🏗️ New commits pushed to Fleet: - getvictor: Updated go to 1.26.1 (#42027) - dependabot[bot]: Bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#42011) - Nine9one: Typo fix README.md (#41952) - kilo-code-bot[bot]: Add Head of Strategic Growth position (#42050) - lucasmrod: Add statistics for Entra conditional access (#41998) - marko-lisica: Setup experience guide: how admin can let user through setup experien… (#42045) - jkatz01: Add automation_type filter to count policies endpoint (#42007) - noahtalerman: Add certificate authority (CA): Clarify instructions are for NDES (#41415) - kilo-code-bot[bot]: Update Alex Mitchell's title to Head of Strategic Growth (#42064) - eashaw: Website: Remove duplicate article card & update incorrect/duplicated card tit... - allenhouchins: Add Okta management hints to GitOps workflow (#39759) - allenhouchins: Add Firefox ESR as macOS & Windows FMAs (#40089) - getvictor: Re-timestamp migrations after 4.82.1 (#42058) - getvictor: Fixed BitLocker encryption failing after migrating. (#41911) - getvictor: Updated ingestion/CVE logic to support Jetbrains software with 2 version numb... - getvictor: Update golangci-lint from 2.7.1 to 2.11.3 (#42066) - eashaw: Website: Update card titles on customers page (#42083) - mostlikelee: Recovery lock tooltip copy update (#41978) - mostlikelee: View recovery password: fix permissions (#41951) - mostlikelee: Recovery password integration tests (#41988) - getvictor: Bumping signoz resources for 100K hosts loadtest. (#41961) - eashaw: Website: automatically add case study links to the /customers page (#42088) - lukeheath: Remove fleetd components release QA instructions (#42093) - georgekarrv: Adding backport check script and notes on how to use it (#40895) - noahtalerman: Renaming: API reference (#41942) - JordanMontgomery: Update PEM header type per hydrant spec (#42052) - spalmesano0: Add GlobalProtect profile (#42096) - MagnusHJensen: speed up macOS profile delivery for initial enrollments (#41960) - georgekarrv: feat installers labels include all (#42061) - jahzielv: lint - jahzielv: lint - jahzielv: merge main - jahzielv: lint - jahzielv: Merge branch 'main' into feat-installers-labels-include-all - kilo-code-bot[bot]: Move Vanta compliance responsibilities from Finance to IT (#42074) - rachaelshaw: Fix error in 4.82 demo video embed (#42101) - getvictor: Update version and CHANGELOG for fleetd-android-v1.3.0 (#41905) - mikermcneil: Article: Add link: Update migrating-intune-policies-to-fleet-csp-conv… (#42110) - mikermcneil: Article: Shorten, link out - Update migrating-intune-policies-to-flee… (#42113) - karmine05: feat(fleet-mcp): add MCP server for Fleet with config and docs (#42016) - BCTBB: Configure software_installers defaults in Loadtest terraform (#41207) - mikermcneil: Website: Update homepage.ejs (#42121) - BCTBB: Dogfood & Loadtest - Updating mysql engine version to 8.0.mysql_aurora.3.10.3... - getvictor: Fixed bug where Windows hosts would get 0 CVEs. (#42021) - getvictor: Refactored to improve NilAway coverage (#42106) - marko-lisica: Update SSO session validity from 5 to 15 min by default (#41456) - juan-fdz-hawa: Rename wifi_network to macadmins_wifi_network (#40629) - iansltx: 🤖 Fix nondeterministic sorting breaking TestIntegrationsEnterprise/TestMaint... - lucasmrod: Add checks on policy endpoints for

conditional_access_enabled

and `platform... - noahtalerman: Update and rename wifi_network.yml to macadmins_wifi_network.yml (#42091) - dantecatalfamo: Make certificate list scrollable (#41891) - getvictor: Update actions/setup-go to v6.3.0 (#42152) - eashaw: Website: Update accepted

contactSource

values in CRM helpers. (#41808) - nonpunctual: Update protecting-the-linux-device-remote-wipe-usb-sudo.md (#42136) - nonpunctual: Update unlocking-linux-productivity-securing-apps-and-updating-certif… (#42135) - nonpunctual: Update security-baselines-for-linux.md (#42134)

- nonpunctual: Update why-enterprise-linux-is-important-in-2026.md (#42132) - nonpunctual: Update automated-provisioning-for-Linux-desktop-in-the-enterprise.md (#42133) - sgress454: Fix get/create/update query response (#41966) - sgress454: Allow hosts key to be empty for manual labels (#42022) - getvictor: Fixed Admin By Request false positive CVEs (#42095) - ksykulev: Added OTEL DB stats metrics, renamed trace attributes to expected OTEL names ... - kilo-code-bot[bot]: Fix fleetdm.com RSS feed to pass W3C Feed Validator (#42068) - akuthiala: Change footer message (#42169) - mikermcneil: Microsoft store support coming sooner than expected (#42171) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#42176) - kitzy: Add script to sync Jamf user assignments to Fleet device mapping (#42177) - kilo-code-bot[bot]: Remove Brock Walters from marketing team pages (#42183) - ireedy: Update receive-from-github.js (#42181) - Claude: Bump MySQL test version from 8.0.39 to 8.0.42 (#42122) - cdcme: Improve VPP errors for large install failures (#41997) - jahzielv: SHAA: hosts summary and hosts filtering (#42149) - getvictor: Turn off Claude commit/PR attribution. (#42195) - mb-chigoose312: updated Q4 MacSysAdmin event with location (#42192) - akuthiala: New marketing handbook page (#42198) - sgress454: Add fleetctl new command (#41909) - eashaw: Website: Update variable set in routes (#42196) - kilo-code-bot[bot]: Fix sentence case violations in marketing-ops handbook page (#42201) - kilo-code-bot[bot]: Fix sentence case violations in event-execution handbook page (#42202) - kilo-code-bot[bot]: Fix sentence case in marketing handbook pages and rename Marketing Assets slu... - kilo-code-bot[bot]: Fix sentence case violations on marketing handbook pages (#42208) - getvictor: Differentiate between Windows Server Core and full desktop installations (#42... - akuthiala: Update blue banner on home page (#42211) - fleet-release: Update Fleet-maintained apps (#42209) - allenhouchins: Add macOS 27 incompatible apps report (#42214) - allenhouchins: Update macOS 27 incompatible apps report (#42217) - ghernandez345: fix flashing error message when turning off apple mdm (#42075) - noahtalerman: Update story template: Instructions for new tables (#42090) - georgekarrv: Fix formatting in CODEOWNERS file (#42111) - hollidayn: Update 📜 Fleet Subscription Terms.md (#42102) - salgattll: Add Flatcar Container Linux and CoreOS to recognized Linux platforms (#42186) - kilo-code-bot[bot]: Fix purple hover color on cancel upcoming activity icon (#42173) - kilo-code-bot[bot]: Show .tar.gz as allowed file type on custom package upload screen (#42174) - getvictor: Throttle CA access through MDM (#42114) - kilo-code-bot[bot]: Add open position: Customer Solutions Architect (#42237) - tux234: Add Proxyman as a Fleet-maintained app (#41573) - johnjeremiah: Removing script that strips UTM parameters (#42205) - eashaw: Website: Update order of events on GitOps workshop page. (#42244) - fleet-release: Update Fleet-maintained apps (#42241) - getvictor: Reduced redundant database calls in the osquery distributed query results hot... - sgress454: Add "exceptions" GitOps config (#42013) - kilo-code-bot[bot]: Handbook: Add responsibility for LinkedIn ad creative management (#42213) - melpike: Update UI to reflect enrollment behavior (#42105) - kilo-code-bot[bot]: Update modal 'Done' buttons to say 'Close' (#41751) - kilo-code-bot[bot]: Update e-group meeting to 2-hour weekly with expanded attendee list (#42153) - sgress454: Pin Localstack version (#42253) - tux234: Add kitty as a Fleet-maintained app (#41574) - kc9wwh: Rename section for certificate renewal process (#42251) - lukeheath: Add @lukeheath as code owner for /docs/solutions (#42256) - getvictor: Bind docker ports to 127.0.0.1 (#42232) - lucasmrod: Update host vitals docs (#42254)

- eashaw: Website: Add qualified to contact forms (#42259) - getvictor: Removed the ptr helper package from Activity bounded context (#42161) - lukeheath: Fix incorrect labels on VPP and ABM tables (#41986) - dantecatalfamo: 41542 android cert resend backend (#42099) - allenhouchins: Add kilocode SKILL.md for Fleet GitOps (#42258) - mike-j-thomas: Update MDM comparison PDF (#42228) - kilo-code-bot[bot]: Add Adam Anklewicz (Thumbtack) testimonial to customers page (#42229) - noahtalerman: Renaming: YAML reference (#42115) - mb-chigoose312: removed middle initial from name (#42175) - akuthiala: Correct Marketing Campaign Manager's name (#42279) - akuthiala: Remove Product Education Manager from README (#42280) - allenhouchins: Update 1Password macOS policy to enable scheduled maintenance (#41932) - kilo-code-bot[bot]: Update Firefox macOS policy to enable scheduled maintenance (#42283) - allenhouchins: Enable calendar events on Workstations fleet (#42284) - kilo-code-bot[bot]: Remove WhatsApp block rule and deploy Santa profiles to all Workstations Macs... - allenhouchins: Add display_name for Mozilla Firefox (#42286) - ghernandez345: add expiration to auth token via sso login (#42094) - sgress454: Small tweaks to default.yml template for

fleetctl new

(#42239) - nulmete: [Host details > Reports] Frontend changes (#42017) - jahzielv: SHAA: host dep details API (#42250) - allenhouchins: Add Python script support for macOS and Linux (#38562) - cdcme: Fix missing FMA apps added via GitOps (#42306) - fleet-release: Update Fleet-maintained apps (#42308) - allenhouchins: Update title casing in SKILL.md (#42310) - lucasmrod: Fix security warnings on

fleetdm/fleetctl

(#42276) - lucasmrod: Add ignores for CVE-2026-0861 in bomutils (#42292) - marko-lisica: [Docs] VPP is not returned in

fleetctl get config

if set via UI or API (#42... - kilo-code-bot[bot]: Update Firefox to 149.0 for Workstations team (#42315) - kilo-code-bot[bot]: Add article: Enroll MacBook Neo at scale with Fleet zero-touch enrollment (#4... - jkatz01: Software documentation updates (#42164) - kilo-code-bot[bot]: Add open position: 🚀 Customer Support Engineer (APAC) (#42320) - RachelElysia: Fleet UI: Add max height to dropdowns that can be infinitely long (#42317) - GrayW: Fix typo under pricing faq (#42319) - noahtalerman: Config for contributors reference (#42303) - rachaelshaw: Update "Add hosts" modal copy (#41517) - lucasmrod: Fix CVE fleetdm/fleet alerts (#42314) - lucasmrod: Fix fleetdm/wix warnings (#42312) - jahzielv: fix usage of query params in host software endpoint (#42302) - ksykulev: Improved cpe deterministic matching (#42325) - mike-j-thomas: Upload new image for "see reality clearly" section of the homepage (#42291) - kilo-code-bot[bot]: Update homepage copy for 'See reality clearly' section (#42350) Read more: https://github.com/fleetdm/fleet/commits/main