🏗️ New commits pushed to Fleet: - getvictor: Fixed unreleased Windows cert ingestion perf issue (#49787) - marko-lisica: Update rollback instructions for app versions (#49729) - georgekarrv: Bump migration timestamps after 4.89.2 cherry-picks (#49849) - fleet-release: Update Fleet-maintained apps (#49813) - RachelElysia: Fleet UI: Hide empty host summary card on Free-tier Android hosts (#49848) - fleet-release: Update Fleet-maintained apps (#49857) - noahtalerman: Windows Fleet-maintained apps: Fleet provides machine scope (#49834) - fleet-release: Update Fleet-maintained apps (#49869) - fleet-release: Update Fleet-maintained apps (#49872) - BCTBB: Article with instructions to restore a Fleet database using Fleet terraform (... - fleet-release: Update Fleet-maintained apps (#49873) - fleet-release: Update Fleet-maintained apps (#49874) - raju249: Fix undeletable Apple DDM declarations when allowed types change (#49810) - raju249: Show ABM organization name in edit-fleets success toast (#49877) - nulmete: Stop leaking cross-team software title names via the hosts endpoint (#49638) - fleet-release: Update Fleet-maintained apps (#49886) - MagnusHJensen: don't stop propagation for react-select (#49878) - RachelElysia: Fleet UI: Drop I-beam cursor on non-underlined tooltips (#49859) - mike-j-thomas: Update Road to AI in IT PDF (#49870) - GrayW: Replace dead link for pricing page (#49892) - juan-fdz-hawa: Block host enrollment with empty enroll secrets - fleet-release: Update Fleet-maintained apps (#49891) - RachelElysia: Fleet UI: Handle long fleet names across the Fleets UI (#49216) - JordanMontgomery: Add fleet-desktop-macos release workflow (#49903) - rfairburn: Cleanup an edge case sql error in migration cleanup (#48179) - fleet-release: Update Fleet-maintained apps (#49901) - melpike: [Route] Add route for device and user scope information (#49915) - fleet-release: Update Fleet-maintained apps (#49912) - sharon-fdm: Fix software ingestion lock convoys and unbatched deletes (#49894) - eashaw: Website: (Android proxy) Add deviceNotFound exit to four android proxy endpoi... - fleet-release: Update Fleet-maintained apps (#49919) - eashaw: Website: Update contact form for users who visit the page from "Get a demo" b... - eashaw: Website: replace purple link icon (#49930) - fleet-release: Update Fleet-maintained apps (#49931) - allenhouchins: Add Windows FMAs (letter I): 17 apps (#49923) - allenhouchins: Add Windows 11 hardware readiness report to dogfood GitOps (#49921) - fleet-release: Update Fleet-maintained apps (#49940) - fleet-release: Update Fleet-maintained apps (#49942) - allenhouchins: Use snapshot logging for Windows 11 hardware readiness report (#49943) - fleet-release: Update Fleet-maintained apps (#49946) - fleet-release: Update Fleet-maintained apps (#49952) - fleet-release: Update Fleet-maintained apps (#49954) - JordanMontgomery: Add support for fleet vars in scripts(controls scripts, software scripts/scri... - andymFleet: 47700 abm token invalid errors (#49770) - melpike: Add route for Windows default fleet information (#49898) - melpike: [Route] Add route for IDP account sync information (#49975) - melpike: Align helper text with checkbox/radio labels (#49977) - raju249: Center-align setup experience app icons (#49962) - noahtalerman: Update bug triage (#49775) - irenareedy: Update README.md (#49988) - noahtalerman: Add macOS apps to fleet maintained apps for testing & QA (#49983) - rachaelshaw: Guide: Clarify which policy automations are premium & fleet-level (#49993) - getvictor: Windows SCEP profiles now fail with non-printable chars (#49887) - MagnusHJensen: pass validation for fleets gitops files for DDM assets (#49991) - eashaw: Website: update package.json overrides, update package-lock (#49852) - fleet-release: Update Fleet-maintained apps (#49989) - RachelElysia: Fleet UI: Fix empty button boxes in batch run script modal (#49997)

- georgekarrv: Adding changes for Fleet v4.89.2 (#49702) - lucasmrod: Add exclusions for wix docker image (#49996) - lucasmrod: Add exclusions for released fleetctl docker image (#49994) - lucasmrod: Add VEX exclusions for fleetctl docker image (#49992) - noahtalerman: Document monthly premium usage stats update process (#50009) - noahtalerman: Why macOS managed admin accounts are only created during setup (#50008) - lewisbarajas: Add Lewis Barajas to go-to-market-operations.md (#50018) - Leanngove: Add tooltip explaining missing Refetch button for Android hosts (#50017) - eashaw: Website: Update "Talk to us" form and contact page (#50023) - fleet-release: Update Fleet-maintained apps (#50032) - spalmesano0: Add Apple marketing names to backend, frontend, and an osquery table (#46482) - raju249: Add host_id and host_serial to Apple mdm_enrolled activity (#49969) - lucasmrod: Fix check-doc-gen failing on main: use npm ci and drop extraneous lockfile en... - fleet-release: Update Fleet-maintained apps (#50033) - andymFleet: 47701 abm errors UI (#49896) - raju249: Default setup experience account type to admin when serving team config (#50034) - dependabot[bot]: Bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#49957) - andymFleet: 47713 auld software update assets migration (#50036) - allenhouchins: Remove Nocturnal as a macOS FMA (#50050) - noahtalerman: "Unpacking the why" for each product group (#50052) - kitzy: Add 6 Windows Fleet-maintained apps (#50016) - kitzy: Wire content-style into the fleet-guide-formatting skill and require endmatte... - ckemp19: Update README.md (#49981) - raju249: Add scripts and configuration profiles steps to downgrade guide (#50038) - kilo-code-bot[bot]: Add guide: Speeding up your GitOps runs in Fleet (#46516) - jkatz01: GitOps schema generator and IDE integration (#49717) - allenhouchins: Freeze the macOS Yubikey Manager FMA (#50054) - RachelElysia: Website: Handle unexpected responses from Microsoft's compliance and Graph AP... - lucasmrod: Update

tools/telemetry

(#50043) - lucasmrod: Fix flaky test TestCheckExecRealBinary (#50057) - sharon-fdm: Fix resource exhaustion in MSI metadata parser (#49739) - noahtalerman: Pushed stories: Notify customer success only if

~activation-blocker

or `~cu... - mike-j-thomas: Website: rename "Reporting" pricing feature for clarity (#50035) - noahtalerman: 'Unpacking the why' issues live in inbox on product group boards (#50066) - lucasmrod: Amend Docker Desktop patch policy SQL (#50041) - getvictor: Add Windows admin account config (#49863) - cdcme: Consistent URL/email on-blur validation across forms (#40410 follow-up) (#49932) - eashaw: Website: update primary cta on homepage (#50071) - Leanngove: Clarify "Not supported" on Hosts page by adding tooltip (#49301) - sharon-fdm: Auto-create QA tickets for Dependabot PRs (#48008) - rachaelshaw: #38670 API design: Policy status page (#46791) - juan-fdz-hawa: Add homebrew_outdated table to fleetd - juan-fdz-hawa: Update macOS disk encryption banner copy for ADE-enrolled hosts - RachelElysia: Fleet UI: PR #49292 follow-up — buttons, 8px gaps, focus ring (#50049) - rrahul-1: 48792 fix actions dropdown layout shift (#49430) - rrahul-1: Redirect to software inventory on 404 when switching fleets on title (#48389) - noahtalerman: Low contrast text on dashboard charts (#49651) - allenhouchins: Fix macOS-only copy on two Windows FMA catalog entries (#50111) - allenhouchins: Remove Yubikey Manager as a macOS FMA (#50109) - fleet-release: Update Fleet-maintained apps (#50113) - kitzy: Add Azure Data Studio as a Windows FMA (#50027) - kitzy: Add GNU Privacy Guard as a Windows FMA (#50025) - kitzy: Add Google Earth Pro as a Windows FMA (#50022) - kitzy: Add Logitech Unifying Software as a Windows FMA (#50024) - kitzy: Add Rtools as a Windows FMA (#50028) - GrayW: Update deploying-crowdstrike-with-fleet.md for exe support (#50040)

- raju249: Require Fleet MDM enrollment before escrowing macOS disk encryption key (#50042) - nulmete: Add Android support for custom host vitals (#49696) - MagnusHJensen: Hide Account Provisioning on Fleet free (#50130) - lucasmrod: Scrub device policy responses in Fleet Desktop (#50094) - MagnusHJensen: extra error message checks and correct escaping in error message (#50136) - lukeheath: Prepare to archive fleet-gitops repo (#50134) - jkatz01: Fix gitops not updating FMA installer (#50000) - getvictor: Fix broken gitops-auto-complete build. (#50081) - fleet-release: Update Fleet-maintained apps (#50138) - harrisonravazzolo: Custom windows update article (#49961) - DanFashauer: Fix typo in LinkedIn tracking workflow section (#50151) - fleet-release: Update Fleet-maintained apps (#50150) - lucasmrod: Authorize packs before returning them in query responses (#50148) - GrayW: Update disk_space.yml (#50142) - melpike: Update MDM commands documentation with usage details (#49657) - fleet-release: Update Fleet-maintained apps (#50156) - Leanngove: Update routes.js (#50010) - melpike: Update product-groups.md (#50091) - fleet-release: Update Fleet-maintained apps (#50167) - allenhouchins: Add risk scoring rubric and mitigation/approval requirements to risk manageme... - noahtalerman: Add rachaelshaw (API design DRI) as auto reviewer for usage stasts (#50169) - noahtalerman: Unpacking the why template (#50095) - eashaw: Website: update territory routing for talk to us submissions (#50101) - eashaw: Website: update fallback talk to us meeting link (#50182) - fleet-release: Update Fleet-maintained apps (#50172) - fleet-release: Update Fleet-maintained apps (#50184) - lucasmrod: Add VEX exclusion for fleetctl (#50135) - mike-j-thomas: Website: redesign /support page with unified card grid and testimonial (#50132) - mike-j-thomas: Website: update sales leave-behind deck (#50123) - allenhouchins: Add Hawx case study (#50152) - fleet-release: Update Fleet-maintained apps (#50199) - eashaw: Website: update fleet-leave-behind-deck.pdf (#50206) - MagnusHJensen: fix icon text gap across product (#50209) - dependabot[bot]: Bump axios from 1.16.1 to 1.18.1 in /tools/fleet-slackbot (#49601) - dependabot[bot]: Bump axios from 1.16.1 to 1.18.0 (#49600) - dependabot[bot]: Bump js-yaml from 4.2.0 to 4.3.0 (#49799) - dependabot[bot]: Bump dompurify from 3.4.11 to 3.4.12 (#49798) - dependabot[bot]: Bump body-parser from 2.2.2 to 2.3.0 in /tools/fleet-slackbot (#49721) - dependabot[bot]: Bump hono from 4.12.25 to 4.12.32 in /tools/fleet-slackbot (#49950) - dependabot[bot]: Bump fast-uri from 3.1.2 to 3.1.4 in /tools/fleet-slackbot (#49948) Read more: https://github.com/fleetdm/fleet/commits/main