🏗️ New commits pushed to Fleet: - rfairburn: Update dogfood alert channel (#44142) - mostlikelee: Add RHEL 8/9/10 simulated hosts to osquery-perf (#44453) - sgress454: Fix lint issue in checkerboard viz (#44510) - MagnusHJensen: [Guide] Document MDM turn-off on SCEP renewal failure (#44516) - lukeheath: Reorganize engineering handbook (#44443) - lukeheath: Add Runbooks section to engineering handbook (#44408) - AndreyKizimenko: Standardize formatting in release-qa issue template (#44460) - getvictor: Fixed

GET /api/v1/fleet/commands

timeout in large Fleet deployments (#44297) - eashaw: Website: update search filter on controls documentation pages (#44545) - lukeheath: Em dash removal (#44531) - kilo-code-bot[bot]: Add "Remove a contact from Top contacts" to GTM operations handbook (#44543) - kilo-code-bot[bot]: Add missing descriptions to pricing features table items (#44558) - fleet-release: Update Fleet-maintained apps (#44554) - kilo-code-bot[bot]: Homepage: link 'See how it works' to /gitops-workshop instead of video modal ... - RachelElysia: Fleet UI: Split out inventory vs. library team level views (#44467) - lucasmrod: Add activities for user actions on labels (#44522) - lucasmrod: Update security notes for v4.84.2 (#44577) - AndreyKizimenko: Add QA checklist for Playwright automation (#44394) - getvictor: Enable disk encryption when only Windows MDM is configured. (#44462) - georgekarrv: Adding changes for Fleet v4.84.1 (#44525) - fleet-release: Update Fleet-maintained apps (#44579) - andymFleet: Update oncall.sh to exclude app/kilo-code-bot (#44474) - karmine05: feat(fleet-mcp): production-grade MCP server with full filter routing (#44481) - MagnusHJensen: remove activity details list (#44513) - getvictor: Redis-backed cache for host-by-key lookups (#43936) - noahtalerman: fleetctl new: Update automatic enrollment profile (#44441) - ksykulev: PMM docs on how to monitor local mysql (#44287) - MagnusHJensen: produce failed enrollment renewal activity (#44511) - getvictor: Add Windows support for "Require all software" during setup experience. (#44519) - MagnusHJensen: Add frontend support for enrollment profile renewal failed activity (#44530) - mostlikelee: Openspec init (#44592) - cdcme: Prevent silent corruption of software title icons (#44540) - lukeheath: fleet-slackbot: graceful tool-budget fallback and MCP prompt coverage (#44598) - MagnusHJensen: Fix code default profile (#44601) - melpike: Remove duplicate MDM setup instructions for Fleet (#44600) - noahtalerman: New DRI: Apple Enterprise integrations (#44604) - noahtalerman: Add article: Fleet MCP (#44447) - lukeheath: fleet-slackbot: make MAX_TOOL_CALLS configurable, default to 100 (#44607) - lucasmrod: Add missing transfer permissions on Fleet admins/maintainer/gitops (#42963) - noahtalerman: `fleetctl preview`: Clarify that this is for trying Fleet (#44133) - mna: Wipe host cancels all upcoming activities (#44323) - eashaw: Website: update homepage hero mobile styles (#44623) - danbgordon: Convert jamf comparison table to markdown with emojis for color (#44573) - noahtalerman: YAML reference: Extraneous keys (#43843) - mikermcneil: Docs: Update gitops reference (#44267) - noahtalerman: YAML reference cleanup (#43845) - noahtalerman: API reference typo and missing parameter (#44586) - irenareedy: Update financial-services-platform.md (#44248) - irenareedy: Update digital-bank-1.md (#44450) - allenhouchins: Fix Fleet Desktop not launching on OpenSUSE 16 (#44482) - allenhouchins: Pin appindicator extension, verify tarball & timeout (#44631) - spalmesano0: Fix Settings reference (#44231) - spalmesano0: Add Arch to syslog list (#44520) - spalmesano0: Add warning about unsupported attributes (#44201) - fleet-release: Update Fleet-maintained apps (#44635) - GrayW: Update

lsblk

example on linux-disk-encryption-end-user.md (#44375) - GrayW: Update enroll-hosts.md (#44470)

- fleet-release: Update Fleet-maintained apps (#44638) - allenhouchins: Add screen-lock MDM profiles and exclusion labels (#44581) - juan-fdz-hawa: Add include_all label scope UI to policies and reports (#41565) - juan-fdz-hawa: Validate label platform during gitops --dry-run (#42477) (#44594) - juan-fdz-hawa: Fixed bug with about to expire CLI banner (#34924) - MagnusHJensen: add missing IDP required check for OTA profiles (#44644) - kilo-code-bot[bot]: Fleet server configuration docs: Clarify S3 endpoint_url override behavior an... - JordanMontgomery: Allow returning x509 PEM cert instead of PEM-encoded PKCS7 envelope from requ... - noahtalerman: Update custom OS settings documentation (#44537) - kilo-code-bot[bot]: Enable host expiry for Testing & QA team (30 days) (#44649) - kilo-code-bot[bot]: Enable host expiry (90 days) for Workstations and mobile device teams (#44650) - allenhouchins: Convert Fleet Desktop.app to FMA and patch policy (#44654) - fleet-release: Update Fleet-maintained apps (#44655) - RachelElysia: Fleet UI: Library tooltip copy fix (#44643) - allenhouchins: Bump fleet-desktop to v1.2.0 (#44670) - georgekarrv: Adding changes for Fleet v4.84.2 (#44590) - allenhouchins: Remove Fleet Desktop login item profile (#44673) - rachaelshaw: Docs: Fix residual issues from merge conflict (#44677) - ksykulev: Periodic background job to cleanup Windows MDM command queue (#44458) - lucasmrod: Add explicit checks for forbidden API only endpoints (future proofing) (#44664) - fleet-release: Update Fleet-maintained apps (#44658) - allenhouchins: Remove enrollment profile policy and test label (#44683) - allenhouchins: Add Fleet Desktop launch agent configuration profile (#44679) - dependabot[bot]: Bump postcss from 8.4.31 to 8.5.10 in /ee/fleetd-chrome (#44138) - allenhouchins: Revert "Add Fleet Desktop launch agent configuration profile" (#44688) - BCTBB: Load test terraform fixes (#44678) - JordanMontgomery: Update high-level arch with MDM callouts (#44164) - ksykulev: Add Info logging around vulnerability scanning phases (#44653) - sharon-fdm: Fix gitops dry-run to catch manual_agent_install + macos_script conflict (#44... - mostlikelee: Revert "Fix SCEP autorenew failing for offline hosts (#44250)" (#44535) - allenhouchins: Add macOS configuration for Fleet Desktop launch agent (#44693) - noahtalerman: YAML reference: Clean up script-only packages (#43883) - juan-fdz-hawa: Removed invalid routes from docs (#44096) - lukeheath: Switch to radio buttons for theme selection (#44518) - AndreyKizimenko: Enhance release QA template with Helm chart verification (#44585) - BCTBB: Load test - Enable standard performance insights (#44694) - jkatz01: Require bug fixes to be manually validated in community PRs (#44689) - georgekarrv: adding redis and mysql subcharts instead of bitnami (#42442) - RachelElysia: FE: Cleanup lint warnings Part V (#44685) - dependabot[bot]: Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /ee/fleetd-chrome (#44036) - noahtalerman: YAML: Fix typo from merge conflict (#44479) - noahtalerman: YAML reference: Missing default (#44514) - spalmesano0: Clarify what the Entity ID is (#44012) - eashaw: Docs: add

keywordsForDocsearch

meta tags (#44544) - sharon-fdm: Bump pgx/v5 to v5.9.2 in goval-dictionary (CVE-2026-33816) (#44706) - eashaw: Website: remove /meetups and update routes (#44701) - noahtalerman: Reference docs: Multi-platform names for

macos_setup

and

macos_settings

(... - noahtalerman: FAQ: Bump Mac Admins extension version (#44437) - kilo-code-bot[bot]: Add monthly ritual to catch up on #help-marketing posts (#44570) - JordanMontgomery: Remove TODO in story template comments (#44686) - lucasmrod: Allow concurrent

make lint-go

executions (#44724) - MagnusHJensen: update advanced options sections, add new checkbox (#44621) - nulmete: Add ability to upload custom org logos (#44390) - RachelElysia: Fleet UI: Fix dataset text alignment (#44659)

- RachelElysia: Setup experience: status jitter fix (#44464) - RachelElysia: FE: Cleanup lint warnings Part IV (#44486) - lukeheath: Handbook: Add 'Why read every line of AI-generated work?' (#44712) - lucasmrod: Add supported versions of Redis to the FAQ (#44471) - noahtalerman: Clicking outside a modal should close the modal (excluding forms that have be... - sgress454: Optimize data collection: add index and batch deletes (#44692) - fleet-release: Update Fleet-maintained apps (#44707) - allenhouchins: Update policy that checks launch agent plist file presence (#44731) - fleet-release: Update Fleet-maintained apps (#44734) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#44736) - JordanMontgomery: 🤖 Chore: remove deprecated appendListOptionsWithCursorToSQL (#44385) - ksatter: Update Entra provisioning instructions with notes (#44419) - ksatter: Clarify API key requirements for Fleet integration (#44551) - RachelElysia: Fleet UI: Add missing enable android mdm state (#44619) - sgress454: Allow disabling historical data collection (GitOps / API) (#44488) - nulmete: GitOps changes for custom org's logo uploads (#44550) - MagnusHJensen: fix UI elements in script library not respecting GitOps mode (#44743) - allenhouchins: Remove 1Password custom package (#44751) - RachelElysia: FE: Cleanup lint warnings Part VI (#44741) - RachelElysia: Fleet UI: Followup for enable VPP/ enable Android MDM states (#44745) - fleet-release: Update Fleet-maintained apps (#44737) - allenhouchins: Re-add install policies for 1Password and Nudge (#44755) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#44757) - sgress454: Allow GitOps user to list software (#44721) - noahtalerman: Update JIT provisioning role assignment details (#44753) - fleet-release: Update Fleet-maintained apps (#44756) - rachaelshaw: Update titles in policy docs, and remove unused parameter (#44766) - juan-fdz-hawa: Add include_all label scope to GitOps and fleetctl (#41566) - rachaelshaw: Remove unused policy YAML key (#44767) - rachaelshaw: Missing docs for "List host's reports" endpoint (#44768) - nulmete: Add regression test for renaming a patch policy via GitOps (#43687) (#44759) - sharon-fdm: Fix missing GitOps label validation for invalid field combinations (#44410) - eashaw: Website: Add copy button to code blocks in articles, handbook, and osquery ta... - noahtalerman: Add "International companies" to best practice list (#44749) - noahtalerman: GitOps mode: Software > Add software > Custom package page: Broken link (#44747) - eashaw: Website: fix quote attribution on customers page (#44799) - lucasmrod: Update changelog for fleetd 1.55.0 release (#44733) - cdcme: Fix gitops 500 when software title icon bytes are missing (#44735) - kilo-code-bot[bot]: Add Fleeties to Solution Specialist Slack engagement process for Leads (#44312) - lukeheath: Fix dark mode styling bugs (#44620) - eashaw: Handbook: Add ritual and handbook section about responding to website code sc... Read more: https://github.com/fleetdm/fleet/commits/main