🏗️ New commits pushed to Fleet: - JordanMontgomery: 42508 Rename abm to ab in API (#46657) - RachelElysia: Fleet UI: Allow DataSet value to wrap, apply to policy (#46733) - RachelElysia: Fleet UI: Dropdown button options don't stay highlighted (#46740) - RachelElysia: Fleet UI: Script action buttons now keyboard accessible (#46720) - RachelElysia: Fleet UI: Wrap element in div to avoid flex gap (#46729) - thisisjoegrant: Fixed a couple small issues on why-this-way page of handbook (#46661) - thisisjoegrant: Update product-groups to add Joe Grant (#46662) - getvictor: Fixed/enabled cache-poisoning zizmor check (#46655) - GrowthX-Team: New article: Enterprise device management in 2026 (#46160) - lukeheath: Drop Trivy misconfig scanner to restore prior scope (#46769) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#46778) - GrowthX-Team: New article: GitOps for device management: Audit trails, compliance, and conf... - getvictor: zizmor checks cleanup (1) (#46646) - noahtalerman: Renaming: API for contributors (#43587) - getvictor: Bump step-security/harden-runner to a non-vulnerable version (#46783) - getvictor: fleetd Windows MDM wake (push vs poll) (#46594) - kitzy: Clarify agent options management in documentation (#46434) - GrowthX-Team: New article: Zero trust at the edge: Continuous verification, compliance, and... - ksykulev: Android provision certificates before dependent profiles (#46759) - lukeheath: Document public VDP and scope in SECURITY.md and handbook (#46776) - noahtalerman: Update leadership (#46767) - raju249: Extract datastore initialization out of runServeCmd (#46742) - eashaw: Website: Update orchestration page content & url (#46789) - kilo-code-bot[bot]: Open Solutions Specialist position (#46798) - fleet-release: Update Fleet-maintained apps (#46810) - kevinmcox: Dashboard: show each platform's percentage of total hosts in the "Hosts enrol... - mostlikelee: Fix TestTranslateCPEToCVE: replace deferred Docker CVE (#46807) - andymFleet: Fleet UI: Add combined include/exclude label targeting for configuration prof... - MagnusHJensen: add sub headers to local account section (#46800) - noahtalerman: Display names for API endpoints are inconsistent w/ API reference (#45721) - allenhouchins: Add multiple Windows FMAs (#46794) - sgress454: Update error message for GitOps exceptions violations (#46700) - sgress454: Fix preview config (#46677) - fleet-release: Update Fleet-maintained apps (#46817) - tknoeny: Fix amendment typo in README (#46820) - JordanMontgomery: Fix orbit debug flag behavior (#46814) - lucasmrod: Update patch version for fleetd (#46775) - fleet-release: Update Fleet-maintained apps (#46831) - sgress454: Track software deletions in GitOps (#46764) - harrisonravazzolo: macOS FMA - Icon Composer (#46735) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#46843) - RachelElysia: Command palette: Improve search, other little iterations (#46825) - fleet-release: Update Fleet-maintained apps (#46841) - lucasmrod: Bump version to 1.56.2 (#46836) - allenhouchins: Add REAPER as a macOS FMA (#46847) - georgekarrv: Fixing my device error saying it was unable to open when in fact it succeeds ... - allenhouchins: Bump fleet-desktop to 1.3.1 (#46849) - eashaw: Website: Add script tag to layout to strip query parameters once pages fully ... - lucasmrod: Fix tight install loop on continous automations feature (#46823) - chrstphr84: Break Windows MDM testing into a standalone section (#46858) - ddribeiro: Update JSON example for Create Fleet-maintained app endpoint in REST API docu... - MagnusHJensen: Fix last references to ABM in yaml-files (#46717) - marko-lisica: Update software API response examples to be accurate (#46833) - sharon-fdm: Fix ListVulnerabilities cursor pagination with ambiguous column names (#45983)

- sergey-cheperis: Fix "400 bad request" from SCEP PKIOperation when base64 message contains "+"... - allenhouchins: Use stored platform for installers so zip-based Windows FMAs can install (#45... - mike-j-thomas: Update visibility and reporting page description (#46874) - allenhouchins: Add Amazon Corretto 21/24/26 Windows apps (#46875) - fleet-release: Update Fleet-maintained apps (#46876) - allenhouchins: Add Microsoft .NET Runtime 8 & 10 as Windows FMAs (#46877) - getvictor: osquery_perf: Windows MDM push (#46777) - getvictor: Fixes from Konstantin's code review (#46701) - eashaw: Website: update software management page (#46832) - MagnusHJensen: Clean up Apple reconciler queries, no longer used (#46712) - MagnusHJensen: Handle not found bootstrap package in GitOps flows (#46802) - raju249: Extract Redis initialization out of runServeCmd (#46830) - nulmete: Fix resizable read-only installer command in Add host modal (#46806) - RachelElysia: Command palette: deep-link Manage policy automations to AutomationsModal (#46... - nulmete: Stop 1Password autofill icon from interfering with Fleet UI form fields (#46808) - kilo-code-bot[bot]: Handbook: Document IT as DRI for sending Google logins on first day (#46853) - nulmete: Restore software platform/version subtitle in policy install-software automat... - JordanMontgomery: Fix restoration of DEP hosts when a duplicate exists (#46815) - allenhouchins: Add app icon images to website assets (#46878) - GrayW: Update apple-mdm-setup.md (#46456) - noahtalerman: Update macOS setup experience instructions (#46848) - MagnusHJensen: Decrease lock state cleanup time to 1 minute (#46730) - fleet-release: Update Fleet-maintained apps (#46891) - edwardsb: Add GCS IAM authentication for S3-compatible storage (#40303) (#40374) - noahtalerman: Mel to be Product Designer for #g-power-to-pc 🎉 (#46864) - kc9wwh: feat: replace osquery column with agent column on hosts page (#44811) - getvictor: Fixed/waived 3 zizmor rules (#46881) - getvictor: Updating Windows license callouts (#46895) - nulmete: Reuse Policies' Automations button on Dashboard, Software, and Reports (#46846) - lukeheath: Add OCI source labels to Docker Hub images (#46782) - raju249: typo-fix (#46897) - allenhouchins: Add MindManager as a macOS FMA (#46906) - dantecatalfamo: Add macos_applications filter for host software list (#46223) - juan-fdz-hawa: Optimize ListLabels host-count query - nulmete: Fix policy automations role restrictions in UI (#46910) - allenhouchins: Add Node.js as a Windows FMA (#46911) - andymFleet: 45178 cpie reconciler query updates (#46889) - eashaw: Website: update deployment page (#46926) - lukeheath: Remove unused packages: write from goreleaser-orbit jobs (#46915) - fleet-release: Update Fleet-maintained apps (#46922) - noahtalerman: MDM setup guide updates (#46862) - allenhouchins: Add VC++ Redistributable (x64) as a Windows FMA (#46935) - MagnusHJensen: remove where clause in reset apple dep sync cursor (#46805) - ksykulev: Preserve android device team assignment (#46868) - eashaw: Website: add logos to partner page (#46903) - rachaelshaw: Remove @eashaw as docs CODEOWNER (#46936) - getvictor: Fixed ref-version-mismatch zizmor check (#46901) - getvictor: Add author mention to stale issue bots (#46787) - noahtalerman: Link to guide to learn more about "End user migration workflow" (#46863) - juan-fdz-hawa: Fix custom variable modal clearing when switching browser focus - dantecatalfamo: Auto-clean duplicate Okta CA SCEP cert after profile install (#46172) - dantecatalfamo: Fix for hosts macos application filter not maintaining state (#46913) - dantecatalfamo: Update CVE documentation to list Linux distributions supported (#46828) - dantecatalfamo: Add rules to deal with some python CVE false positives (#46673) - cdcme: Auth in-house iOS app downloads with install tokens (#46819) - mikermcneil: Handbook: Remove outdated comment (#46963)

- mikermcneil: Handbook: History: Add 2025 and 2026 (#46962) - noahtalerman: Update SCEP certificate renewal information (#46957) - eashaw: Website: update testimonial order (#46971) - allenhouchins: Add PowerShell as a Windows FMA (#46941) - MagnusHJensen: Fix broken learn-more-about redirect links (#46718) - RachelElysia: Command palette: highlight search matches in picker subpages (#46885) - fleet-release: Update Fleet-maintained apps (#46987) - fleet-release: Update Fleet-maintained apps (#46989) - allenhouchins: Add Devin Desktop as a macOS FMA (renamed from Windsurf) (#46996) - allenhouchins: Add Cinc Workstation as a Windows FMA (#47000) - allenhouchins: Add Power Monitor as a macOS FMA (#47012) - allenhouchins: Add Microsoft 365 Copilot as a macOS FMA (#47014) - allenhouchins: Add ClickShare as a macOS FMA (#47016) - allenhouchins: Add Groove OmniDialer as a macOS FMA (#47020) - allenhouchins: Add content-style writing skill and Kilo config (#46467) - fleet-release: Update Fleet-maintained apps (#47021) - allenhouchins: Add Zen Browser as a Windows FMA (#47022) - allenhouchins: Add WinRAR as a Windows FMA (#47024) - allenhouchins: Add TablePlus as a Windows FMA (#47025) - allenhouchins: Add Comet as a macOS & Windows FMA (#47027) - harrisonravazzolo: macOS FMA - Antigravity (#47010) - allenhouchins: Add several Windows FMAs (#47030) - allenhouchins: Add several Windows FMAs (#47037) - harrisonravazzolo: FMA - Affinity (#47009) - allenhouchins: Fix Slack MSIX uninstall matching unrelated provisioned packages (#47039) - harrisonravazzolo: FMA - claude-devtools (#47018) - allenhouchins: Add PostgreSQL 18 as a Windows FMA (#47045) - harrisonravazzolo: Add Beekeeper Studio as a macOS FMA (#47046) - allenhouchins: Add PostgreSQL 15-17 as Windows FMAs (#47048) - harrisonravazzolo: FMA - Antigravity IDE (#47011) - fleet-release: Update Fleet-maintained apps (#47052) - allenhouchins: Add DFU Blaster Pro as a macOS FMA (#47053) - allenhouchins: Add IBM Notifier as a macOS FMA (#47054) - allenhouchins: Add Microsoft Remote Help as a macOS FMA (#47055) - allenhouchins: Treat MSI reboot exit codes as success (#47023) - allenhouchins: Add Zen Browser app icon (#47057) - allenhouchins: Add Beekeeper Studio as a Windows FMA (#47060) - fleet-release: Update Fleet-maintained apps (#47061) - allenhouchins: Add several macOS FMAs (#47064) - raju249: Extract osquery logging initialization out of runServeCmd (#46893) - getvictor: Extract platform-neutral MDM reconcile label primitives (#47032) - noahtalerman: Bring product design sprint retro into product design sprint kickoff (#47077) Read more: https://github.com/fleetdm/fleet/commits/main