🏗️ New commits pushed to Fleet: - sharon-fdm: Fix CPE matching for python3-prefixed packages on Ubuntu/Debian (#48599) - juan-fdz-hawa: Skip live-query reverse-index read when no reverse queries are active - allenhouchins: Add macOS app filter to My device software (#48637) - lucasmrod: Move

test/upgrade

to

tools/

to reduce security scanning noise (#49158) - fleet-release: Update Fleet-maintained apps (#49196) - allenhouchins: Fuzzy-match Zoom Workplace program name in Windows FMA install and patch quer... - allenhouchins: Auto-install 1Password patches on Workstations (#48585) - allenhouchins: Run Windows FMA test workflows on ARM64 runner (#47598) - kc9wwh: Supress install all for all/undefined software category (#48999) - allenhouchins: Add Windows FMAs (letter E): 13 apps (#49186) - fleet-release: Update Fleet-maintained apps (#49203) - marko-lisica: Update CustomLink styles (#48838) - noahtalerman: Custom Android apps guide (#49206) - eashaw: Website: remove script tag in header (#49207) - rrahul-1: Fix tables losing row selection on window focus (#48742) - eashaw: Website: move analytics script tag (#49214) - zayhanlon: Update README with access and data usage guidelines for cloud (ISO) (#49217) - ksykulev: Android managed config insert job with empty err vs null err (#49213) - dantecatalfamo: Update Windows 10 CIS benchmark policies to v4.0.0 (#48986) - allenhouchins: Change 'should never' to 'must never' in README (#49222) - lucasmrod: Add VEX exclusions for WiX (#49193) - lucasmrod: Use generated UUID for mdm_idp_account table on Linux and Windows (#49215) - sharon-fdm: Cache pack config JSON per team to reduce redundant marshaling (#48702) - ksykulev: Android certificates resent_certificate (#49171) - Sampfluger88: Add Snitcher tag to layout.ejs (#49231) - fleet-release: Update Fleet-maintained apps (#49220) - nulmete: Fix Policies automations filter disappearing for the Unassigned fleet (#49224) - sharon-fdm: Ensure unit test coverage for all external library upgrades (#48949) - allenhouchins: Add Windows FMAs (letter F): 5 apps (#49218) - dependabot[bot]: Bump ws from 8.19.0 to 8.21.0 (#49028) - dependabot[bot]: Bump ws from 8.19.0 to 8.21.0 in /ee/fleetd-chrome (#49026) - noahtalerman: Cleanup: Remove software YAML migration tool (#48877) - RachelElysia: Fleet UI: Show tooltip for truncated vulnerabilities list in Update details m... - lucasmrod: Bum dependency-review action (#49190) - ireedy: Update product-groups.md (#49223) - ksykulev: Android certificates resend generate resent_certificate (#49249) - cdcme: Rename setup_experience_platforms to singular comma-separated setup_experienc... - lucasmrod: Update go mod in tools/upgrade (#49262) - juan-fdz-hawa: macOS & iOS/iPadOS: Rename hosts - ksykulev: Android enrollment debug logging (#49043) - RachelElysia: Fleet UI: Remove blue click flash on clickable table rows (#49228) - Leanngove: Ensure that the options and copy for both Add hosts - Android and iOS/iPadOS ... - allenhouchins: Add article: How Fleet completes your Microsoft stack (#49226) - ksykulev: De-duplicated resent_certificate activity (#49266) - lucasmrod: Keep tools up to date (#49265) - github-actions[bot]: Fleet UI: Update osquery version options (#48247) - spalmesano0: Remove info about DDM not working during Setup Assistant (#46017) - noahtalerman: Fix inconsistent modal scroll behavior (#48789) - Leanngove: Surface a more detailed error message if user doesn't have server_private_key... - allenhouchins: Add Mozilla VPN as a macOS and Windows FMA (#49284) - eashaw: Website: update /gitops-workshop redirect (#49283) - allenhouchins: Update windows-mdm-setup.md (#49294) - kilo-code-bot[bot]: Close Solutions Specialist open position (#49275) - georgekarrv: Document risks of VPP app installs during setup experience (#49170) - rachaelshaw: Docs: Fix formatting for

features

config (#49310)

- noahtalerman: Support all Apple declaration (DDM) profiles and assets: Copy change (#49308) - noahtalerman: Assets and user-scoped decleration (DDM) profiles are coming in 4.90 (#49290) - noahtalerman: Fix enroll page and Add hosts modal styling issues (#48968) - fleet-release: Update Fleet-maintained apps (#49314) - allenhouchins: Add Entra client ID to default controls (#49302) - allenhouchins: Update Zoom Workplace label query (#49317) - kilo-code-bot[bot]: Add 'Generate a customer quote' section to GTM ops handbook (#49315) - allenhouchins: Add Windows FMAs (letter G): 13 apps (#49281) - Sampfluger88: Add contactSource "Event - 2026-07 PSU MacAdmins" (#49323) - noahtalerman: Enroll hosts > Advanced > Grant full disk access to osquery (#49057) - lucasmrod: Drop Docker

fleetdm/bomutils

dependency in fleetctl when generating

pkg

f... - RachelElysia: Fleet UI: Remove elevated background on loading spinner (#49289) - sharon-fdm: Batch extension label-membership checks in GetOrbitConfig (#49154) - RachelElysia: Fleet UI: Fix Controls tab firing wrong-team requests on refresh (#49282) - allenhouchins: Bump FMA validator download timeout to 5 minutes (#49338) - ireedy: Update receive-from-github.js (#49195) - dantecatalfamo: Fix NDES invalid credentials error to point to correct settings location (#49... - eashaw: Website: Reduce Android Management API usage (#49065) - rachaelshaw: v4.89.0 doc changes (#48668) - juan-fdz-hawa: Support custom (secret) variables in host name templates - noahtalerman: Release article: Fleet 4.89.0 (#49253) - fleet-release: Update Fleet-maintained apps (#49347) - RachelElysia: Fleet UI: Restore dashboard cards hidden despite the API returning their data... - jkatz01: Disable Inter contextual alternates in input fields (#49358) - allenhouchins: Shard FMA validation workflows and route Windows apps to arch-matched runners... - noahtalerman: Community PR process (#49372) - noahtalerman: Tweak tooltip language for "Hosts online" (#48971) - nulmete: 44954 custom host vitals (#49334) - eashaw: Website: update testimonials and logo carousel (#49313) - georgekarrv: Allow multiple custom packages per software title (#49157) - cdcme: merge main - cdcme: bump migrations - cdcme: Merge remote-tracking branch 'origin/main' into feat/28108-multiple-custom-pa... - cdcme: Fix installer edit rejecting same-software new versions (#49353) - cdcme: Fix multi-package host software details (#49335) - noahtalerman: Fix query editor syntax-highlighting colors and visual bugs (#49374) - georgekarrv: Windows MDM: accept discovery RequestVersion >= 4.0 (#49329) (#49380) - JordanMontgomery: Speculative fix for iOS/iPadOS enrollment w/ required sw update (#49280) - fleet-release: Update Fleet-maintained apps (#49385) - fleet-release: Update Fleet-maintained apps (#49392) - spalmesano0: Add installed and available versions to self-service (#47526) - spalmesano0: Show individual settings sections in user menu (#48197) - spalmesano0: Add missing space under Controls > Setup experience > Users > End user authen... - nulmete: Refresh reports list cache after report create/update (#49402) - juan-fdz-hawa: Software > OS: Show Android versions and vulnerabilities (#49399) - lucasmrod: Remove the wmic.exe dependency in mdm_bridge table (#49296) - juan-fdz-hawa: Extend support for all built-in - sharon-fdm: Add Claude Code skill for creating Aikido pen test tickets (#49312) - fleet-release: Update Fleet-maintained apps (#49363) - fleet-release: Update Fleet-maintained apps (#49404) - RachelElysia: Fleet UI: Multi-package add-conflict error copy (#49309) (#49336) - fleet-release: Update Fleet-maintained apps (#49413) - Leanngove: Update the refetching host error banner to reflect uncertainty (#49382) - nulmete: Fix infinite spinner on Controls > OS settings and Scripts on Fleet Free (#49... - lucasmrod: Fix update-certs CI check (failing for a while) (#49159)

- nulmete: Add custom host vitals guide (#49355) - cdcme: Allow Python script-only packages (#49070) - kilo-code-bot[bot]: Add CFO review policy for quotes with custom terms (#49431) - lukeheath: Cherry-pick #48451: Adding changes for Fleet v4.89.0 (#49379) - RachelElysia: Fleet UI: Hide My device button on unusable hosts (#49361) - fleet-release: Update Fleet-maintained apps (#49427) - allenhouchins: Document Fleet Cloud infrastructure baselines (#49436) - dependabot[bot]: Bump websocket-driver from 0.7.4 to 0.7.5 (#49384) - dependabot[bot]: Bump golang.org/x/net from 0.38.0 to 0.55.0 in /tools/github-manage (#48610) - dantecatalfamo: Add ai_tools fleetd table (#49243) - adriant172: Update product-groups.md (#49398) - lucasmrod: Remove unused

cadvisor

from dev/test

docker-compose.yml

(#49432) - allenhouchins: Add Smallstep Agent as a macOS FMA (#49393) - allenhouchins: Add Fleet Cloud database and environment restore process to customer success ... - georgekarrv: Adding changes for Fleet v4.89.1 (#49424) - eashaw: Website: Fix spelling of name in Mollie case study (#49375) - juan-fdz-hawa: Rejected empty and whitespace-only enroll secrets when creating or updating t... - ddribeiro: Clarify description for Rotate FileVault key command (#49439) - juan-fdz-hawa: Added audit activities when secret variables are upserted - moojomoore: Update DDM declarations release version (#49451) - cdcme: Docs: setup_experience_platforms for cross-platform GitOps selection (#49400) - Sampfluger88: Change which fields are visable when editing selected quote line items (#49456) - fleet-release: Update Fleet-maintained apps (#49458) - fleet-release: Update Fleet-maintained apps (#49460) - tux234: Add "Intune isn't free" Microsoft 365 licensing article (#49345) - lucasmrod: Allow Microsoft conditional access on premium self-hosted (#49414) - mike-j-thomas: Handbook add leave behind deck to go to market page (#49471) - lucasmrod: Fix update ca certs CI check (#49476) - dantecatalfamo: Fix duplicate FDE TPM keyslots not getting caught correctly (#49459) - github-actions[bot]: Update Orbit CA certs [automated] (#49479) - allenhouchins: Change published date in article metadata (#49481) - allenhouchins: Update intune-isnt-free-what-the-microsoft-365-bundle-really-costs.md (#49482) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#49486) - d-sabido: Fix grammatical error in leadership recruiting section (#49429) - noahtalerman: Fleet supports non-US app store (#49490) - nulmete: Custom host vitals guide: add 'coming soon' notes (host name templates, Andro... - AndreyKizimenko: Open Quality Assurance Engineer position (#49450) - lucasmrod: Update changelog for fleetd 1.58.0 release (#49484) - jkatz01: Fix patch policy for swiftDialog to not pick up orbit installation (#49362) - JordanMontgomery: Don't show Turn on MDM button to users who can't turn it on (#49473) - kilo-code-bot[bot]: Comment out Controller position from open positions (#49503) - nulmete: Fleet UI: show custom host vital row actions disabled with GitOps tooltip (#4... Read more: https://github.com/fleetdm/fleet/commits/main