🏗️ New commits pushed to Fleet: - jkatz01: Differentiate between ipa and other zip file types in ExtractInstallerMetadat... - allenhouchins: Rename MacPaw Gemini app to Gemini 2 and fix Gemini app icons (#48819) - eashaw: Website: rename Gitops workshop page to Workshops, update content (#48827) - fleet-release: Update Fleet-maintained apps (#48828) - getvictor: Fixed a bug where fleetd could not start on-demand Windows MDM session (#48765) - spalmesano0: Link directly to the uninstall guide, rather than the FAQ (which links to the... - getvictor: Remove /api/mdm/microsoft/auth mentions from public endpoints guide (#48735) - fleet-release: Update Fleet-maintained apps (#48839) - raju249: Show managed account host action for observers (#48748) - nulmete: Add POST /reports/run to the API endpoints catalog (#48790) - lucasmrod: Additional changes for Zorin OS support (#48779) - JordanMontgomery: Fix re-enrollment with pending SCEP(and ACME) renewals (#48661) - nulmete: Update 404 and 500 error pages (#48826) - kitzy: Add fleet-guide-formatting Claude skill for consistent guide formatting (#48832) - cdcme: Follow-up fix for FMA counts (#48818) - getvictor: Fix dibble build (#48747) - marko-lisica: Hide empty self-service categories on My device page (#48614) (#48619) - RachelElysia: Fleet UI: Lock labels table column widths to prevent reflow on sort (#48450) - getvictor: Updated osquery-perf for certs (#48499) - getvictor: Fixed Windows profile modify batch (#48474) - getvictor: Move fleetd Windows MDM changelog entry to orbit/changes (#48837) - cdcme: Add onURLBlur handler for InputField (#48854) - spalmesano0: Add /enroll URL for macOS in Add hosts modal (#47528) - spalmesano0: Enable "Turn off MDM" button for offline macOS devices (#46651) - georgekarrv: tools: bump x/net and x/crypto to clear high-severity CVE alerts (#48822) - kilo-code-bot[bot]: [Docs] Add end user account type section to setup experience guide (#44855) - JordanMontgomery: Fix dupe profile enqueue bug (#48652) - JordanMontgomery: Add user-scoped declaration support (#48796) - RachelElysia: Fleet UI: Fix ManageSoftwareAutomationsModal test type errors (#48878) - getvictor: Added anonymous usage statistics reporting the number of macOS and Windows ho... - juan-fdz-hawa: Fix policy automation activities missing from host activity feed - allenhouchins: Add Windows FMAs (digit batch): 3DF Zephyr Free, 4K Video Downloader+ (#48872) - allenhouchins: Add Windows FMAs (letter A): 14 apps (#48881) - moojomoore: Add Okta Verify Windows FMA (#48889) - jkatz01: Add duplicate patch policy check to GitOps (#48896) - cdcme: Fix App Store picker 403 for non-admin roles (#48856) - RachelElysia: Fleet UI: 'Latest' pin only shows on Fleet-maintained apps (#48871) - RachelElysia: Fleet UI: Restore download button for script-only packages (#48909) - dantecatalfamo: escrow snapd TPM-backed FDE recovery keys from orbit (#48452) - dantecatalfamo: Add resolved-in-version override for CVE-2025-63389 on Ollama (#48525) - eashaw: Website: remove duplicate/unused form-data from the website's package-lock (#... - kitzy: Revise contributor roles and maintainer information (#48834) - eashaw: Website: cache workshop details in platform record (#48882) - fleet-release: Update Fleet-maintained apps (#48920) - MagnusHJensen: SAAD: DDM Asset table migration (#48866) - spalmesano0: Replace duplicate code with existing getDisplayedSoftwareName helper (#48311) - cdcme: Fix Windows software ingest lock contention by matching titles on upgrade_cod... - mike-j-thomas: Website retire old success stories (#48921) - getvictor: Fix Windows CSP bypass issue (#48843) - lucasmrod: Remove Zorin from platform for labels (#48937) - fleet-release: Update Fleet-maintained apps (#48936) - mikermcneil: Website: Add convenience redirect for typos: Update routes.js (#48831) - getvictor: User must be logged in for Windows MDM enrollment (#48932)

- allenhouchins: Install Okta Verify on Windows workstations via Fleet-maintained app (#48952) - allenhouchins: Add Windows FMAs (letter B): 5 apps (#48950) - mostlikelee: Controls > OS settings > Certificates: View certificates (#48460) - rrahul-1: Return to previous page when the last policy on a page is deleted (#48683) - allenhouchins: Add icon for Okta Advanced Server Access macOS FMA (#48956) - spalmesano0: Include mobile hosts by default in "Hosts online" chart (#48769) - lukeheath: Filter cross-team memberships from user list responses (#48890) - nulmete: fleet-mcp: use /fleets endpoints instead of legacy /teams (#48791) - jkatz01: Fix test setting flag that caused further tests to fail (#48947) - nulmete: Time ago timestamps: use days instead of months when under 90 days (#48964) - lucasmrod: Fix lint for linux only code (#48962) - allenhouchins: Add Windows FMAs (letter C): 13 apps (#48969) - kitzy: Fix misspelled bootstrap-package article filename (#48833) - getvictor: Updated osquery perf for #45550 (#48935) - RachelElysia: Fleet UI: Policy details page labels/automations use TruncatedTextList (#48977) - allenhouchins: Add missing FMA icons for software catalog (#48995) - allenhouchins: Apply house article format to 17 articles (#48992) - getvictor: Surface proxied Windows SCEP certificate failures (#45550) (#48842) - GrayW: Add instructions for iOS sysdiagnose (#48930) - spalmesano0: Dedupe connect guide (#48990) - spalmesano0: Update Windows MDM end user experience language (#47635) - georgekarrv: Fix VPP/in-house app install on manual-profile BYOD iOS hosts (#48879) (#48916) - getvictor: Add note that Windows supports 1 proxied cert per profile (#49010) - lucasmrod: Update go to 1.26.5 (#48993) - allenhouchins: Sync GitHub Desktop FMA install script with current quit/relaunch helpers (#4... - kilo-code-bot[bot]: Add 2-business-day SLA for CEO interviews (#49031) - fleet-release: Update Fleet-maintained apps (#49032) - MagnusHJensen: update missed ABM references (#49027) - mostlikelee: Fix macOS software titles mis-named from embedded helper bundles (#44199) (#4... - allenhouchins: Fix osascript is-running checks across 15 FMA custom scripts (#49033) - lucasmrod: Move fleet-mcp from tools/ to cmd/ (#49044) - MagnusHJensen: SAAD: Asset CRUD API (#49011) - eashaw: Move website workflows under the workflows folder in CODEOWNERS (#48966) - AndreyKizimenko: Update Release QA template for current product groups (#49047) - dantecatalfamo: LUKS key escrow validate against any keyslot (#48815) - jkatz01: Fix fleet_maintained_app_slug being allowed in a dynamic policy (#49034) - eashaw: Website: use git to get lastModifiedAt timestamps for markdown and yaml files... - melpike: Apple MDM: require server URL confirmation before turning off (#48595) - lucasmrod: Upgrade

nfpm

package in

fleetctl

(#48961) - JordanMontgomery: macos password sync feature branch (#47422) - juan-fdz-hawa: Policy status automation activities bug fixes - allenhouchins: Add article: Make your cross-platform skills official with Fleet certificatio... - allenhouchins: Revise workshop rollout details and remove redundancy (#49076) - Sampfluger88: 2026 07 09 sam (#49075) - noahtalerman: Update product maturity assessment (#49042) - fleet-release: Update Fleet-maintained apps (#49055) - spalmesano0: Add

mdmclient

log query to troubleshooting guide (#48959) - georgekarrv: dibble: download seed installer fixtures at runtime instead of embedding (#48... - Sampfluger88: Comment out incorrect contact sources (#49095) - spalmesano0: Add Fleet Agent Installer to restoring fleetd guide (#48991) - rachaelshaw: Add step to API design process (#48782) - noahtalerman: Remove

starter-library/

(#48478) - ksykulev: Android config profiles resend on IdP changes (#49068) - ksykulev: Android filter out empty enterprises (#49097) - fleet-release: Update Fleet-maintained apps (#49101)

- lukeheath: Update leadership table (#49049) - andymFleet: 48917 Show a deleted state instead of a generic error for stale MDM command (... - jp-cpe: Enhance labels documentation in Fleet (#47753) - mostlikelee: Fix long certificate name overflow in delete certificate modal (#48948) (#49019) - MagnusHJensen: SAAD: Support DDM assets in sync + reconciliation (#49016) - MagnusHJensen: SAAD: User channel + DDM assets for osquery-perf (#49108) - MagnusHJensen: Tooltips not always showing for full name (IdP) (#49116) - fleet-release: Update Fleet-maintained apps (#49117) - MagnusHJensen: Stop premium calls on Fleet free (#49118) - lucasmrod: Add VEX exclusions for CVEs in

fleetdm/wix

(#49107) - MagnusHJensen: inconsistent font size tooltip (#49121) - allenhouchins: Add Windows FMAs (letter D): 12 apps (#49086) - fleet-release: Update Fleet-maintained apps (#49122) - SpeedRacerMcQueen: Update README.md (#49120) - fleet-release: Update Fleet-maintained apps (#49125) - JordanMontgomery: Add UI for assets (#49071) - allenhouchins: Add Firefox multilingual deployment guide (#49129) - kenseals: Fix open paren (#49126) - sharon-fdm: Handbook: add missing security practices to IT security page (#49069) - sharon-fdm: Restrict SCIM endpoints to global admin only (#48858) - allenhouchins: Re-add Crestron AirMedia (+Peripherals) Windows FMAs (#49127) - MagnusHJensen: handle client error decoding errors in ACME urls (#49137) - jkatz01: Fix invisible hover state in dark mode (#49001) - MagnusHJensen: SAAD: GitOps for DDM assets (#49046) - mostlikelee: Filter Add certificate CA dropdown to custom SCEP only (#49020) - noahtalerman: GitOps (YAML) reference: Remove "experimental" tags (#49142) - cdcme: Add GitOps support for macOS script-only packages in setup experience (#49089) - lukeheath: Fix open redirect in Vanta authorization redirect endpoint (#49077) - allenhouchins: Remove AI model comparison article (#49132) - allenhouchins: Add Targeted platforms column and platform filter to Policies page (#44125) - mikermcneil: Handbook: Update headcount (#49156) - mikermcneil: Handbook: Update leadership.md (#49162) - spalmesano0: Update macOS version DDM guide to avoid failures (#47999) - JordanMontgomery: Add better index to nano_enrollment_queue (#48865) - andymFleet: 46959 Add Account Provisioning settings to UI for FPSSO configuration (#47655) - AndreyKizimenko: Add 4.89.0 baseline and migration loadtest results (#49168) - mostlikelee: Docs: non-proxied cert renewal (#45695) - JordanMontgomery: Add PSSO end to end integration tests (#48589) - georgekarrv: Adding changes for Fleet v4.88.1 (#49038) - fleet-release: Update Fleet-maintained apps (#49174) - allenhouchins: Update block-and-monitor-edr-freeze-on-macos-with-santa-and-fleet.md (#49176) - kilo-code-bot[bot]: Add Sales Territory Assignments section to Sales handbook (#49155) - georgekarrv: Handbook: remove Ian Littman from product-groups.md (#49138) - ireedy: Update CODEOWNERS (#49194) Read more: https://github.com/fleetdm/fleet/commits/main