🏗️ New commits pushed to Fleet: - dependabot[bot]: Bump fast-uri from 3.1.2 to 3.1.4 (#49801) - dependabot[bot]: Bump immutable from 5.1.5 to 5.1.9 (#49800) - dependabot[bot]: Bump js-yaml from 4.2.0 to 4.3.0 in /tools/fleet-slackbot (#49956) - jamessorrenti: Update link to Go-To-Market strategy document (#50164) - eashaw: Website: update contact source for workshop requests (#50072) - mostlikelee: Match Windows software with version in name to FMA software title - RachelElysia: Fleet UI: Move Add-entity buttons out of table headers (#50102) - nulmete: Stop leaking live query campaign existence via the websocket results stream (... - noahtalerman: Update Android MDM migration instructions (#50055) - allenhouchins: Remove Dynalist macOS Fleet-maintained app (cask deleted from homebrew-cask) ... - noahtalerman: Fix help text for Apple OS target form (#50221) - fleet-release: Update Fleet-maintained apps (#50216) - juan-fdz-hawa: Moved changes file - fleet-release: Update Fleet-maintained apps (#50229) - georgekarrv: Bound Android device reconciliation pagination loop (#49615) - juan-fdz-hawa: Exclude non-existent host IDs from host transfer activity - juan-fdz-hawa: Fix password reset accepting case-mutated tokens - juan-fdz-hawa: Add apps installed through Windows app store to software inventory - cdcme: Python script-only packages: follow-on QA fixes (#50143) - cdcme: Clarify maintained app download timeout errors (#50104) - cdcme: Propagate errors in macOS FMA install scripts (#50198) - fleet-release: Update Fleet-maintained apps (#50230) - lewisbarajas: Fixed a broken embedded link in the README and replaced it with the c… (#50249) - eashaw: Website: Swap quote on contact page (#50259) - lucasmrod: Fix e2e-agent CI check (#50242) - cdcme: Fix YAML docs link 404 in custom package GitOps callout (slug reversed) (#50267) - cdcme: Fix FMA auto-update keeping the stale install script (#50200) - fleet-release: Regenerate macOS FMA install scripts (#50264) - allenhouchins: Remove Captin software icon (#50277) - fleet-release: Update Fleet-maintained apps (#50278) - fleet-release: Update Fleet-maintained apps (#50279) - eashaw: Website: add /capex-savings page (#50272) - mike-j-thomas: fix: correct tooling stat to match survey data (#50284) - raju249: Add DDM custom activations schema (#50133) - SFriendLee: Added a new Wesley quote per Mike (#48759) - allenhouchins: Add "Let's get you set up" call ownership to GTM operations handbook (#50257) - nulmete: Restrict deleting a fleet to global admins (#50271) - lucasmrod: Remove unused prometheus from main docker compose (#50053) - fleet-release: Update Fleet-maintained apps (#50299) - Happyfield7: Fix Apple built-in label memberships during ADE (#50287) - ireedy: Update wellness budget policy (#50306) - kitzy: Add Gpg4win as a Windows FMA (#50026) - kitzy: Add AOMEI Backupper Standard as a Windows Fleet-maintained app (#50021) - lucasmrod: Add exclusions for libexpat on fleetdm/wix (#50301) - RachelElysia: Frontend: document form validation rules and error copy register (#49041) - spalmesano0: Fix "ID" capitalization (#49130) - noahtalerman: Update link for installing custom app guide (#50194) - allenhouchins: Standardize API key label casing (#48978) - tux234: Configuration profiles guide: document label scoping (#49494) - mike-j-thomas: Website: add press logos to /ai (#50281) - lukeheath: Bump Go and npm dependencies to resolve high-severity code scanning alerts (#... - nulmete: fleet-mcp: align Render blueprint with the deployed service (#50317) - dependabot[bot]: Bump postcss from 8.5.10 to 8.5.23 in /ee/fleetd-chrome (#49906) - lucasmrod: Add 'linux' as platform for labels (#50270) - lukeheath: Fix high-severity CodeQL and Scorecard code scanning alerts (#50333) - dantecatalfamo: Split MDM platform helpers by Android semantics (#50185) - Sampfluger88: Update territories (#50349)

- mikermcneil: Website: Update software-management.ejs so that we mention the 1000+ apps in ... - fleet-release: Update Fleet-maintained apps (#50347) - Sampfluger88: GTM ops SLAs (#50351) - GrayW: Update rest-api.md list hosts targeted in batch script (#50291) - eashaw: Website: update contact source (#50356) - ddribeiro: Delete articles/seamless-mdm-migration.md (#49029) - jkatz01: Add software installer upload/download progress to GitOps runs (#50250) - kitzy: Add Lenovo System Update as a Windows FMA (#50339) - fleet-release: Update Fleet-maintained apps (#50369) - allenhouchins: Unfreeze Keeper Password Manager (macOS) (#50371) - allenhouchins: Unfreeze Logi Options+ (macOS) (#50372) - allenhouchins: Bump frozen Adobe Acrobat Pro (macOS) to installer-delivered 26.001.21691 (#5... - getvictor: Improved software ingestion performance (#50354) - allenhouchins: Unfreeze NVIDIA GeForce NOW (macOS) (#50392) - fleet-release: Update Fleet-maintained apps (#50394) - allenhouchins: Update Evernote macOS version to 11.27.5 (#50395) - lucasmrod: Optimize memory usage in CVE chart cron job (#50385) - fleet-release: Update Fleet-maintained apps (#50406) - kitzy: Add Dante Controller as a macOS FMA (#50378) - kitzy: Add Paint.NET as a Windows Fleet-maintained app (#50340) - kitzy: Add Scribe as a Windows Fleet-maintained app (#50341) - kitzy: Add HandBrake as a Windows FMA (#50352) - kitzy: Add Microsoft .NET Desktop Runtime 10 as a Windows FMA (#50361) - kitzy: Add Microsoft Access Database Engine 2016 Redistributable as a Windows Fleet-... - fleet-release: Update Fleet-maintained apps (#50411) - kitzy: Add Microsoft ODBC Driver 17 for SQL Server as a Windows FMA (#50342) - allenhouchins: Add article: Linux crossed 10% in North America, and your inventory might hav... - juan-fdz-hawa: Base Orbit enrollment end user auth on server policy - juan-fdz-hawa: CIS Benchmarks: Update macOS benchmarks - allenhouchins: Edit image caption in Linux inventory article (#50429) - l-teles: Fix Windows Git FMA patch policy never detecting outdated installs (#50424) - spalmesano0: Show button if there's only one action, instead of an actions dropdown (#48337) - allenhouchins: Add CrystalDiskMark as a Windows FMA (#50415) - getvictor: Add Windows managed local account server flow (#48721) (#49924) - lucasmrod: Add VEX exclusions for fleetdm/wix (#50420) - AnayGarodia: Fix Helm chart duplicate FLEET_SERVER_PRIVATE_KEY env entry (#49546) (#49548) - fleet-release: Update Fleet-maintained apps (#50433) - allenhouchins: Unfreeze Adobe Acrobat Pro (macOS) (#50402) - kitzy: Add Microsoft ODBC Driver 18 for SQL Server as a Windows Fleet-maintained app... - allenhouchins: Treat MSI reboot-required exit codes as success and quote the msiexec log pat... - fleet-release: Update Fleet-maintained apps (#50439) - eashaw: Website: Update logos on contact page (#50368) - getvictor: Add Windows managed local admin account support to fleetd (#50088) - rfairburn: move guardduty to confidential (#49963) - GrayW: Update Reference-Architectures.md for private network refernce (#50423) - noahtalerman: Update what's new from WWDC 2026 w/ Fleet support + Apple IT summit (#49440) - allenhouchins: Add NVDA as a Windows Fleet-maintained app (#50450) - sharon-fdm: Improve Windows profile LocURI content validation (#49715) - dependabot[bot]: Bump brace-expansion from 1.1.16 to 1.1.18 (#50379) - allenhouchins: Defuse Docker Desktop's install-on-quit updater in macOS FMA install script (... - dependabot[bot]: Bump postcss from 8.5.18 to 8.5.23 (#50452) - RachelElysia: Fleet UI: Fix New user form dropdown layout shift (#50444) - RachelElysia: Fleet UI: Button icon padding correction (#50195) - JordanMontgomery: Fix validation on account provisioning page to require secret (#50443) - allenhouchins: Bump Zoom Rooms FMA (custom-tap) to 7.1.5.13403 (#50442) - eashaw: Website: add support for new usage statistics (#50466)

- RachelElysia: Fleet UI: Align toast icon with first line of message (#50449) - lukeheath: Fix broken JSON examples, response docs, and parameter tables in REST API ref... - eashaw: Website: update contact form button (#50477) - allenhouchins: Add QEMU as a Windows Fleet-maintained app (#50471) - allenhouchins: Fix image captions breaking onto multiple lines when they contain links (#50441) - allenhouchins: Remove Gadwin PrintScreen, PrintScreen Pro, and ScreenRecorder FMAs (expired ... - allenhouchins: Upgrade query-generator SQL step to Claude Sonnet 5 (#49187) - MagnusHJensen: Not Now edge case fixes for Apple profiles (#50044) - juan-fdz-hawa: Fix duplicate software inventory entries from v4.76.0 checksum change - lucasmrod: Allow enabling/disabling software inventory per-fleet via the API (#50481) - allenhouchins: Remove Fig FMA (cask removed from Homebrew upstream) (#50483) - marko-lisica: Add

notify

command to Fleet Desktop for patch notification toasts (#50211) - melpike: [Route] Update routes.js (#50472) - juan-fdz-hawa: Trigger software_checksum_migration on startup - juan-fdz-hawa: Add Omarchy as a supported Linux platform - allenhouchins: Fix Gpg4win FMA ingest panic after winget relabeled 5.1.0 as x64 (#50494) - lukeheath: Fix medium-severity code scanning alerts (#50346) - dependabot[bot]: Bump ip-address from 10.2.0 to 10.4.0 in /tools/fleet-slackbot (#50480) - nulmete: Link custom host vitals from the host name template description (#50491) - dantecatalfamo: Bound Google Workspace directory sync pagination (#50092) - lucasmrod: Remove stale Prometheus example config link from reference architectures doc ... - GrayW: Update fleet-server-configuration.md adding allow_private_network (#50422) - dependabot[bot]: Bump hono from 4.12.32 to 4.13.0 in /tools/fleet-slackbot (#50500) - dependabot[bot]: Bump fast-uri from 3.1.4 to 3.1.5 in /tools/fleet-slackbot (#50505) - dependabot[bot]: Bump fast-uri from 3.1.4 to 3.1.5 (#50501) - georgekarrv: adding watch for npm publish to release script (#50093) - sharon-fdm: Update community contributions process for AI-driven workflow (#50258) - lucasmrod: Add lucasmrod to orchestration understanding host vitals (#50492) - spalmesano0: Normalize tags (#48982) - Leanngove: Hide Self-service preview tabs in Edit appearance for Android apps (#50533) - getvictor: Fixed nilaway issues (#50405) - getvictor: Add default fleet for new Windows MDM enrollments (#41787) (#49922) - eashaw: Website: set historical event source (#50546) - fleet-release: Update install script and Fleet-maintained apps (#50499) - raju249: Support custom activations and management declarations for DDM profiles (#50280) - andymFleet: 48093 auld api gitops latest os version (#50213) - MagnusHJensen: AULD: Enrollment insert and backfill osquery query (#50131) - fleet-release: Update Fleet-maintained apps (#50574) - fleet-release: Update Fleet-maintained apps (#50584) Read more: https://github.com/fleetdm/fleet/commits/main