🏗️ New commits pushed to Fleet: - RachelElysia: Fleet UI: Add CopyButton component, fix Copied! badge in dark mode (#48124) - RachelElysia: Fleet UI: Cap policy/report name input at 255 + truncate long names with tool... - ireedy: Handbook update (#48118) - sgress454: Allow setting default vuln chart filters via GitOps (#47634) - sgress454: Add docs for chart bounded context (#47877) - sgress454: Report mobile devices in "hosts online" (#47222) - sgress454: Add regression test for #46604 (#46613) - andymFleet: 45641 Display ran_custom_mdm_command activities in host and global activity f... - dantecatalfamo: Fix My device software list appending macos_applications param on pagination ... - allenhouchins: Capitalize Kiro app name (#48194) - allenhouchins: Disambiguate FMAs sharing macOS bundle IDs (#47951) - sharon-fdm: Fix My device page software sorting by display name (#45836) - danbgordon: Modify healthcheck for TLS support in docker-compose (#46960) - jkatz01: Update claude rules to allow server/ptr non deprecated functions (#48199) - lukeheath: Use full-depth checkout in snapshot image build for correct build-info versio... - RachelElysia: Fleet UI: Stop query-param URL replace from dismissing newly-landed toasts (#... - RachelElysia: Fleet UI: Browser Back no longer trapped on script batch progress page (#48200) - RachelElysia: Fleet UI: Add software progress bar stops jittering as percentage digits chan... - RachelElysia: Fleet UI: Prevent button label wrap globally on narrow viewports (#48176) - lukeheath: Upgrade OpenSSL in mdmproxy image to clear CVE-2026-34182 (#48209) - sharon-fdm: Tighten conditional-access SCEP challenge validation (#48041) - spalmesano0: Add note about DDM update profile status failures (#48207) - noahtalerman: Remove "experimental" tag from MCP: Pushed to 4.92 (#48188) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#48230) - noahtalerman: New Claude skill:

/push-reference-docs

(#48172) - fleet-release: Update Fleet-maintained apps (#48196) - lukeheath: Handbook: shift product group rollout for mid-cycle 4.88.0 release (#48189) - fleet-release: Update Fleet-maintained apps (#48232) - eashaw: Website: Update favicon (#48238) - mikermcneil: Website: Remove dupliative comic strips. Update press-kit.ejs (#48219) - dependabot[bot]: Bump tar from 7.5.11 to 7.5.16 in /tools/fleetctl-npm (#47759) - raju249: Extract /api/ timeout-override middleware out of runServeCmd (#47891) - fleet-release: Update Fleet-maintained apps (#48237) - fleet-release: Update Fleet-maintained apps (#48246) - fleet-release: Update Fleet-maintained apps (#48251) - AndreyKizimenko: Docs: correct custom variables permissions in RBAC guide (#48210) - ddribeiro: Fix header formatting in FAQ.md (#48153) - allenhouchins: Rebrand VNC Viewer to RealVNC Connect Viewer (#48255) - noahtalerman: Okta conditional access certificates (#48099) - marko-lisica: [Docs update] Android commands: Lock, wipe, & clear passcode (#47993) - mikermcneil: Website: Simpler (Update homepage.ejs) (#48258) - JordanMontgomery: Fix batch script execution validations (#48243) - sharon-fdm: Restrict authorization for team membership operations (#48201) - lucasmrod: Add external storage exclusion for Lucas' macOS workstation (#48263) - fleet-release: Update Fleet-maintained apps (#48260) - dantecatalfamo: Fix NDES not using the same retry clearing method as SmallStep for macos (#48... - ddribeiro: Add onTargetEarnings field to open APAC CSE position (#48193) - lucasmrod: Release osqueryd 5.23.1 (#48221) - ksykulev: Refactor makeAndroidAppAvailable to use staggered job queuing (#47880) - melpike: Add route for configuration profile assets (#48133) - kilo-code-bot[bot]: [Guide] add combined include/exclude targeting for configuration profiles (#4... - sharon-fdm: Tighten certificate renewal validation in host identity SCEP service (#48270)

- JordanMontgomery: Check if host is still on script's team before executing batch (#48244) - fleet-release: Update Fleet-maintained apps (#48283) - allenhouchins: Expand article with key takeaways on shadow AI (#48286) - sharon-fdm: Fix required password reset logging users out (#48287) - juan-fdz-hawa: Fix alignment issue on Policy automations header. (#48288) - RachelElysia: Fleet UI: Contain page-area overflow on narrow viewports (#48186) - cdcme: GitOps mode tooltip fixes (#48280) - lucasmrod: Restrict conditional access Okta IdP asset endpoints to privileged roles (#48... - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#48298) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#48302) - fleet-release: Update Fleet-maintained apps (#48308) - ksykulev: On var change resend Android certificate templates and managed app configs (#... - jkatz01: Add activity and enable managed account fleets endpoint (#48273) - RachelElysia: Fleet UI: Activity feed outline only on keyboard focus (#48295) - georgekarrv: Adding BYOD backend changes (#47716) - eashaw: Website: Add FAQ to security and control page's header (#48316) - spalmesano0: Fix broken link for Tahoe migration info (#48228) - juan-fdz-hawa: Fix spacing around icons and add missing - rrahul-1: Fix typo in Handbook - Marketing README (#48276) - nulmete: Enable refetchOnWindowFocus and set refetchInterval to 5s when no report resu... - kitzy: Add guide for Managed Migration Assistant: Mac-to-Mac migration with Fleet (#... - sharon-fdm: Add exponential backoff to orbit config polling loop (#46674) - JordanMontgomery: Fix returned values on MDM command results endpoint (#48296) - juan-fdz-hawa: Fix SSO callback URLs doubling the subpath under a URL prefix - juan-fdz-hawa: Fix duplicated URL prefix in transactional email links for subpath deployments - fleet-release: Update Fleet-maintained apps (#48329) - allenhouchins: Add article on Managed Migration Assistant (#48332) - ksykulev: Fixing android tests (#48336) - juan-fdz-hawa: fleet-mcp: run multi-host live queries via ad-hoc campaign so observer_plus w... - juan-fdz-hawa: Fix policy selection resetting pagination to first page - allenhouchins: Enhance Managed Migration Assistant article with governance details (#48341) - fleet-release: Update Fleet-maintained apps (#48347) - fleet-release: Update Fleet-maintained apps (#48352) - kitzy: Remove unnecessary nested folder (#48331) - AndreyKizimenko: Left-align Advanced options toggle in vuln exposure chart filter (#48348) - andymFleet: fix: remove as a custom MDM command text from MDM command list view (#48307) - lukeheath: Bump golang.org/x/image to v0.42.0 (CVE-2026-33813) (#48345) - eashaw: Website: update position of homepage hero background (#48354) - fleet-release: Update Fleet-maintained apps (#48353) - fleet-release: Update Fleet-maintained apps (#48357) - georgekarrv: Auto-update, pin, and rollback Fleet-maintained apps via UI and GitOps (#48293) - cdcme: Use active custom script if available (#48350) - cdcme: Pin-cleanup on FMA delete (#48333) - cdcme: Return per-version filename in fleet_maintained_versions (#48335) - JordanMontgomery: Do not block further wipe commands on inactive existing entry (#48358) - JordanMontgomery: Parse both date formats while parsing macos profiles for verification (#48328) - allenhouchins: Refine Managed Migration Assistant description (#48360) - getvictor: Compress windows_mdm_responses envelopes on the Windows MDM hot path (#48320) - allenhouchins: Remove duplicate text from managed migration article (#48363) - fleet-release: Update Fleet-maintained apps (#48365) - andymFleet: Clarify NO_PROXY usage in proxy configuration (#48359) - lukeheath: Fix dogfood-deploy DOCKER_IMAGE guidance (tags + digest) and make geolite2 ta... - eashaw: Website: Update error handling in android proxy endpoints (#48240)

- irenareedy: Update financial-services-platform.md (#44786) - irenareedy: Update digital-bank.md (#44780) - irenareedy: Update cloud-infrastructure-company.md (#44782) - irenareedy: Update it-platform-provider.md (#44783) - irenareedy: Update computational-research-company.md (#44784) - irenareedy: Create schnellere-schwachstellenbehebung-verlangt-enge-zusammenarbeit… (#45675) - irenareedy: Update medical-research-institution.md (#44779) - fleet-release: Update Fleet-maintained apps (#48371) - allenhouchins: Style inline article CTA button links (#48364) - kitzy: Add article: AI isn't just replacing jobs, it's rewriting the job description... - allenhouchins: Add allenhouchins as an articles maintainer (#48361) - fleet-release: Update Fleet-maintained apps (#48377) - fleet-release: Update Fleet-maintained apps (#48383) - fleet-release: Update Fleet-maintained apps (#48385) - fleet-release: Update Fleet-maintained apps (#48387) - fleet-release: Update Fleet-maintained apps (#48390) - fleet-release: Update Fleet-maintained apps (#48392) - fleet-release: Update Fleet-maintained apps (#48407) - lucasmrod: Update changelog for fleetd 1.57.0 release (#48406) - AndreyKizimenko: Release QA template: progress checkboxes, drop pass/fail column, update loadt... - rrahul-1: Update install software tooltip in setup experience (#48382) - juan-fdz-hawa: Add per-host reverse index for small-target live queries - jkatz01: Fix gitops leaving temporary url for script-only package in datastore (#48370) - noahtalerman: Rename

fleetctl

--team

flag to

--fleet

(#48019) - noahtalerman: Update policy automation script behavior description (#48120) - juan-fdz-hawa: Fix Orbit and Fleet Desktop stripping subpath from --fleet-url (#48173) - fleet-release: Update Fleet-maintained apps (#48410) - spalmesano0: Add external storage exclusion for Steven (#48411) - lucasmrod: Google Workspace IdP [1/6]: activity types (frontend + backend) (#48164) - sharon-fdm: Add private network IP blocking for outbound HTTP requests (#46463) - getvictor: Add Windows MDM load test plan for 100k devices (#48259) - lucasmrod: Google Workspace IdP [2/6]: backend (cron + directory sync) (#48165) - lucasmrod: Google Workspace IdP [3/6]: usage statistics (#48166) - cdcme: Support advanced options for script-only packages (#48315) - getvictor: Optimize IsHostConnectedToFleetMDM on the orbit check-in hot path (#44629) (#... - karmine05: Add article on blocking EDR Freeze with Santa and Fleet (#48421) - lucasmrod: Google Workspace IdP [4/6]: fleetctl generate-gitops support (#48167) - RachelElysia: Fleet UI: New user role dropdown weird scrollbar (#48419) - lucasmrod: Google Workspace IdP [5/6]: settings UI (#48168) - georgekarrv: gkarr 23242 fe (#47754) - rfairburn: fix mdmproxy build by reverting back to previous but not filtering tags (#48264) - cdcme: Clean up skills (#48408) - lucasmrod: Google Workspace IdP: QA/load-test tooling (fake Admin SDK server) (#48208) - fleet-release: Update Fleet-maintained apps (#48427) - eashaw: Website: Fix failing deploy (#48438) - mostlikelee: Detect Citrix Workspace LTSR cumulative updates (#41790) (#47591) - mostlikelee: Fix CPE generation for Citrix Workspace without YYMM suffix (#46811) (#47545) Read more: https://github.com/fleetdm/fleet/commits/main