🏗️ New commits pushed to Fleet: - fleet-release: Update Fleet-maintained apps (#49505) - fleet-release: Update Fleet-maintained apps (#49518) - dantecatalfamo: Mask team enroll secrets in team write responses (#49422) - ksykulev: Android Load testing with osquery perf (#48535) - noahtalerman:

apple_require_hardware_attestation

can only be configured at the global lev... - allenhouchins: Add Firefox Nightly and Firefox Developer Edition Fleet-maintained apps (#49501) - lucasmrod: Add VEX exclusions for fleetdm/fleetctl (#49504) - Leanngove: Update host vitals refresh error banner (#49526) - cdcme: Fix false-success reporting for failed software installs (#49515) - ksatter: Update FAQ with Windows 11 support info (#49507) - lukeheath: Handbook: continuous flow for all product groups (4.91.0) (#49500) - eashaw: Website: Update create-android-signup-url error handling (#49488) - noahtalerman: Fix query editor syntax-highlighting colors and visual bugs (#49391) - jkatz01: Fix FMA pinning not changing patch policy (#49519) - fleet-release: Update Fleet-maintained apps (#49528) - fleet-release: Update Fleet-maintained apps (#49529) - fleet-release: Update Fleet-maintained apps (#49530) - cdcme: Redirect FMA installs to the active version after auto-update (#49525) - allenhouchins: Fix Portfolio Performance FMA ingestion after winget scope correction (#49538) - fleet-release: Update Fleet-maintained apps (#49539) - fleet-release: Update Fleet-maintained apps (#49547) - getvictor: Add host 1310 to Macs excluded from external storage restrictions (#49545) - fleet-release: Update Fleet-maintained apps (#49550) - JordanMontgomery: Enhance logging and repair flow for FPSSO (#49524) - JordanMontgomery: Remove erroneous changes file (#49509) - nulmete: Fix label membership being cleared when a label query errors (#49403) - noahtalerman: Custom host vitals support coming soon (#49527) - fleet-release: Update Fleet-maintained apps (#49558) - allenhouchins: Set byod_fleet for dogfood Apple Business Manager tokens (#49564) - allenhouchins: Update custom-tap casks: Druva inSync 8.1.3, Fleet Desktop 1.3.4, Zoom Rooms ... - pintomi1989: Added CSM task "Submit a feature request for CSA review" (#49492) - noahtalerman: Follow up: Styling bugs on end user enrollment (BYOD) page and Add hosts moda... - noahtalerman: Remove "User story review" (#48443) - cdcme: Dedupe transitive uuid to 14.0.0 (#49566) - lukeheath: Remove outdated scrum ritual docs (#49578) - fleet-release: Update Fleet-maintained apps (#49577) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#49598) - noahtalerman: Fix "AB issue" icon color (#49596) - cdcme: Show .py script-only packages as available for install on macOS hosts (#49457) - lucasmrod: Website: don't require an API key on Microsoft compliance proxy requests (#49... - noahtalerman: Notifying stakeholders about stories pushed (#49608) - eashaw: Website: use shared Google API auth client in android proxy endpoints. (#47810) - gattaniparag: Update leadership.md (#49570) - eashaw: Website: Add case study, update card links on customers page (#49448) - fleet-release: Update Fleet-maintained apps (#49625) - mike-j-thomas: Add AI in IT report PDF (#49634) - andymFleet: 48342 edit config profile endpoint (#49141) - JordanMontgomery: 48343 edit config profile UI (#49333) - MagnusHJensen: add mdm configured endpoints for DDM assets for testing (#49633) - noahtalerman: Confirm and celebrate: Product Designers own the ritual (#49646) - noahtalerman: Continuous flow: Definition of expedited drafting changes (#47748) - noahtalerman: Open Product Designer role (#49606) - nulmete: Improve custom host vital missing-value error message (#49640) - getvictor: Fix Windows Autopilot ESP hang: gate release on user-scope ack (#49134) (#49542) - eashaw: Website: Add AI-powered IT page (#49650)

- allenhouchins: Add Prisma Access Browser as a macOS FMA (#49641) - jakestenger: Fix Linux uninstall script failing with a relative path (#49592) - pintomi1989: Updating feature request submission guide - Added line about CSAs (#49602) - jamessorrenti: Handbook: add James Sorrenti to go-to-market-operations.md (#49627) - eashaw: Website: update /ai page's meta title (#49661) - hdailey033: Fix formatting for app request in communications.md (#49658) - spalmesano0: Fix broken link for Apple @ Work group (#49662) - raju249: Add Rajendra Kadam to Apple at Work team (#49637) - fleet-release: Update Fleet-maintained apps (#49660) - juan-fdz-hawa: Fix SCIM deprovisioning edge case during user deactivation - juan-fdz-hawa: Fix SCIM middleware persisting authorization failures to last_request - fleet-release: Update Fleet-maintained apps (#49665) - noahtalerman: Revise description for product design kickoff task (#49663) - juan-fdz-hawa: Fix race condition in one-time software installer download token - andymFleet: Add migration to track invalid ABM token state (#48560) - MagnusHJensen: update nanodep with disown endpoint (#49632) - allenhouchins: Add fleet-article-formatting Claude skill (#48980) - allenhouchins: Add Fleet-maintained apps process docs: handbook section and customer-facing ... - eashaw: Website: update logos (#49695) - MagnusHJensen: create new appCfg entry on AB fleet updates if not found (#49559) - MagnusHJensen: Don't queue profiles for non host_mdm.enrolled Apple hosts (#49611) - allenhouchins: Add Solutions Consultant, Channel position details (#49669) - eashaw: Website: Update new license form links (#49709) - AdamBaali: Refactor rollout rings for OS-specific entries (#49567) - dantecatalfamo: Show managed Android serial number on Hosts page (#49711) - sharon-fdm: Normalize LocURI values before validation in Windows profiles (#49708) - fleet-release: Update Fleet-maintained apps (#49710) - mike-j-thomas: PDF text rendering fix (#49720) - eashaw: Website: add Reddit script tag (#49723) - mike-j-thomas: Update leave behind deck PDF (#49722) - kitzy: Change category meta tag from 'guides' to 'articles' (#48816) - noahtalerman: Add guide: Which public resources to expose to hosts? (#48605) - spalmesano0: Fix spelling error on config profiles guide (#48786) - GrayW: Update enroll-hosts.md (#45366) - juan-fdz-hawa: Fix Okta console navigation in Platform SSO guide - juan-fdz-hawa: Harden user creation from invite - spalmesano0: Add more macOS DDM update info to Enforce OS update guide (#49679) - spalmesano0: Add details for TokenToUserMapping to Okta PSSO guide (#49678) - raju249: Generate CPE for Firefox Developer Edition on macOS - nulmete: Support custom host vitals in host name templates (#49586) - GrayW: Update

private_network_integrations

flag and changelog entry (#49726) - noahtalerman: Update host vitals handling on ABM re-enrollment (#49585) - noahtalerman: Downgrade guide: Rename (#49307) - MagnusHJensen: Fix resend button not showing on keyboard navigation in OS settings modal (#4... - nulmete: Stop the delete host endpoint from revealing out-of-fleet host existence (#49... - georgekarrv: Fix 500 on Apple MDM enroll when host has no DEP assignment (#47963) (#49623) - getvictor: Added redirect_uri validation for Windows TOS endpoint. (#49699) - thisisjoegrant: Update navigation to Configuration profiles in Fleet (#49357) - fleet-release: Update Fleet-maintained apps (#49732) - karmine05: Add guide for removing unwanted peripheral software (#49681) - dantecatalfamo: Clarify which OS supports OS Updates (#49716) - Leanngove: Fix Add API-only user > Specific API endpoints table search (#49613) - JordanMontgomery: Merge latest fleet-desktop-macos changes from upstream and bump version to v1... - dantecatalfamo: Gitops mode disables android MDM connect and turn off buttons (#49685)

- sharon-fdm: Add fleetd release candidate to the sprint train-timetable (#48150) - kc9wwh: Update FleetDM manifest and MSI URLs to stable version (#49753) - melpike: [Route] Add route for MDM enrollment guide (#48658) - karmine05: Revise article on detecting and removing unwanted software (#49755) - nulmete: Allow bypassing network blocking in production via config (#49747) - juan-fdz-hawa: Harden password reset token handling - allenhouchins: Add article: Build your own Linux self-service with script-only packages (#49... - MagnusHJensen: trim MDM SSO whitespace in GitOps and API (#49378) - noahtalerman: New requests triage (#49735) - MagnusHJensen: log command UUIDs for fleetd and bootstrap in DEP release flow (#49754) - MagnusHJensen: Release from AB backend support (#49680) - eashaw: Website: Update logging in register-one-fleet-instance-using-vpp action (#49764) - getvictor: Reverting printableCharacters SCEP validation (#49758) - allenhouchins: Add Windows FMAs (letter H): 5 apps (#49478) - spalmesano0: Add Set time and date automatically config profile (#49468) - georgekarrv: Adding milestone release calendar sync workflow (#48593) - getvictor: Flag to bypass end user auth (#49683) - allenhouchins: Add Box Tools Fleet-maintained app for Windows and macOS (#49779) - eashaw: Website: Update license verification logging in register-one-fleet-instance-u... - allenhouchins: Add Podman Desktop Fleet-maintained app for Windows (#49790) - allenhouchins: Add Airtable Fleet-maintained app for Windows (#49795) - spalmesano0: FAQ update 2026-06 (#47777) - rderewianko: Updating SSO Pages for clarity (#46474) - noahtalerman: Move "Install self-service software" endpoint to public REST API docs (#49618) - MagnusHJensen: Support release device from AB in the frontend (#49748) - juan-fdz-hawa: Normalize login responses for MFA-enabled accounts - juan-fdz-hawa: Fix label update consistency issue - juan-fdz-hawa: Emit created/deleted activities for setup experience scripts - kitzy: Update migration documentation to include Managed Migration Assistant details... - spalmesano0: Clear button styles (#49292) - juan-fdz-hawa: Fix test failures by avoiding mutating shared state - dantecatalfamo: Make MFA token redemption atomic to prevent multiple sessions - RachelElysia: Fleet UI: Searchable fleets dropdown with add-fleet affordance (#49690) - sharon-fdm: Enforce API-only endpoint restrictions on chart routes (#49477) - RachelElysia: Fleet UI: Fix TS errors from removed button variants (#49828) - noahtalerman: Quarterly roadmap blog post (#48440) - cdcme: Add clear error for Firefox / Firefox ESR conflict (#49714) - getvictor: Improved the performance of the configuration profiles status summary (#48873) - getvictor: Updated loadtest from recent Windows run. (#49832) - MagnusHJensen: Added danger variant to checkbox (#49806) - MagnusHJensen: test case and doc to ensure bootstrap package comes before profiles (#49808) - nulmete: Bump websocket-driver to 0.7.5 in website/ (CVE-2026-54466) (#49575) - noahtalerman: Collapse fast draft and full draft => drafting & bring back user story review... Read more: https://github.com/fleetdm/fleet/commits/main