🏗️ New commits pushed to Fleet: - fleet-release: Update Fleet-maintained apps (#45131) - sgress454: Add API param linter (#44045) - mikermcneil: Update contact.ejs CTA (#45136) - sharon-fdm: Warn when labels key appears in no-team/unassigned GitOps files (#44865) - nulmete: Fix: SCIM user creation 500s when host already has a SCIM mapping (#44275) - juan-fdz-hawa: Fix upcoming activity count not refreshing after host software install (#37012) - nulmete: LabelForm: replace 'teams' with 'fleets' (#44770) - lucasmrod: Update desktop token even if fleet desktop is disabled (#45140) - noahtalerman: Dashboard widgets empty state font size (#45133) - melpike: [Route] Update PSSO local account URL in routes (#45143) - eashaw: Website: Add auto-patching to "What will you be using Fleet for?" question on... - allenhouchins: Move Safari report to macOS and remove mappings (#45153) - dependabot[bot]: Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#45146) - MagnusHJensen: inconsistent alignment fleet premium (#45125) - eashaw: Website: update

<code>

styles on markdown article pages (#45161) - dependabot[bot]: Bump fast-uri from 3.1.0 to 3.1.2 in /tools/fleet-slackbot (#45083) - noahtalerman: SSO guide: Okta's new Fleet app (#45082) - fleet-release: Update Fleet-maintained apps (#45158) - fleet-release: Update Fleet-maintained apps (#45168) - sgress454: Fix google calendar key validation (#44556) - sgress454: Remove verb and url from gitops errors (#44555) - sgress454: Allow glob literals in filenames (#44547) - sgress454: Officially deprecated setup_experience.software (#44549) - sgress454: Improve name key validation in GitOps (#44553) - lukeheath: Style fixes: label form, empty-state spacing, registration dark mode (#45080) - getvictor: Fixed validation that rejected enabling end user authentication on Fleet depl... - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#45187) - fleet-release: Update Fleet-maintained apps (#45171) - getvictor: Improve error handling in

create-admin-user.ps1

script (#45176) - allenhouchins: Update Okta Verify policy resolution and install flag (#45185) - nulmete: Dedupe network errors so usage_statistics cron stops failing (#45142) - RachelElysia: FE: Lint cleanup VII (#45135) - jkatz01: Oncall doc update: software updates (#44943) - eashaw: Website: update homepage hero and header styles (#45198) - BCTBB: Dogfood database clone refresh (#45199) - noahtalerman: Update SSO rate limit best practice explanation (#45086) - allenhouchins: Add OpenVPN Connect as a macOS FMA (#45174) - fleet-release: Update Fleet-maintained apps (#45209) - MagnusHJensen: validate apple payload scope conflict, and unknown variable use in dry-run (#... - noahtalerman: Add "quick start" for GitOps and remove links to archived fleet-gitops repo ... - raju249: Add tests for serve.go pure helpers (#33370) (#44929) - fleet-release: Update Fleet-maintained apps (#45225) - lukeheath: Fix unreleased dark mode bugs in 4.85.0 (#45200) - fleet-release: Update Fleet-maintained apps (#45229) - marko-lisica: Update VPP verification timeout error (#45138) - eashaw: Update Incubate website dependency changes workflow (#45184) - kilo-code-bot[bot]: Add "Why think like a historian?" section to handbook (#45224) - marko-lisica: Metadata extraction improvements (#45219) - sharon-fdm: Fix MDM SSO callback 'missing profile' error for Android enrollment (#45046) - lucasmrod: Add host activity entries for retried software installs and script runs from ... - ksykulev: Scope windows mdm profile removal query (#45203) - cdcme: iOS/iPadOS managed config: validator (#43963) (#44930) - moojomoore: Add additional public endpoints that need to be exposed to the public interne... - getvictor: Final Windows setup experience (ESP) fixes (#44740) - eashaw: Website: Update margins on device-management and software-management pages (#...

- getvictor: Update Android agent dev instructions (#45228) - cdcme: iOS/iPadOS managed config: datastore (#43964) (#44931) - lucasmrod: Improve Slack notification for docker image trivy CVE detection (#45232) - RachelElysia: Fleet UI: return app name on success of adding android app (#44068) - melpike: Revise troubleshooting and AB issue details (#45271) - cdcme: iOS/iPadOS managed config: service wiring (#43965) (#44932) - kilo-code-bot[bot]: Rename Apple Business 'Location' to 'Organization Unit' in UI and docs (#44833) - melpike: Update API endpoints for iOS Account-driven Enrollment (#45266) - juan-fdz-hawa: Fix back-to-host-details button on report details page (#39727) (#45238) - juan-fdz-hawa: Fixed flaky test (#45222) - RachelElysia: Fleet UI: Allow users with edit access to add automation from policy details ... - juan-fdz-hawa: Fix Location and MDM status vitals looking clickable on My device page (#43279) - cdcme: iOS/iPadOS managed config: GitOps (#43969) (#44933) - lucasmrod: Reduce

fleet

and

fleetctl

binary sizes by removing debug symbols (#45260) - lukeheath: Add Luke Heath's bio and headshot (#45270) - lukeheath: Build mdmproxy and osquery-perf images by module tag (#45274) - cdcme: iOS/iPadOS managed config: Configuration dict injection (#43966) (#44934) - cdcme: iOS/iPadOS managed config: Fleet variable expansion (#43967) (#44935) - cdcme: iOS/iPadOS managed config: send-paths audit (#43968) (#44936) - JordanMontgomery: Add PSSO simplified setup profiles for Entra/Okta (#45157) - ireedy: Update leadership page with HoP bio (#45283) - jp-cpe: Update README.md (#45172) - lucasmrod: First move of server/service to server/service/svctest to prevent testing cod... - jkatz01: Show uninstall button even if software title is not found in inventory (#45273) - mike-j-thomas: Updated color levels for dashboard charts to match Figma (#45300) - getvictor: EUA (no Apple MDM) UI fix (#45212) - noahtalerman: UI dropdowns: Selected option has purple highlight (#45254) - jkatz01: Fix TestGitOpsTeamVPPAppleConfiguration failing (#45305) - sgress454: Apply labels before consumers in GitOps (#45194) - eashaw: Website: Update embedded youtube links (#45275) - lukeheath: Bump Go to 1.26.3 to clear stdlib CVEs (#45277) - lucasmrod: Add exclusions for future trivy scans (#45164) - noahtalerman: Dashboard widget: Hosts online: For first pass, drop mobile support (#45292) - getvictor: Fix for ONC profiles losing their details when adding another profile (#45299) - sgress454: Remove mobile platforms from chart filter list (#45310) - sgress454: Only collect data about tracked CVEs (#45247) - kilo-code-bot[bot]: Add Tina Ong (CFO) and Alex Mitchell (Head of Strategic Growth) to executive ... - johnjeremiah: Landing page for AH's linkedin post (#45278) - fleet-release: Update Fleet-maintained apps (#45334) - lukeheath: Fix more unreleased dark mode contrast bugs (#45295) - lukeheath: Route heavy CI jobs to larger GitHub-hosted runners (#45284) - mike-j-thomas: removed sub-heading on article (#45346) - mike-j-thomas: Updated heading size (#45347) - juan-fdz-hawa: Reject null name on POST /packs (#43032) - juan-fdz-hawa: Fix POST /queries returning 500 on JSON null name/query (#43031) - akuthiala: Update leadership.md (#45329) - ireedy: Open controller position (#45289) - nulmete: Custom org logo fixes: delete for external URLs + gitops switch from path to ... - dantecatalfamo: Fix homebrew package matching incorrect CPE (#45186) - dantecatalfamo: Recovery Key can be viewed after team transfer if still present (#45280) - juan-fdz-hawa: Fix cond access bypass activity on unrelated app config saves - juan-fdz-hawa: Fixed flaky test TestQueries/DeleteMany (#39618) - JordanMontgomery: Add npm min release age (#45268) - nulmete: fix Actions dropdown in Run script modal auto-closing (#45349) - sharon-fdm: CIS Benchmarks: Update Windows 11 to v5.0.1 (#45173)

- melpike: [Guide] Enhance guide with Simplified Platform SSO details (#45298) - mike-j-thomas: Patch faster landing page style fixes (#45338) - sgress454: Update data collection interval and strategy (#45293) - fleetdm-bot: Add compromised npm package detection policy to Workstations (#45264) - noahtalerman: New colors for success/fail notifications (#45302) - oussamachaabounii: Fix formatting issues in product-groups.md (#45373) - lukeheath: Add fleet-mcp and fleet-slackbot to dependabot config (#45243) - RachelElysia: Github test fix: Fix SetupAssistant.tests.tsx failing in CI (#45378) - noahtalerman: Handbook: Move section about edits to design system (#45385) - raju249: Inject initFatal as a package-level var (#33370) (#45343) - allenhouchins: Remove platform constraint from npm package label (#45382) - allenhouchins: Remove quotes from policy resolution text (#45390) - sharon-fdm: Add changelog for CIS Win11 v5.0.1 update (#45374) - akuthiala: New Fleet autonomous endpoint management page (#45342) - lucasmrod: Remove testing dependencies on production binaries on pubsub and dev_mode (#4... - lucasmrod: Move s3/testing_utils.go (#45362) - GrowthX-Team: New article: What is the principle of least privilege for device management? ... - RachelElysia: Fleet UI: Update settings empty state (#45363) - mason-buettner: Remove bad comma from connect CA example (#45332) - fleet-release: Update Fleet-maintained apps (#45395) - GrowthX-Team: New article: Threat prevention: a guide for multi-platform fleets (#45029) - juan-fdz-hawa: Fix IdP host vitals not populating for MDM-migrated hosts (#41985) - RachelElysia: Fleet UI: Update empty states in software pages (#44979) - RachelElysia: Fleet UI: Edit configuration entry point for iOS/iPadOS and extend modal for ... - allenhouchins: Update Docker Desktop FMA install script (#45244) - RachelElysia: Fleet UI: Update empty states in Controls (#44965) - getvictor: Add EJBCA SCEP setup guide for testing custom SCEP integration. (#45409) - lukeheath: Revert Android instrumented-tests job to ubuntu-latest (#45428) - akuthiala: Publish blog by Dhruv (#45429) - noahtalerman: Pricing YAML: Add 4.85.0 features (#45426) - getvictor: Fixed Android agent to send the issued certificate's serial number to Fleet a... - mb-chigoose312: event lead scanning at events (#45432) - kilo-code-bot[bot]: Add "Why enforce a minimum release age for npm packages?" to handbook (#45257) - sgress454: Don't show vulns chart on free tier (#45440) - lukeheath: Fix dark-mode contrast: 'Undetermined' label and Dropdown control (#45420) - Sampfluger88: Add "Requested Fleet SWAG" to intent signals (#45443) - allenhouchins: Improve Docker Desktop installer script (#45425) - akuthiala: New apple management page as landing page (#45392) - fleet-release: Update Fleet-maintained apps (#45447) - sharon-fdm: Fix enable_host_users defaulting to false on fresh install (#45393) - lucasmrod: Made host team assignment sticky across orbit and osquery re-enrollments (#45... - iansltx: Remove Ian from Software product group (#45455) Read more: https://github.com/fleetdm/fleet/commits/main