🏗️ New commits pushed to Fleet: - fleet-release: Update Fleet-maintained apps (#47828) - sgress454: Add current-timeframe border and 'No data' tooltip to checkerboard chart (#47... - getvictor: Fix out-of-order Windows MDM fleetd install commands (#47683) (#47736) - MagnusHJensen: fixed update teams not updating appconfig, and team delete not cleaning up ap... - eashaw: Website: Update

<parallax-city>

component (#47723) - allenhouchins: Use universal VS Code installer for the macOS FMA (#47842) - fleet-release: Update Fleet-maintained apps (#47849) - rachaelshaw: Docs: Mark remaining experimental endpoints/parameters as stable (#47848) - ksykulev: Added variables in Android configuration profiles (#47750) - eashaw: Website: add maintainer for

server/api_endpoints/api_endpoints.yml

(#47857) - kilo-code-bot[bot]: [Docs] FileVault cannot be enabled locally on macOS 15.7 by managed local acc... - tux234: Add Vivaldi as a Fleet-maintained app (#41552) - RachelElysia: Fleet Desktop - Self-service: Install all button visibility, count, and enabl... - jkatz01: Add setup experience overview documentation (#46298) - eashaw: Website: Move quote in homepage hero section, update page heading (#47863) - Leanngove: Update README.md for product design guidelines (#47879) - qroniq: Update README.md (#47816) - rachaelshaw: Miscellaneous API doc fixes (#47884) - kilo-code-bot[bot]: Add Ed Merrett testimonial to security-and-control and visibility-and-reporti... - kc9wwh: find apps that need rosetta guide (#47862) - fleet-release: Update Fleet-maintained apps (#47886) - getvictor: Fixed Windows MDM not re-installing fleetd (#47852) - cdcme: Fix tooltips to center of label row (#47861) - juan-fdz-hawa: Fix fleetd keychain error logs during first ABM enrollment - spalmesano0: Correct step number (#47501) - spalmesano0: Supposed to be desktop environment (#47510) - spalmesano0: Add note about symlinks in tarballs (#47704) - andymFleet: 45640 Add activity feed entry when a custom Apple or Windows MDM command is r... - fleet-release: Update Fleet-maintained apps (#47895) - kitzy: Add guide for enforcing macOS updates per major version using custom DDM decl... - noahtalerman: MDM migration: Update FileVault key escrow instructions (#47807) - sharon-fdm: Improve session handling during password reset (#47860) - dependabot[bot]: Bump form-data from 4.0.5 to 4.0.6 in /tools/fleetctl-npm (#47761) - jkatz01: Undo rename from utilities to support (#47881) - allenhouchins: Fix typo in README.md press boilerplate text (#47646) - fleet-release: Update Fleet-maintained apps (#47905) - kilo-code-bot[bot]: Remove 'Send customer-preston weekly export' ritual (#47907) - RachelElysia: Fleet UI: Self-service category search input text color, weird scrollbar (#47... - allenhouchins: Add Windows FMAs (Letter C) (#47732) - fleet-release: Update Fleet-maintained apps (#47919) - fleet-release: Update Fleet-maintained apps (#47924) - sgress454: Add CVE chart filtering and non-critical CVE data collection (backend) (#47470) - allenhouchins: Enable Virtual Machine Platform for Claude install (#47928) - sgress454: Update some GitOps error messages for clarity (#47134) - juan-fdz-hawa: Policy status page: automation activity history, reset endpoint, and details UI - sgress454: Fix GenerateHostStatusStatistics query so that hosts enrolled chart is accura... - dantecatalfamo: Handle missing macOS bundle executable in

executable_hashes

table (#47532) - allenhouchins: Improve Postman Windows install/uninstall scripts (#47933) - noahtalerman: Add Product Design responsibility: Product roadmap (#47936) - noahtalerman: "Fleet Desktop menu bar icon" and "Fleet Desktop app" (#47858) - GrayW: Create linux_triggerrefetch.sh (#47835) - noahtalerman: Fix unenroll Windows instructions (#47725) - fleet-release: Update Fleet-maintained apps (#47937) - allenhouchins: Add Groove OmniDialer as a Windows FMA (#47941)

- zayhanlon: Updating Sam Clark name spelling (#47938) - cdcme: Fix policy and report pages showing previously viewed content (#47767) - allenhouchins: Rename Cloudflare WARP to Cloudflare One (#47939) - sgress454: Add more filtering to Vulnerability Exposure chart (frontend) (#47674) - fleet-release: Update Fleet-maintained apps (#47946) - jkatz01: Fix TestUpgradeCodesFromMaintainedApps after Cloudflare WARP rename (#47953) - cdcme: Fix software title page timeout for large upcoming-activity backlogs (#47949) - mike-j-thomas: Reframe messaging on /security-and-control (#47887) - kilo-code-bot[bot]: Hide generate-gitops command from fleetctl help output (#44254) - kilo-code-bot[bot]: Fix dashboard layout issue at ~989px by aligning HostCountCard breakpoint (#4... - eashaw: Website: Remove gradient background at the bottom of the partners page (#47955) - rachaelshaw: Update Okta conditional access docs (#47472) - rachaelshaw: v4.87.0 doc changes (#44709) - noahtalerman: Release article: Fleet 4.87.0 (#47776) - lukeheath: Adding changes for Fleet v4.87.0 (#47109) (#47958) - danbgordon: add video link to release article (#47964) - dependabot[bot]: Bump form-data from 4.0.5 to 4.0.6 in /tools/fleet-slackbot (#47797) - dependabot[bot]: Bump js-yaml from 3.14.2 to 4.2.0 (#47708) - dependabot[bot]: Bump js-yaml from 4.1.1 to 4.2.0 in /tools/fleet-slackbot (#47798) - dependabot[bot]: Bump dompurify from 3.4.9 to 3.4.11 (#47910) - georgekarrv: Handbook: Add security report handling timing expectations (#47640) - georgekarrv: Move Scripts ownership from MDM to Software product group (#47780) - noahtalerman: Update Prettier: Don't enforce line limit for markdown files (#47909) - noahtalerman: Continuous flow: Bug triage is led by Engineering Managers during standup (#4... - georgekarrv: Update design QA considerations for empty states (#47917) - dependabot[bot]: Bump ws from 8.20.1 to 8.21.0 in /tools/fleet-slackbot (#47967) - fleet-release: Update Fleet-maintained apps (#47971) - sharon-fdm: Fix Windows E2E uninstall script path (#47976) - allenhouchins: Add disk management profile and exclusion label (#44235) - allenhouchins: Add hosts to external storage exclusion labels (#47980) - allenhouchins: Remove platform field from Linux exclusion label (#47982) - allenhouchins: Unblock mobile GitOps by temporarily removing app store categories (#47984) - allenhouchins: Revert "Unblock mobile GitOps by temporarily removing app store categories" (... - allenhouchins: Unblock workstations GitOps by temporarily removing software categories (#47986) - allenhouchins: Revert "Unblock workstations GitOps by temporarily removing software categori... - kilo-code-bot[bot]: Update secondary CTA buttons on landing pages (#47970) - mikermcneil: Website: Update linux-management.ejs - Lead with self-service (#47990) - mikermcneil: Website: Update homepage.ejs (fix formatting) (#47991) - ireedy: Update CODEOWNERS (#47995) - dependabot[bot]: Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 (#47959) - JordanMontgomery: Bump migrations that conflict with v4.87 (#48002) - cdcme: Fix host software details dropping pending installs/uninstalls (#47954) - spalmesano0: Update build instructions (#46339) - spalmesano0: Remove "VPP" from "Installed App Store app" activity (#44974) - jkatz01: Fix spaces in script package name causing validation failure (#47945) - fleet-release: Fleet-maintained app updates (#47979) - noahtalerman: API fix: Incorrect key name (#48017) - noahtalerman: GitOps reference: Mention

fleetctl new

(#48018) - AdamBaali: Fix VS Code macOS FMA installing Intel build on Apple Silicon (#48010) (#48015) - allenhouchins: Clear categories in workstations.yml (#48022) - allenhouchins: Revert "Clear categories in workstations.yml" (#48025) - fleet-release: Update Fleet-maintained apps (#48024) - eashaw: Website: Update package-lock.json (#47853)

- cdcme: Fix layout issue with tooltips (#48009) - headmin: Website: Add config-as-code blog article (#47707) - allenhouchins: Bump fleet-desktop to 1.3.2 (#48028) - fleet-release: Update Fleet-maintained apps (#48029) - fleet-release: Update Fleet-maintained apps (#48033) - AndreyKizimenko: Update Macs excluded from external storage restrictions (#48039) - danbgordon: Fix speaker name in webinar landing page (#48040) - danbgordon: Publish article from Adam Baali (#48043) - spalmesano0: Display tooltips for fleets and roles on Settings > Users and My account page... - ireedy: Update receive-from-github.js (#47996) - fleet-release: Update Fleet-maintained apps (#48056) - BCTBB: Dogfood terraform hardening updates (#47263) - marko-lisica: New

ToastNotification

component to replace

FlashMessage

component (#47508) - rahultoppur: Add

socket_path

to containerd tables (#47987) - mason-buettner: Update link for vulnerability processing documentation (#48031) - nulmete: Frontend: document spread-prop exceptions (#46348) - juan-fdz-hawa: Made team label membership checks more robust - allenhouchins: Add "Support" default software category (#47923) - noahtalerman: Rename guide: "Query" => "Report" (#48020) - fleet-release: Update Fleet-maintained apps (#48071) - harrisonravazzolo: typo fix, link fix (#48079) - lucasmrod: Remove unused migration tests (#48074) - marko-lisica: Update self service docs (#47994) - allenhouchins: Align software category name comparison with DB (#47983) - sharon-fdm: Improve fleet scope validation for software title lookups (#48034) - lucasmrod: Revert "Initial pass on TPM-backed disk encryption support (#46457)" (#48101) - eashaw: Update vulnerability dashboard readme (#48104) - noahtalerman: 4.87 release article: Fix hyperlinks (#48072) - spalmesano0: Improve software page tooltips (#46839) - eashaw: Website: update logos on partners page (#48096) - AndreyKizimenko: Add Hangar: Go/Wails desktop control panel for the Fleet dev environment (#46... - fleet-release: Update Fleet-maintained apps (#48089) - ksykulev: Android certs support all idp vars (#48100) - jbelbo: Fix typo in README.md for restaurant spelling (#48075) - AndreyKizimenko: Remove dead Wails-template scaffolding from tools/hangar (#48126) - eashaw: Website: update custom

<ol>

marker styles (#48140) - fleet-release: Update Fleet-maintained apps (#48151) - RachelElysia: Fleet UI: Auto-dismiss success toasts after navigation (#48112) - fleet-release: Update Fleet-maintained apps (#48152) - fleet-release: Update Fleet-maintained apps (#48155) - fleet-release: Update Fleet-maintained apps (#48159) - juan-fdz-hawa: Authorize query read when creating a policy from query_id - ireedy: Update custom.js (#48111) - lucasmrod: Fix data race in CVE tests (#48070) - jkatz01: Cancel software install records instead of deleting when an installer is dele... Read more: https://github.com/fleetdm/fleet/commits/main