🏗️ New commits pushed to Fleet: - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#47081) - lucasmrod: Fix fleet-scoped host vitals labels (#46953) - harrisonravazzolo: Add CapCut as a macOS FMA (#47062) - getvictor: Waived zizmor template-injection issues (#46994) - getvictor: MDM Windows push perf fixes (#46917) - GrayW: Grayw guides update managinggooglechrome (#46995) - allenhouchins: Add Pd (Pure Data) as a macOS FMA (#47056) - allenhouchins: Add SQL Server Management Studio as a Windows FMA (#47003) - nulmete: Fix auth token not persisting over HTTP (non-TLS) deployments (#47076) - RachelElysia: Fleet UI: Route software title names through getDisplayedSoftwareName (#47084) - MagnusHJensen: update apple query for profile verification with include all/any + exclude (#... - getvictor: Fixes several loadtest issues (#47006) - MagnusHJensen: validate against old config for partial patches (#47069) - fleet-release: Update Fleet-maintained apps (#47088) - lucasmrod: Fix live policy page to use full width (#47094) - allenhouchins: Add Python 3.13 & 3.14 as Windows FMAs and normalize versions (#46873) - fleet-release: Update Fleet-maintained apps (#47100) - jkatz01: Self service categories (#47098) - jkatz01: Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-... - jkatz01: List categories device endpoint (#46938) - ksykulev: Defer writing team_id on android check-ins (#46929) - allenhouchins: Add Ableton Live Suite as a macOS FMA (#47058) - nulmete: Policies: show tooltip when multiple automations are configured (#46934) - allenhouchins: Add R and Git as Windows Fleet-maintained apps (#46988) - danbgordon: Enhance Fleet setup instructions with HTTPS details (#46964) - spalmesano0: Fix GitOps when using All fleets in VPP settings (#46855) - RachelElysia: Fleet UI: Fix labels actions dropdown and responsive column widths (#47107) - RachelElysia: Fleet UI: Add self-service categories to command palette (#47115) - melpike: Refine Product Designer request review process (#47120) - lukeheath: Bump golang.org/x/crypto to v0.52.0 and golang.org/x/net to v0.55.0 (#46949) - allenhouchins: Add Microsoft Office as a Fleet-maintained app for Windows (#43938) - fleet-release: Update Fleet-maintained apps (#47124) - RachelElysia: Fleet UI: Gate command palette shortcuts by platform (#47118) - nulmete: Fix Fleet startup crash on read-only filesystem without S3 bucket (#47099) - kilo-code-bot[bot]: Fix Certificates empty state title font size from 20px to 16px (#47096) - melpike: Fix punctuation in canceled installation message (#47131) - sgress454: Use brightest color for checkerboard when only one is available (#47129) - dantecatalfamo: Initial pass on TPM-backed disk encryption support (#46457) - dantecatalfamo: Speed up /vulnerabilities and filtered /software/versions queries (#45564) - lucasmrod: Fix live query selector

X

button (#47089) - dantecatalfamo: Fixed the host's Software UI showing a date decades in the past (#46779) - jkatz01: Add detailed error for generate-gitops when a patch policy installer is missi... - noahtalerman: Update experimental feature status to Fleet 4.90.0 (#46923) - eashaw: Website: add support for new usage statistics (#47144) - kitzy: Add article on WWDC 2026 changes for IT admins (#47149) - raju249: Extract geoIP and mail service initialization out of runServeCmd (#47151) - MagnusHJensen: Update account driven enrollment with new understanding (#47154) - allenhouchins: Add macOS Fleet-maintained apps (Z) (#47174) - getvictor: Add check for deprecated methods to incremental lint. (#47172) - allenhouchins: Schedule calendar remediation events next business day after policy failure (... - allenhouchins: Add macOS Fleet-maintained apps (Y) (#47175) - nulmete: Reorder org_logo migration to follow AddHostCertificatesOriginDeletedAtIndex ...

- allenhouchins: Add macOS Fleet-maintained apps (W) (#47182) - lucasmrod: Update Go to 1.26.4 (#47158) - getvictor: fleetd Windows MDM wake docs (#46780) - sgress454: Validate SSO settings correctly for GitOps (#46487) - getvictor: Added closing milestone step to Android release process (#47157) - cdcme: Narrow host lookup for iDevice URL auth (#47141) - allenhouchins: Add SSMS and YT Music icons and images (#47192) - allenhouchins: Add macOS Fleet-maintained apps (V) (#47187) - cdcme: Fix GCS checksum flag derived from wrong endpoint key (#47145) - allenhouchins: Add macOS Fleet-maintained apps (X) (#47197) - fleet-release: Update Fleet-maintained apps (#47209) - allenhouchins: Add macOS Fleet-maintained apps (C) (#47208) - kilo-code-bot[bot]: Add Digital Marketing Manager open position (#47229) - allenhouchins: Add macOS Fleet-maintained apps (U) (#47230) - ireedy: Update open-positions.yml (#47233) - allenhouchins: Add macOS Fleet-maintained apps (G) (#47232) - lucasmrod: Ignore fleetctl MIME CVE (#47170) - bigaapl: Fix formatting instruction for weekly update process (#47194) - allenhouchins: Add macOS Fleet-maintained apps (O) (#47237) - Sampfluger88: Move responsibility to confidential (#47245) - MagnusHJensen: update codeql to not run on only contributing docs PR's (#47155) - spalmesano0: Remove first sentence from Hosts column header "MDM status" tooltip (#47162) - Leanngove: Update Product Designer contact in product-groups.md (#47240) - lucasmrod: Add CI check for PR template (#47139) - noahtalerman: Fix link color on hover in light mode (#46748) - celsmore: Update README.md (#47296) - nulmete: Extract reusable Include/Exclude TargetLabelSelector component (#47212) - rderewianko: Fixing Suspicious Package, CFBundleIdentifier is wrong (#47243) - allenhouchins: Add macOS Fleet-maintained apps (S) (#47250) - allenhouchins: Update battery-health-check.yml (#47307) - RachelElysia: Engineering Initiated - FE docs: Primo mode, Fleet Free (#45887) - RachelElysia: FE: Add claude rules and FE patterns around command palette (#46826) - fleet-release: Update Fleet-maintained apps (#47306) - MagnusHJensen: validate label scoping on fleet free unassigned (#47265) - alexmikheen: Update communications.md (#47308) - allenhouchins: Add macOS Fleet-maintained apps (Q) (#47304) - ksykulev: Remove front end name validation for add certificate modal (#47242) - allenhouchins: Exempt release author/paths from PR template check (#47309) - allenhouchins: Add macOS Fleet-maintained apps (K) (#47316) - allenhouchins: Add macOS Fleet-maintained apps (J) (#47322) - eashaw: Website: update /infrastructure-as-code page hero styles (#47341) - RachelElysia: Fleet UI: fix labels unreleased double scroll bug (#47313) - lucasmrod: Reduce scope of check-pr-template.yml (#47347) - Sampfluger88: Update event process (#47342) - noahtalerman: Add/renew APNs: Make error styles/copy consistent w/ disk encryption when mis... - eashaw: Update Okta SSO related actions in Sails apps (#47349) - JordanMontgomery: Improve apple MDM parsing (#47344) - lucasmrod: Fix fleetd with pre-packaged osquery flags (#47305) - getvictor: Modal spacing and wording (#47312) - getvictor: Setup experience policy checks copy changes (#47297) - getvictor: Setup experience software policy checks (#47075) - lucasmrod: Update docs windows hosts filtering (#45884) - spalmesano0: Add

android_enabled_and_configured

to GitOps docs (#45810) - GrayW: Fixes broken links in managing-chrome-with-fleet.md (#47093) - noahtalerman: Renaming: Audit logs (#46563) - akuthiala: Create shadow-ai-is-already-on-your-fleet.md (#47374) - JordanMontgomery: Make the plist parser slightly more tolerant (#47371) - eashaw: Website: update deal registration form on partners page (#47227) - allenhouchins: Add macOS Fleet-maintained apps (B) (#47360) - allenhouchins: Add macOS Fleet-maintained apps (E) (#47373)

- noahtalerman: Add tips for fleet renaming and YAML configuration (#46857) - noahtalerman: Remove performance note for IdP variable in API docs (#47379) - noahtalerman: API: Rename "live query" => "live report" (#47378) - alexmitchelliii: Clarify

mdm.allow_all_declarations

+ include estimate of when all declarati... - allenhouchins: Add macOS Fleet-maintained apps (I) (#47392) - allenhouchins: Add macOS Fleet-maintained apps (#) (#47396) - allenhouchins: Add PPPC Utility as a macOS FMA (#47400) - allenhouchins: Add macOS Fleet-maintained apps (H) (#47402) - getvictor: Improved Windows MDM reconciler (#47071) - MagnusHJensen: add default fleet for BYOD Apple migration (#47161) - Sampfluger88: Add weekly 'Talk to us' Calendly check (#47404) - kilo-code-bot[bot]: Add 'Why preserve large free blocks on calendars?' to handbook (#47397) - nulmete: Policies: Include/Exclude label targeting in Save policy modal (#33441) (#47213) - nulmete: Policies: Include/Exclude label targeting on edit policy page (#33441) (#47354) - allenhouchins: Remove Dell Display Manager app (#47420) - fleet-release: Update Fleet-maintained apps (#47421) - lucasmrod: Fix command line flags in agent settings UI (#47414) - MagnusHJensen: log mandatory software update (#47409) - ksykulev: Used user idp card data for android device name (#47346) - allenhouchins: Add macOS Fleet-maintained apps (R) (#47370) - fleet-release: Update Fleet-maintained apps (#47424) - fleet-release: Update Fleet-maintained apps (#47428) - sgress454: Fix issue exporting CSV when "agent" field is present (#47125) - allenhouchins: Add Logi Tune as a macOS FMA (#47399) - allenhouchins: Add macOS Fleet-maintained apps (P) (#47375) - fleet-release: Update Fleet-maintained apps (#47433) - sgress454: Add custom hooks to frontend patterns doc (#46397) - cdcme: Expand security considerations in frontend patterns doc (#46866) - ireedy: Update event DRI (#47413) - mikermcneil: Contact source tweaks w/ Sam (#47441) - allenhouchins: Update Webex macOS install script and refs (#47445) - allenhouchins: Add macOS Fleet-maintained apps (D) (#47401) - lucasmrod: Fix fleet admin permissions with multi-fleet users. (#47423) - lucasmrod: Add the documentation for the special semantics of

command_line_flags

agent... - cdcme: Make ctxerr treat 4xx errors as client errors (#47415) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#47450) - RachelElysia: Fleet UI: Unreleased bug fixes to command palette (unsupported screen size, h... - mostlikelee: Refetch certs on macOS RemoveProfile ack for ACME profiles (#46867) - jkatz01: Change self-service categories GitOps to not require dedicated key (#47439) - marko-lisica: [API] Add multiple custom packages for the same software title in the same fl... Read more: https://github.com/fleetdm/fleet/commits/main