🏗️ New commits pushed to Fleet: - getvictor: Minor fixes for public Autopilot docs. (#43399) - fleet-release: Update Fleet-maintained apps (#43554) - dependabot[bot]: Bump grunt from 1.0.4 to 1.5.3 in /ee/fleet-agent-downloader (#43250) - RachelElysia: Fleet UI: Consistent CTA button location (#43499) - allenhouchins: Rename iMazing Profile Editor to iMazing in the FMA library (#43555) - eashaw: Remove empty

resolution

attributes from two policies (#43576) - RachelElysia: FE: Add dark mode view to storybook (#43469) - allenhouchins: Re-add iMazing Profile Editor as a macOS FMA (#43574) - fleet-release: Update Fleet-maintained apps (#43579) - kilo-code-bot[bot]: Add 'Why Claude Teams?' section to why-this-way handbook page (#43487) - mikermcneil: Update go-to-market-operations.md (#43594) - GrayW: Update FAQ for Linux disk encryption (#43530) - getvictor: Android agent: retry DNS (#43464) - getvictor: Reset verified certificates to pending during Android host re-enrollment (#43... - johnjeremiah: Adding PitchDeck and Webinar Recordings (#43535) - fleet-release: Update Fleet-maintained apps (#43588) - dependabot[bot]: Bump follow-redirects from 1.15.11 to 1.16.0 (#43562) - fleet-release: Update Fleet-maintained apps (#43603) - johnjeremiah: Adding Video Hosting details (#43532) - johnjeremiah: Fixing a few typos in the Alternatives to jamf blog (#43436) - allenhouchins: Remove several x86 Windows apps, labels and policies (#43608) - allenhouchins: Temporarily disable FMA patch policies (#43611) - allenhouchins: Revert "Temporarily disable FMA patch policies" (#43612) - allenhouchins: Update patch-fleet-maintained-apps.yml (#43614) - allenhouchins: Update patch-fleet-maintained-apps.yml (#43615) - allenhouchins: Update patch-fleet-maintained-apps.yml (#43617) - allenhouchins: Update patch-fleet-maintained-apps.yml (#43618) - allenhouchins: Update workstations.yml (#43620) - noahtalerman: Move APNs instructions out of UI and into guides (#43434) - melpike: Missed AMB UI instances (#43506) - rakkfalen: Fix typo in intent signals processing section (#43619) - fleet-release: Update Fleet-maintained apps (#43636) - fleet-release: Update Fleet-maintained apps (#43662) - eashaw: Website: Add webinar article template page. (#43627) - AdamBaali: Migrate CIS benchmarks to docs/solutions/cis/ with production-ready profiles,... - fleet-release: Update Fleet-maintained apps (#43663) - juan-fdz-hawa: Allow the creation of API-only users (#43440) - rachaelshaw: Website: Update callout box to use styles from the product, and update bubble... - AdamBaali: Add and document fallback script for wiping Windows devices (#42230) - rachaelshaw: Permissions: Fix stray reference to "queries" (#43674) - getvictor: Added Qodo configuration (#43668) - rachaelshaw: Simplify explanation of fleet-level user permissions (#43676) - noahtalerman: Renaming: fleetctl apply (#43581) - AdamBaali: claude/fix-cis-shebang-NTw1M (#43681) - eashaw: Website: Add mixins for checklists and cta buttons (#43682) - noahtalerman: Roadmap preview: April 2026 (#43472) - eashaw: Website: Update note blocks on docs pages to use tip-block mixin (#43686) - danbgordon: Add 9 problems article (#43690) - danbgordon: Add blog publishing instructions to marketing page (#43691) - akuthiala: Add Ashish Kuthiala to leadership team (#43692) - danbgordon: Add Kitzy AI+GitOps article from her blog (#43693) - danbgordon: Fix capitalization in article title (#43703) - getvictor: Fix broken OTEL due to #43298 (#43705) - danbgordon: Fix title capitalization in second place (#43706) - danbgordon: Post Linux DM article: How to define your Linux device management needs (#43694) - danbgordon: Post Linux business case article (#43701) - lppepper2: Document access and usage guidelines for Claude (#43716) - eashaw: Website: update cta-button mixin hover state (#43717) - noahtalerman: Move VPP instructions out of UI and into guides (#43641)

- georgekarrv: Adding changes for Fleet v4.83.2 (#43495) - spalmesano0: Fix broken link for mdm.allow_all_declarations (#43680) - noahtalerman: YAML reference: Document support for wildcard

paths

(#43568) - dependabot[bot]: Bump dompurify from 3.3.2 to 3.4.0 (#43655) - rachaelshaw: Website: Update code styles inside callout blocks (#43728) - JordanMontgomery: Do not replace EVs in script-only packages (#43606) - irenareedy: Update README.md (#43737) - johnjeremiah: Adding GCM script to layout.ejs (#43507) - AdamBaali: docs: Add

paths:

glob pattern support to GitOps YAML reference (#43600) - fleet-release: Update Fleet-maintained apps (#43739) - johnjeremiah: Update marketing Assets- Conf Handout and webinar (#43700) - fleet-release: Update Fleet-maintained apps (#43743) - fleet-release: Update Fleet-maintained apps (#43744) - fleet-release: Update Fleet-maintained apps (#43747) - fleet-release: Update Fleet-maintained apps (#43749) - mna: DDMV: Support Fleet variables in DDM (#43222) - nulmete: [Frontend] Create API-only users that only have access to customer-defined Fl... - allenhouchins: Add Fleet Desktop update policy and bump package (#43750) - noahtalerman: Update "Release blog post" ritual (#43718) - noahtalerman: API reference: Add

exclude_software

to "Get host by Fleet Desktop token" (#... - allenhouchins: Use app-specific labels for macOS software (#43751) - allenhouchins: Updated scoping of Fleet-maintained apps on Workstations (#43752) - allenhouchins: Update custom icon assets (#43753) - allenhouchins: Add battery capacity ratio check (#43758) - getvictor: Fixed stale MDM profiles after MDM toggle (#43719) - allenhouchins: Add macOS Fleet Desktop label and attach to policy (#43760) - fleet-release: Update Fleet-maintained apps (#43761) - RachelElysia: Fleet UI: Update label target copies (#43763) - melpike: Fix wrapping "Learn more" on Integrations > Idp on smaller screens (#42766) - mostlikelee: Fix OSV sync shallow clone failing on quiet weekends (#43450) - lucasmrod: Add a way to test osquery PR on local fleetd TUF (#43624) - lucasmrod: Ignore vulnerabilities in fleetdm/bomutils (#43765) - BCTBB: Loadtest osquery perf workflow wording and enroll.sh remainder updates (#43762) - lucasmrod: Update go to 1.26.2 and update tooling to update it (#43771) - lucasmrod: Ignore vulnerabilities in fleetdm/wix (#43764) - danbgordon: Post whitepaper IT leader's guide to Linux device management AND fix whitepa... - RachelElysia: Fleet UI: Add padding to calendar instructions (#43777) - dependabot[bot]: Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 (#43740) - lucasmrod: Flag fleetdm/fleetctl vulnerabilities (#43785) - mna: DDMV: fix unresolved Fleet variable in DDM profile behavior (#43556) - lucasmrod: Fix parser extra colon (#43796) - noahtalerman: Move Apple Business instructions out of UI and into guides (#43638) - eashaw: Website: Update style mixins and variables (#43801) - jkatz01: Allow icon in team level yaml for script-only packages (#43783) - allenhouchins: Add Druva inSync as a Windows FMA (#43817) - allenhouchins: Fix typos in Elgato app descriptions (#43818) - eashaw: Website: add claude.md (#43815) - getvictor: Android agent to always send the

platform

field on enrollment (#43809) - fleet-release: Update Fleet-maintained apps (#43822) - akuthiala: Update public relations consultant details (#43825) - kilo-code-bot[bot]: Add Thomas Lübker testimonial to customers page (#43830) - kilo-code-bot[bot]: Add LinkedIn link for Alyssa Pallotti in marketing team table (#43831) - kilo-code-bot[bot]: Add Press Coverage table to marketing assets handbook page (#43832) - kilo-code-bot[bot]: Replace em-dashes with simple hyphens in marketing assets handbook page (#43833) - kilo-code-bot[bot]: Move Date column to last position in Press Coverage table (#43834) - juan-fdz-hawa: Added middleware for api-only users auth (#43772)

- RachelElysia: Fleet UI: Improve host policy empty modal (#43805) - fleet-release: Update Fleet-maintained apps (#43828) - github-actions[bot]: Update 1Password policy versions (#43840) - fleet-release: Update Fleet-maintained apps (#43841) - MagnusHJensen: make DDM name check case insensitive (#43347) - allenhouchins: Add Touch ID sudo script and icon (#43848) - RachelElysia: Fleet UI: Custom variables page updates (#43810) - JordanMontgomery: Fix MDM status modal for non-ABM Apple hosts (#43850) - allenhouchins: Add display_name for Touch ID sudo script (#43852) - sgress454: Use Docker as default WiX runtime on macOS arm64 (#43715) - fleet-release: Update Fleet-maintained apps (#43849) - fleet-release: Update Fleet-maintained apps (#43855) - spalmesano0: Fix broken link for Android profile failures (#43847) - mna: DDMV: improve osquery-perf simulation of DDM traffic (#43607) - noahtalerman: Fleet server config reference: Declarations are device-scoped only (for now) ... - noahtalerman: Roadmap blogpost: Add links to issues (#43720) - jkatz01: 🤖 Ignore DEP premium filters on Fleet Free tier (#43865) - johnjeremiah: Fixing Sentence Case Typos (#43725) - allenhouchins: Update enable-touch-id-sudo.sh (#43880) - allenhouchins: Fix display name formatting for Touch ID script (#43882) - akuthiala: Add whitepapers section and update marketing assets (#43879) - eashaw: Website: queries » reports (#43871) - fleet-release: Update Fleet-maintained apps (#43867) - mostlikelee: Add RHEL support to osv-processor (#43277) - ksykulev: Use UTC time for osv processing (#43889) - fleet-release: Update Fleet-maintained apps (#43891) - getvictor: Fixed Android pubsub panic when host was deleted (#43788) - kilo-code-bot[bot]: Update Steven Palmesano's title from CSA to CSE (#43913) - dependabot[bot]: Bump follow-redirects from 1.15.11 to 1.16.0 in /tools/fleet-slackbot (#43730) - dependabot[bot]: Bump hono from 4.12.12 to 4.12.14 in /tools/fleet-slackbot (#43653) - dependabot[bot]: Bump follow-redirects from 1.15.11 to 1.16.0 in /tools/fleetctl-npm (#43561) - getvictor: Improved Windows MDM performance (#43912) - johnjeremiah: Contact source change for webinar and gated doc (#43838) - sgress454: Allow conditional downloads across fleets (#43679) - jakestenger: more Windows solutions (#43925) - eashaw: Website: update build-static-content script to be compatible with Node versio... - kilo-code-bot[bot]: Add 'Why no optional attendees?' to Why this way handbook page (#43931) Read more: https://github.com/fleetdm/fleet/commits/main