca-gitops
Improved error message when trying to apply CAs via gitops without a premium license (#37981)
2026-01-08 11:07:38 +00:00
issue-33291-fix-issues-abm-token-banner
Fix expired abm token banner and tooltip (#37898)
2026-01-07 11:54:52 +00:00
issue-36935-better-message-error-token
improve err message when getting android enrollment token during ota enrollment (#38428)
2026-01-16 16:43:19 +00:00
issue-37371-not-now-status
handle NotNow status from device so that it does not block the DEP setup experience flow (#38319)
2026-01-21 15:14:57 +00:00
issue-37832-alignment-host-status-tag
update alignment and styles of host status tag (#37832)
2026-01-06 14:09:09 +00:00