🏗️ New commits pushed to Fleet: - noahtalerman: Update sprint review ritual (#50580) - RachelElysia: Fleet UI: Flush Self-service search right without Install all button (#50534) - marko-lisica: Update Fleet server config documentation for local storage (#50489) - eashaw: Website: improve speed of deliver-talk-to-us-form-submission action (#50593) - fleet-release: Update Fleet-maintained apps (#50594) - MagnusHJensen: Update Release from AB modal copy and route back to list hosts on Pending (#5... - dantecatalfamo: Document Android biometric unlock behavior on BYOD work profiles (#50265) - allenhouchins: Update Evernote maintained app to 11.28.2 (#50583) - allenhouchins: Re-add Dell Display and Peripheral Manager Windows FMA, validate on client-OS... - noahtalerman: Rename 'Certificate enrollment' to 'Certificate authorities' (#50535) - georgekarrv: Fix dark-mode contrast of status-filter dropdown selected-value icon (#47581)... - noahtalerman: Update community PR review process (#50601) - ksykulev: Terraform for mock AMAPI for loading testing (#48919) - JordanMontgomery: Fix reliability around osquery-perf MDM enrollment (#49687) - allenhouchins: Document the build-enforced 150-char meta description limit in content skills... - allenhouchins: Fix Steam patch policy comparing an empty bundle_short_version (#50428) - kitzy: Add TeamViewer Host as a Windows Fleet-maintained app (#50553) - jkatz01: Add software installer file size check before upload (#50475) - mikermcneil: Update go-to-market-operations.md (#50467) - AndreyKizimenko: QA: dedicated Windows Autopilot setup experience test + blank enrollment step... - georgekarrv: Fix script/query editor selecting text when scrolling after a single click (#... - georgekarrv: Make dashboard 'Hosts enrolled' platform links keyboard accessible (#48214) (... - sharon-fdm: Add handbook guidance for code review coverage during time off (#50620) - MagnusHJensen: fix asset reference issue on ddm upsert with no change (#50638) - AndreyKizimenko: Hangar: local dev environment — multi-server + SCEP, MDM assets & TUF tabs (#... - lukeheath: Restore "disagree and commit" to company values (#50591) - rachaelshaw: v4.90.0 doc changes (#48141) - noahtalerman: Release article: Fleet 4.90.0 (#50240) - lukeheath: Cherry-pick #49582: Adding changes for Fleet v4.90.0 (#50652) - fleet-release: Update Fleet-maintained apps (#50651) - JordanMontgomery: Update fleet desktop FMA to v1.4.0 (#49910) - GrayW: Create ubuntu and windows healthcheck scripts (#50128) - getvictor: Frontend: Windows managed local account (#50241) - JordanMontgomery: 47865: Update exclude/include all label logic for unknown label status (#50493) - melpike: [Route] Add route for Linux disk encryption guide (#50191) - MagnusHJensen: AULD: Backend OS update cron + variable resolution (#50573) - lucasmrod: Add support for nested Entra groups in IdP vitals (#50469) - kilo-code-bot[bot]: Add export control blockquote to Trust section (#50673) - GrayW: Fixes broken links in 4.90.0 release notes (#50676) - cdcme: Align software installer authorization (#50630) - allenhouchins: Regenerate Fleet Desktop FMA manifests for v1.4.0 (#50674) - Dhvanit41: Fix error handling on the os_versions API endpoint (#49899) - nulmete: Fix policy automations table dropping rows for multi-host automation runs (#5... - allenhouchins: Remove comment on CLI capabilities (#50685) - getvictor: Windows managed local account: design feedback on the Users tab and error too... - MagnusHJensen: support management in osquery-perf DDM and update stats output (#50561) - hmacr: Add FLEET_DEV_SKIP_S3_CONFIG to skip setting up S3 in dev mode (#49868) - Siddhu545: Use EmptyState for configuration profiles empty state #49461 (#49772) - kitzy: Docs: correct GitOps mode label editing behavior and document exceptions (#50... - Leanngove: Add route for manual sync guide (#50693) - mikermcneil: Handbook: Add Meraki deck (#50697)

- RachelElysia: Fleet UI: Fix stretched software table headers on empty refetch (#50613) - kitzy: Document custom host vitals support for Host vitals labels (#50661) - noahtalerman: Remove obsolete links from REST API documentation (#50589) - raju249: Serve custom DDM activations to devices (#50421) - raju249: Support custom DDM activations in GitOps (#50557) - NickBlee: Update deploying-okta-platform-sso-with-fleet.md (#49855) - JordanMontgomery: Tweak manual enroll profile permissions (#50688) - harrisonravazzolo: Fix Google Calendar scheduling over Focus Time and Out of Office events (#50605) - allenhouchins: Dogfood: drop platform prefix from policy names (#50658) - melpike: [Route] Add route for DDM activations learn more page (#50465) - getvictor: Clear the escrowed managed local account password on MDM re-enrollment (#50596) - amr8t: Update README.md (#50695) - noahtalerman: API docs tweak: Run ad hoc live report by host identifier (#50722) - juan-fdz-hawa: Software inventory & vulnerabilities: Add Adobe plugins - dantecatalfamo: Deduplicate Android MDM Pub/Sub deliveries and protect against reordering (#4... - kitzy: Add guide: manage Fleet during a GitOps outage (#50731) - allenhouchins: Fix Genesys Cloud FMA: winget dropped x86, ship x64 MSI (#50742) - dependabot[bot]: Bump brace-expansion in /website (#50453) - MagnusHJensen: show user-scope icon for ios and ipados (#50715) - raju249: Let an edit clear a declaration's activation (#50711) - lucasmrod: Bump out-of-order migrations not included in v4.90.0 (#50690) - nulmete: 40493 webhooks for host activities (#50595) - nulmete: iOS/iPadOS: More host vitals (#50496) - kitzy: Update custom host vitals guide: style cleanup and Host vitals label support ... - cdcme: Fix gofmt formatting in teams_test.go (#50769) - dependabot[bot]: Bump js-yaml from 4.3.0 to 4.3.1 in /tools/fleet-slackbot (#50746) - dependabot[bot]: Bump js-yaml from 4.3.0 to 4.3.1 (#50745) - allenhouchins: Unfreeze XnConvert (macOS) (#50700) - kitzy: Add Visual Studio 2022 (Community/Professional/Enterprise) as Windows FMAs (#... - aliriaz-ops: Update go-to-market-operations.md fix the spelling visable to visible (#50767) - dependabot[bot]: Bump socket.io-parser from 4.2.6 to 4.2.7 in /website (#50504) - eashaw: Website: log number of android enterprise requests in the past minute (#50780) - MagnusHJensen: always update Apple enrollment type correctly (#50689) - MagnusHJensen: improve validation error messages for custom activations (#50753) - terry-kwok-code: Fix typo in Marketing Email field description (#50783) - allenhouchins: Add JetBrains ReSharper as a Windows Fleet-maintained app (#50659) - fleet-release: Update scripts in Fleet-maintained apps (#50756) - kitzy: Add guide: deploy Visual Studio on Windows with Fleet (#50740) - noahtalerman: Add tooltip explaining no Refetch button for Android hosts on Host details pa... - allenhouchins: Add Microsoft Store apps in Windows self-service article and guide (#50637) - andymFleet: 47717 auld UI latest os version (#50571) - RachelElysia: Self-service: "Install all" respects the search query (#50751) - dependabot[bot]: Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#50787) - georgekarrv: Add patch when closed policies (#50726) - cdcme: trigger CI - jkatz01: Fix gofmt in teams_test.go after merge - jkatz01: Merge remote-tracking branch 'origin/main' into feat/39962-patch-when-closed - rrahul-1: Add sortable 'Added to Fleet' column to hosts table (#50098) - dantecatalfamo: Reconcile stuck Android MDM commands via AMAPI operations.get (#50177) - lukeheath: Fix website deploy race: concurrency group never matched on push events (#50806) - juan-fdz-hawa: Check trusted location before from_webstore in chromiumSideloaded - eashaw: Update actions/checkout step in Website related GitHub workflows (#50810) - lucasmrod: Add VEX exclusions for

fleetdm/wix

(#50809)

- getvictor: Fixed team-level BitLocker PIN enforcement never reaching Windows hosts (#50730) - lukeheath: Fix concurrency groups in push-triggered workflows so superseded runs cancel ... - dependabot[bot]: Bump dompurify from 3.4.12 to 3.4.13 (#50791) - lucasmrod: Add ADR for ETag in osquery config requests (#50579) - allenhouchins: Renamed "Solutions Consultant, Channel" to "Solutions Consultant" (#50793) - georgekarrv: Support GCS presigned downloads for large packages on GCP (#50479) - cdcme: Merge branch 'main' into feat-49553-gcp-large-packages - fleet-release: Validate all Fleet-maintained apps (#50811) - fleet-release: Update Fleet-maintained apps (#50829) - rfairburn: Add commit and since-commit to migration cleanup tool (#50777) - fleet-release: Update Fleet-maintained apps (#50838) - fleet-release: Update Fleet-maintained apps (#50847) - MagnusHJensen: remove webpack notifier (#50855) - MagnusHJensen: hide turn on MDM banner until details have been fetched (#50859) - raju249: Make custom DDM activations opt-in on the server (#50863) - fleet-release: Update Fleet-maintained apps (#50867) - lucasmrod: Fix invalid JSON payload in TUF root Slack notification (#50874) - noahtalerman: Update limitations and reports for ChromeOS (#50512) - irenareedy: Update fleet-4.89.0.md (#50819) - spalmesano0: Add API endpoint warnings (#47841) - allenhouchins: Fix Docker Desktop macOS FMA not reporting an installed version (#50885) - MagnusHJensen: check local MDM enrollment status before firing MDM migration webhook (#50866) - kitzy: Add guide: build and validate configuration profiles with AI instead of a GUI... - fleet-release: Update Fleet-maintained apps (#50890) - Leanngove: Improve failed install modal copy for Android hosts (#50547) - MagnusHJensen: always check update on ADE with latest configured (#50861) - getvictor: Added issue prioritization to handbook. (#50889) - juan-fdz-hawa: Read real Windows ACLs in ai_tools fsutil.Stat - nonpunctual: Enhance os_version.yml with policy query and notes (#50906) - hmacr: fix: Normalize CRLF to LF endings for scripts & installers (#50840) - eashaw: Website: Update Vanta script error handling (#50928) - raju249: Rename the custom activations setting to mdm.allow_custom_activations (#50879) - JordanMontgomery: Fix label_updated_at reset (#50845) - juan-fdz-hawa: Fix Linux passphrase escrow capturing shell startup output - fleet-release: Update Fleet-maintained apps (#50939) - MagnusHJensen: fix outdated osquery schema (#50936) - noahtalerman: Fix formatting issue in Engineering handbook page (#50873) - nulmete: Stop returning host details to GitOps users from the host by identifier endpo... - RachelElysia: Fleet UI: Align technician empty state with EmptyState styling on configurati... - jkatz01: Fix installer extensions not being saved as lowercase (#50920) - juan-fdz-hawa: Fix santa_allowed and santa_denied returning no results - juan-fdz-hawa: Find per-user and MSIX-packaged AI apps in the ai_tools Windows collector - juan-fdz-hawa: Detect VS Code bundled built-in extensions in ai_tools - xpkoala: Backfill historical load test metrics (4.63–4.85) from the results spreadshee... - nulmete: Filter label spec host membership by the requesting user's teams (#50983) - JordanMontgomery: Fix Apple MDM reconciler resetting cursor too early (#50979) - jbelbo: Add Matías Spinarolli to Software Engineer list in Power to the PC product gr... - lukeheath: Distinguish API-only endpoint-restriction 403s from role-based permission den... Read more: https://github.com/fleetdm/fleet/commits/main