🏗️ New commits pushed to Fleet: - mb-chigoose312: partner engagement types for workshops (#44149) - Sampfluger88: 2026 04 24 sam (#44172) - rachaelshaw: v4.84.0 doc changes (#40665) - noahtalerman: Release article: Fleet 4.84.0 (#43787) - fleet-release: Update Fleet-maintained apps (#44166) - allenhouchins: Update santa-configuration.mobileconfig (#44175) - allenhouchins: Transition Nudge to Fleet-maintained app (#44176) - allenhouchins: Transition 1Password to Fleet-maintained app version (#44177) - allenhouchins: Comment out 1Password fleet policy and app (#44178) - allenhouchins: Revert "Comment out 1Password fleet policy and app" (#44180) - allenhouchins: Disable 1Password auto-install and patch checks (#44181) - allenhouchins: Enable 1Password in fleets and patch policies (#44182) - allenhouchins: Enable Nudge auto-install and comment policy (#44185) - allenhouchins: Add Santa system extension policy and script (#43498) - allenhouchins: Fix deprecation warnings (#44186) - lukeheath: Adding changes for Fleet v4.84.0 (#43092) (#44174) - akuthiala: Add link to review Momentum's answered questions (#44184) - fleet-release: Update Fleet-maintained apps (#44192) - fleet-release: Update Fleet-maintained apps (#44195) - fleet-release: Update Fleet-maintained apps (#44197) - lucasmrod: Adding

gitOpsModeEnabled

and

gitOpsModeExceptions

to anonymous statistics... - shc-sync: Add Sean Hannon to CSM Team list (#44087) - seryokibal: Update README.md (#44206) - fleet-release: Update Fleet-maintained apps (#44213) - melpike: Add Autopilot repurposing instructions for Windows devices (#42840) - noahtalerman: Add API-only user verification in story template (#44160) - nunatlipata98-cpu: Update README.md (#44208) - JordanMontgomery: 🤖 #44198: Add guards on iOS/iPadOS refetch paths (#44205) - spalmesano0: Update default Apple automatic enrollment profile (#40832) - lukeheath: Update PGP key and fingerprint in SECURITY.md (#44221) - andymFleet: updated AB tokens renew and delete options to enabled in gitops mode (#43510) - danbgordon: Update closed video guideline for sprint demos (#44203) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#44222) - nulmete: Fix: Navigating to a a new host displays activity feed for a previously opene... - getvictor: Windows MDM osquery-perf fix (#44152) - lucasmrod: Bump macadmins/osquery-extension to v1.4.1 and add network_quality ta… (#44214) - allenhouchins: Enable osquery eventing and macOS FIM config (#44215) - nulmete: Fix: Label shows outdated manually selected host after navigating back to the... - RachelElysia: Fleet UI: Disable gitops mode if in gitops mode (#44237) - GrayW: Add scripts for Linux and macOS to set hostnames (#43599) - lucasmrod: Ignore

fleetdm/wix

vulnerabilities (#44223) - lucasmrod: Ignore

fleetdm/bomutils

vulnerabilities (#44224) - lucasmrod: Ignore

fleetdm/fleet

and

fleetdm/fleetctl

vulnerabilities (#44247) - jkatz01: Check for duplicate linux software installers (#44234) - sgress454: Don't ignore GitOps secrets on free tier (#44148) - eashaw: Website: Fix typo in ms compliance proxy inputs (#44258) - RachelElysia: Fleet UI: New empty states (#43896) - lukeheath: Revise CODEOWNERS for documentation ownership (#44265) - danbgordon: Repoint YT video URL in 4.84 release blog (#44264) - ksykulev: Windows MDM improved host profile status performance (#44225) - fleet-release: Update Fleet-maintained apps (#44257) - allenhouchins: Add Google Gemini as a macOS FMA (#44268) - mikermcneil: Website: Weren't these backwards? (#44273) - eashaw: Website: update /infrastucture-as-code (#44262) - kitzy: Add documentation for using AutoPkg with Fleet (#44105) - lucasmrod: Move script request and response types from server/service to server/fleet (#... - mna: CSAH: appconfig/gitops/DB migration to add `preserve_host_activities_on_reenr...

- MagnusHJensen: Better Apple server URL validation (#44163) - MagnusHJensen: updated default profile, added endpoint for seeing what default is applied (#... - fleet-release: Update Fleet-maintained apps (#44271) - fleet-release: Update Fleet-maintained apps (#44281) - irenareedy: Update testimonials.yml (#44274) - irenareedy: Create industrial-devops.md (#44289) - mike-j-thomas: Update why-fleet.md (#44100) - eashaw: Website: Update breakpoint in infrastructure as code stylesheet (#44294) - lucasmrod: Release osqueryd 5.23.0 (#44220) - cdcme: Bound orbit retries on missing installer details to 5 mins (#44284) - ethanfox: Fix typo in create invoice instructions section (#44283) - MagnusHJensen: UDAE: fetch and allow download default setup assistant profile (#44253) - juan-fdz-hawa: Fixed patch logic on EditUperPage component (#44302) - jkatz01: Fix script-only packages not setting install script file (#44299) - RachelElysia: Fleet UI: Fix Settings > Calendar stylesheet not connected (#44308) - MagnusHJensen: clean up styles and naming (#44309) - sgress454: Upgrade fork-ts-checker-webpack-plugin (#44304) - getvictor: Revert "Partial revert of #38785 work-in-progress (#44061)" (#44285) - allenhouchins: Add protected-branches rule and cherry-pick note (#44317) - Leanngove: Update department reference for billing emails (#44217) - juan-fdz-hawa: Add gitops endpoints to api_endpoints catalog (#44291) - RachelElysia: Fleet UI: Improved error message when deleting a label that is for targeting ... - RachelElysia: Fleet UI: Creating policy redirects to policy details page (#44321) - getvictor: Improved the performance of Windows MDM profile reconciliation (#44075) - getvictor: Return Windows Enrollment Status Page (ESP) (#43454) - jkatz01: Fix anka fma bundle identifier (#44318) - eashaw: Update ee/fleet-agent-downloader app configuration (#44338) - kilo-code-bot[bot]: Hide swag CTA on the Why Fleet docs page (it's kinda weird because it's like ... - mike-j-thomas: Update infrastructure-as-code.ejs (#44340) - allenhouchins: Prevent patch title ID collisions (#44179) - eashaw: Update fleet-agent-downloader app dependencies (#44350) - sgress454: Fix some bugs in charts UI (#44329) - mike-j-thomas: Update infrastructure-as-code.ejs (#44349) - fleet-release: Update Fleet-maintained apps (#44337) - mike-j-thomas: Updated table styles (#44354) - danbgordon: move main customer quote up a section (#44370) - lucasmrod: Fix filtering in /api/v1/fleet/labels/:id/hosts endpoint (#44293) - lucasmrod: Fix issue with fleet's docker image in k8s environments (#44373) - sgress454: Add Vulnerabilities exposure dataset (#44124) - MagnusHJensen: redirect to correct URL, and allow both URLs for MDM SSO SAML validation if s... - github-actions[bot]: Fleet UI: Update osquery version options (#44193) - JordanMontgomery: 43885: MLAPR migration + UUID capture (#44244) - eashaw: Update fleet-agent-downloader app uploads configuration (#44386) - fleet-release: Update Fleet-maintained apps (#44384) - allenhouchins: Add security policies and reports to Workstations (#43457) - kilo-code-bot[bot]: Comment out homepage announcement banner (#44395) - sharon-fdm: Fix FD leak in goval_dictionary Analyze (#42741) (#43983) - kilo-code-bot[bot]: Remove industrial-devops case study from website (#44319) - irenareedy: Update financial-data-company.md (#44351) - kilo-code-bot[bot]: Update homepage hero: kicker text and heading copy (#44398) - allenhouchins: Add spacing to report description blocks (#44409) - eashaw: Website: Update logo carousel and testimonials, clean up unused assets (#44417) - allenhouchins: Quote $INSTALLER_PATH when computing TMPDIR (#44396) - lucasmrod: Update fleetd linux docker images used for testing (#44415) - allenhouchins: Update Linear slug (#44424) - getvictor: Updated disk encryption docs to match code. (#44420) - cdcme: Short-circuit for empty software config in Gitops dry run (#44405)

- RachelElysia: Empty state followup (#44427) - noahtalerman: Deploy certificates guide: Move examples so they're easier to find (#43981) - MagnusHJensen: restrict unbouded goroutine spawning, fix panic on nil pushInfo for multi pus... - cdcme: Improvements for Redis stress testing tool (#44411) - JordanMontgomery: Improve filtering on commands endpoints (#44426) - eashaw: Vulnerability dashboard: Update

update-reports

script to use software versi... - noahtalerman: Okta conditional access: Renewal is coming soon and what to do about old cert... - dantecatalfamo: Add macOS 26 Tahoe CIS benchmark v1.0.0 (#44090) - dantecatalfamo: Fix SCEP autorenew failing for offline hosts (#44250) - lukeheath: Trivy: scan active RC branches nightly (#44449) - fleet-release: Update Fleet-maintained apps (#44429) - jkatz01: 43962 vpp managed config migration (#44435) - fleet-release: Update Fleet-maintained apps (#44455) - sgress454: Build fleetctl MSI packages (#43403) - ksykulev: Exclude orphaned windows profiles (#44423) - BCTBB: Terraform module updates (#43543) - AndreyKizimenko: Add Trivy scan verification section to release QA template (#44451) - rachaelshaw: Update experimental feature note (#44457) - lucasmrod: Update CVE notes in

security/status.md

(#44430) - allenhouchins: Support custom tap folder for apps without casks; add three apps (#43784) - allenhouchins: Patch Adobe Acrobat automatically on workstation devices (#44316) - danbgordon: fix fastly customer quote on iac page (#44463) - irenareedy: Update socialmedia.md (#44307) - fleet-release: Update Fleet-maintained apps (#44466) - marko-lisica: Update bug report responsibilities for Product Designers (#44278) - W0lfbane: fix(android): remove tautological NCR filter in hostVPPInstalls (#42873) - eashaw: Website: Add two redirects for comparison article (#44484) - mike-j-thomas: modern device management image update (#44468) - sgress454: Vulnerability exposure chart front-end (#44261) - kilo-code-bot[bot]: Homepage: move eyebrow text to subtitle below heading (#44475) - juan-fdz-hawa: Skip membership catalog test for API-only users if they have access to everyt... - fleet-release: Update Fleet-maintained apps (#44485) - juan-fdz-hawa: Add include_all label scope to policies and reports (#44305) - fleet-release: Update Fleet-maintained apps (#44498) - fleet-release: Update Fleet-maintained apps (#44502) - getvictor: Set Redis explicitly to 6.2 for clarity (it was already aliased to latest 6.2... - irenareedy: Update event-execution.md (#44507) - mostlikelee:

fleetctl vulnerability-data-stream

to download OSV data (#44260) - danbgordon: Change article text to properly frame data sovereignty (#44469) Read more: https://github.com/fleetdm/fleet/commits/main