🏗️ New commits pushed to Fleet: - noahtalerman: Update link text from 'ABM' to 'Apple Business' (#45788) - sgress454: Implement roaring bitmaps for historical data collection (#45709) - lucasmrod: Ignore bomutils CVEs (#45800) - allenhouchins: Remove Codex CLI app and assets (#45802) - danbgordon: remove utms from blogs (#45766) - getvictor: Update version and CHANGELOG for fleetd-android-v1.5.0 (#45809) - spalmesano0: Add title to CSA task template (#45811) - allenhouchins: Update npm supply chain compromised packages list (#45817) - RachelElysia: Fleet UI: Add add variable button, update no results live empty state (#45808) - rfairburn: Add optional SES sender domain configuration (#43811) - kilo-code-bot[bot]: Add bundle_identifier to top-level host software API response (#42188) - RachelElysia: Fleet UI: post-QA empty state gap fixes (#45823) - lucasmrod: Ignore fleet CVEs in fleetctl (#45825) - dependabot[bot]: Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#45815) - ksykulev: adding PMM to loadtest environment (#45567) - georgekarrv: Fix Android/Windows profile edits via GitOps rejected when AppConfig is stale... - johnjeremiah: Adding Organic AI to the attribution model (#45830) - kc9wwh: Add testimonial from Andy Gombar (#45793) - sgress454: Skip unneeded query when getting CVE chart (#45813) - danbgordon: fix filename and hence slug url (#45746) - allenhouchins: Update patch policy generation and tests (#45799) - fleet-release: Update Fleet-maintained apps (#45860) - harrisonravazzolo: macOS FMA: Secretive.app (#45858) - danbgordon: Publish linux article on managing drift (#45863) - algojogacor: fix: correct typo "occured" to "occurred" in ErrorChain comment (#45871) - algojogacor: fix: correct typo 'explicity' to 'explicitly' in comment (#45820) - lucasmrod: Move carve requests to server/fleet/ (#45785) - sgress454: Fix CheckerboardViz relative scale to use cell value instead of percentage (#... - lucasmrod: Update commit SHA in snapshot docker images (#45814) - lucasmrod: Use ubuntu-latest runner for docs CI check (#45816) - lucasmrod: Fix CVEs reported on latest released fleetctl version (#45827) - fleet-release: Update Fleet-maintained apps (#45875) - lucasmrod: Add Android to the OS list (#45834) - allenhouchins: Add Duo Desktop as a Fleet-maintained app (#45883) - lukeheath: Security: triage May 2026 code scanning alerts (#45740) - lucasmrod: Ignore WiX CVEs (#45882) - RachelElysia: Fleet UI: Center align premium message, remove left align prop, dead CSS (#45... - Sampfluger88: Remove outdated ritual (#45888) - eashaw: Handbook: update temporary landing page section in handbook (#45850) - juan-fdz-hawa: Fix NDES dynamic SCEP regression caused by ntlmssp anonymous probe (#45784) - noahtalerman: GitOps: "teams" mentioned in error messages (#45878) - irenareedy: Create which-ai-model-works-best-for-generating-configuration-profile… (#45892) - Sampfluger88: Fix tone of "Why send LinkedIn comments to unthread?" (#45889) - MagnusHJensen: add doc that explains how to reset sync cursor (#45590) - fleet-release: Update Fleet-maintained apps (#45885) - georgekarrv: Addig image pull policy for potential override (#45903) - eashaw: Website: Fix hero styles on orchestration page (#45911) - fleet-release: Update Fleet-maintained apps (#45904) - allenhouchins: Update fleet-desktop and zoom-rooms casks (#45912) - Sampfluger88: Add pre-meeting context field to oppty. (#45909) - mike-j-thomas: text update to brand handbook (#45864) - fleet-release: Update Fleet-maintained apps (#45916) - rachaelshaw: Update documentation CODEOWNERS (#45917) - fleet-release: Update Fleet-maintained apps (#45922) - danbgordon: Publish linux article on patch management and vuln reporting (#45873) - danbgordon: Publish linux tech article on gitops (#45872) - mostlikelee: Integration tests for non-proxied cert renewal (#45663)

- kilo-code-bot[bot]: Remove Quality Assurance Engineer from open positions (#45925) - getvictor: Updated fleetd-base release flow to catch fleetctl changes. (#45907) - getvictor: Improving stale issue workflow (#45767) - fleet-release: Update Fleet-maintained apps (#45933) - eashaw: Website: update earliest supported Safari version (#45937) - akuthiala: Add new windows mdm page (#45690) - getvictor: Fixed Android Enterprise page not refreshing (#45914) - getvictor: Deprecate using

GET /api/v1/fleet/commands

w/o host_identifier (#44392) - Sampfluger88: Make Mike T maintainer and DRI of Brand section (#45953) - fleet-release: Update Fleet-maintained apps (#45954) - GrowthX-Team: New article: BYOD security risks: How to reduce the attack surface (#45054) - GrowthX-Team: New article: Enterprise Wi-Fi Authentication Methods Guide 2026 (#45036) - GrowthX-Team: New article: Automated patch management: Best practices for enterprise IT (#4... - mike-j-thomas: Add link to temporary landing pages process on communications.md (#45952) - spalmesano0: Add publisher and path exclusion note for EDR software (#45833) - kilo-code-bot[bot]: Update handbook: add employee health, dental, and life insurance benefits (#4... - lucasmrod: Move loginRequest and logoutRequest to server/fleet/ (#45908) - lukeheath: Handbook: define continuous flow process for working groups (#45201) - lukeheath: Fix for Potentially uninitialized local variable (#45926) - fleet-release: Update Fleet-maintained apps (#45972) - RachelElysia: Fleet UI: Empty state for single run script modal similar to empty state batc... - sharon-fdm: Fix List certificate templates API docs: parameter name is fleet_id, not flee... - lukeheath: Add OCI version labels to Fleet container images (#45981) - lucasmrod: Add CI check to prevent Go's "testing" package on production binaries (#45977) - nulmete: add a more specific queryKey pattern (#45459) - kilo-code-bot[bot]: Update /linux-management hero CTA to 'Talk to an engineer' (#45973) - getvictor: Adding SCEP support to Windows MDM test client (#44562) - raju249: Extract early config validation from runServeCmd into testable helpers (#45583) - lukeheath: ADR: Reject OpenSpec adoption (#45979) - mike-j-thomas: Add Fleet dashboard image to /docs (#45970) - noahtalerman: Update guidance on transferring hosts in Fleet (#45940) - AdamBaali: Add rollout ring labels to solutions for article #45967 (#45971) - lucasmrod: Allow technicians to transfer hosts (#45956) - georgekarrv: Adding new screencap tool to help with automated testing (#42437) - kilo-code-bot[bot]: Add CTA section to the bottom of the /gitops-workshop page (#45993) - RachelElysia: Engineering Initiated - FE: Reference different contexts in patterns.md (#45866) - lucasmrod: Fix to populate host_emails during Linux/Windows SSO enrollment (#45951) - GrowthX-Team: New article: Endpoint Data Loss Prevention: A Complete Guide (#45062) - johnjeremiah: Adding Windows MDM to handbook (#45942) - RachelElysia: Engineering Initiated - FE: Improve api entity naming (#45865) - mikermcneil: Website: Add fun ticker on autonomous-endpoint-management.ejs (#46006) - lucasmrod: Fix iOS and iPadOS logos in dark theme (#45838) - harrisonravazzolo: Adding sec posture query, expand dex queries to testing & qa team (#46021) - getvictor: Update version and CHANGELOG for fleetd-android-v1.6.0 (#46022) - getvictor: Fix duplicate Android host on orbit-enroll when Apple MDM is off (#46008) - allenhouchins: Register MSIX for logged-on user via task (#46025) - getvictor: Updated Windows setup experience to not cancel for BYOD. (#45994) - GrowthX-Team: New article: Secure remote workforce: Device security, identity, and complian... - eashaw: Website: Add "ISO 27001 coming soon" badge to footer (#46035) - GrowthX-Team: New article: Shadow IT discovery: Finding unapproved software across your dev... - danbgordon: backdate growthx articles (#46039)

- danbgordon: change file and url name (#46038) - fleet-release: Update Fleet-maintained apps (#46037) - akuthiala: Fix typo in 'Windows MDM' entry (#46036) - harrisonravazzolo: Add secureboot update Windows csp (#46043) - spalmesano0: Update Migration Assistant notes (#46012) - spalmesano0: Add Android debug easter egg to Deploy certificates guide (#45968) - johnjeremiah: Populate referrer fields from marketing cookie (#45807) - johnjeremiah: Improve referrer matching and add domains (#45803) - johnjeremiah: Adding basic GA4 tags for webinars and whitepapers (#46004) - dependabot[bot]: Bump github.com/containerd/containerd from 1.7.29 to 1.7.32 (#46030) - dependabot[bot]: Bump serialize-javascript from 7.0.3 to 7.0.5 in /ee/fleetd-chrome (#46000) - fleet-release: Update Fleet-maintained apps (#46050) - noahtalerman: Add copy under QR code to clarify where you will go (#45654) - fleet-release: Update Fleet-maintained apps (#46055) - allenhouchins: Bump fleet-desktop to v1.3.0 (#46058) - fleet-release: Update Fleet-maintained apps (#46060) - melpike: add copy when software in setup expereince is canceled (#45831) - dependabot[bot]: Bump js-cookie from 3.0.5 to 3.0.7 (#46024) - fleet-release: Update Fleet-maintained apps (#46061) - lukeheath: Bump js-cookie, uuid, and axios to fix high-severity CVEs (#46053) - allenhouchins: Update LibreOffice token and mac version to 25.8.7 (#46069) - nulmete: Fix: My Device page not showing correct light/dark mode logo (#46063) - raju249: Remove nano_view_queue from unscoped MDM commands list query (#45674) - lukeheath: Fix Trivy SARIF upload attributing RC findings to main (#46068) - getvictor: Updating SSE to be spec compliant, which now appears to work with ngrok (#45988) - harrisonravazzolo: Fix XML formatting in secureboot-update.xml (#46074) - jkatz01: 45190 patch policy wrong installer (#46087) - eashaw: Website: Fix failing deploy and tests (#46093) - dependabot[bot]: Bump qs from 6.14.2 to 6.15.2 (#46092) - georgekarrv: Adding changes for Fleet v4.85.1 (#46015) - georgekarrv: Renumber 4.86 migrations after the 4.85.1 cherry-pick (#46079) (#46097) - eashaw: Website: Update content and layout of linux management page (#46090) - eashaw: Website: update package-lock.json (#45768) - eashaw: Delete article image from top-level assets folder (#46095) - akuthiala: Update marketing-assets.md (#46080) - GrowthX-Team: New article: Audit trail requirements for Apple device management (#45521) - akuthiala: Create patch-management-vs-vulnerability-management.md (#46104) - kilo-code-bot[bot]: Fix hero spacing on autonomous-endpoint-management page (#46020) - getvictor: Fixed the "host is offline" banner on the My device page incorrectly appearin... - fleet-release: Update Fleet-maintained apps (#46109) - johnjeremiah: using attributionDetails to store referrer (#46096) - akuthiala: Ak publish blog patchmgmt vs vulmgmt (#46105) - johnjeremiah: Add mostRecentCampaign to event records (#45750) - akuthiala: Dhruv pre CVE dirtyfrag article (#46114) Read more: https://github.com/fleetdm/fleet/commits/main