🏗️ New commits pushed to Fleet: - getvictor: Fixed slow migration. (#50992) - cdcme: Move orbit changelog entries for #50114 and #50996 into orbit/changes (#50999) - rachaelshaw: Host endpoints: Show brief description + URL before warnings/notes (#50897) - lukeheath: Fix malformed JSON examples and status lines in REST API docs (#50998) - Leanngove: Update REST API docs to explain why Wipe is free for Android (#50650) - GuillaumeRoss: Docs: recommend scoping the Vanta API-only user to specific endpoints (#50927) - zayhanlon: Add Infrastructure Engineer position to open positions (#50980) - raju249: Show the profile detail on a verified profile's tooltip (#51027) - juan-fdz-hawa: Validate NDES credentials when only the username or password changes - getvictor: Fixed Windows config profile not deleted properly (#51005) - MagnusHJensen: update DDM asset auth error (#50972) - RachelElysia: Fleet UI: Fix undersized icons on default-size buttons (#51015) - raju249: Don't let Turn off MDM run twice on the same host (#50858) - raju249: Add in-house app setup experience schema (#51029) - allenhouchins: Fix .NET runtime winget ingestion after upstream Scope flip (#51022) - getvictor: Windows Autopilot pending hosts foundations and configs (#50727) - sharon-fdm: Fix disabled-state bypass for host-targeted and team-targeted packs (#50971) - juan-fdz-hawa: Fix 5XXs on software install endpoints from software row locking - sharon-fdm: Add Windows and macOS MDM enrollment count metrics to Datadog (#50977) - allenhouchins: Fix Worksheet Crafter homebrew ingestion after upstream cask rename (#51040) - MagnusHJensen: always load macos software capture in osquery-perf (#50935) - xpkoala: Add a zero-dependency dashboard for visualizing load test metrics runs (#50887) - RachelElysia: Fleet UI: Fix "Advanced options" not expanding for .msix packages (#51043) - JordanMontgomery: Fix RSS protocol feed checker (#51032) - fleet-release: Update Fleet-maintained apps (#51044) - fleet-release: Update Fleet-maintained apps (#51055) - JordanMontgomery: Add osquery-perf Apple MDM profile tracking (#51009) - rachaelshaw: Roadmap preview: Update issue referenced for host vitals labels (#51064) - sharon-fdm: Revert per-team pack config cache (#48702) (#51045) - jkatz01: Support display name for Fleet-maintained apps in GitOps (#50876) - mikermcneil: Website: "Manage your devices" - Update homepage.ejs (#51080) - mikermcneil: Website: Update homepage.ejs - Change hero desc + the kicker in its underdraw... - spalmesano0: Add user channel to example DDM snippet (#50995) - jkatz01: Make generate-gitops use appropriate extension for script filenames (#51073) - cdcme: Fix duplicate App Store app install queueing (#51065) - lukeheath: Fix high Dependabot alerts in tools/upgrade and tools/hangar (#51076) - getvictor: Move Microsoft Graph credential logic to ee/ (#51041) - RachelElysia: Fleet UI: Fix fleets dropdown menu position on Software detail pages (#51074) - jkatz01: Remove byVersion sorting from FMA versions function (#51071) - getvictor: Fixing minor SCEP proxy issues. (#51014) - eashaw: Website: update thrown error in get-one-compliance-status-result (#51110) - fleet-release: Update Fleet-maintained apps (#51111) - allenhouchins: Unfreeze Wins (macOS) (#51068) - allenhouchins: Update Evernote maintained app to 11.29.2 for macOS (#51042) - fleet-release: Update Fleet-maintained apps (#51116) - MagnusHJensen: always run loadtest with --dev (#51121) - RachelElysia: Fleet UI: Add edit button to Software installer rows (#51077) - noahtalerman: "Self service" the noun, doesn't have a hyphen (#51095) - RachelElysia: Software: Fix label color for script fields in advanced options (#51081) - noahtalerman: Host activity UI: Extra space before period (#51114) - MagnusHJensen: Orbit file download stall timeout and 30s context timeout (#50984)

- allenhouchins: Add article: What ChatGPT's new Linux desktop app means for shadow AI on deve... - getvictor: Update migration test guidance for Claude (#51143) - juan-fdz-hawa: Attribute ai_tools Windows rows from ProfileList, not the directory owner - RachelElysia: Fleet UI: Fix self-service reinstall/uninstall stuck disabled after cancellin... - lukeheath: Document fleetdm/security repo in handbook (#51144) - allenhouchins: Update chatgpt-linux-desktop-app-shadow-ai.md (#51150) - fevzisahinler: Fix typo in historical event records deletion note (#51151) - JordanMontgomery: Fix doc to call out ACME endpoint as required (#51154) - getvictor: Clarifying Windows MDM cert location (#51152) - spalmesano0: Add info on location of harware attestation settings (#51149) - nulmete: Bind fleet_id to the target report on schedule endpoints (#51048) - sharon-fdm: ADR-0011: Agent WebSocket transport (#50582) - nulmete: Reject host lists on dynamic labels regardless of length (#51137) - MagnusHJensen: 31312 mock apns server (#51054) - eashaw: Website: Update error handling in get-one-compliance-status-result.js (#51175) - georgekarrv: Fixing qa ticket creation for publish (#51174) - juan-fdz-hawa: Fix ai_tools apps collector matching AI apps by raw substring - MagnusHJensen: Support custom APNs URL in dev mode (#51129) - juan-fdz-hawa: Fix false positive CVEs for JetBrains teamcity-cli installed via Homebrew - allenhouchins: Update homepage bottom ticker to feature/value list (#51087) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#51187) - nulmete: Validate policy scope when ingesting distributed/write results (#51148) - eashaw: Website: update errors returned by update-one-devices-compliance-status (#51182) - eashaw: Website: Update models used in prompt helper, replace OpenAI API requests. (#... - eashaw: Website: add two exits to MS compliance proxy endpoint (#51200) - noahtalerman: Fleet deploys swiftDialog during setup experience and the end user migration ... - kitzy: Link to configuration-profiles-with-AI guide from GitOps article (#50904) - noahtalerman: Remove experimental warning from manually install fleetd (#51019) - fleet-release: Update Fleet-maintained apps (#51206) - lucasmrod: Update changelog for fleetd 1.59.0 release (#51184) - Dhvanit41: Disable end user migration save button while saving (#51213) - marko-lisica: Document how to update apps in iOS kiosk mode (Single App Mode) (#51026) - marko-lisica: Move toast notifications to bottom center (#51224) - MagnusHJensen: always show managed account rotation banners (#51232) - RachelElysia: Fleet UI: Auto-balance tooltip text and drop hand-rolled <br /> wrap hints (#... - MagnusHJensen: return empty list for non supported platforms in DB query (#51230) - github-actions[bot]: Update Orbit CA certs [automated] (#51120) - sharon-fdm: Fix case-variant name bypass for built-in label overwrite (#50974) - RachelElysia: Fleet UI: Fix clipped Vulnerabilities column and empty version state in softw... - eashaw: Website: Update homepage bottom ticker styles (#51245) - dantecatalfamo: Fix Android load testing harness bugs (#51037) - cdcme: Fix misleading local installer store log (#51240) - eashaw: Website: Send android management API metrics to datadog (#51250) - mikermcneil: Website: Homepage bottom CTA: Shorten ticker words, cut back on things (#51256) - juan-fdz-hawa: Show the CA-specific invalid URL error instead of a generic one - juan-fdz-hawa: Harden hosts report CSV export - ds0x: Coverage info for 'Let's get you set up' calls (#51257) - spalmesano0: Add missing articles to Apple MDM setup guide (#51225) - cdcme: Fix host activity queues blocked by stuck app installs (#51197) - eashaw: Website: Update bottom ticker styles on homepage (#51264) - cdcme: Rename skipped install activity flag (#51102)

- georgekarrv: Re-timestamp Backfill/DedupeQueued migrations to match 4.90.1 ordering (#51268) - cacaosteve: Document safari_extensions empty-result gotchas (FDA, users JOIN, App Extensi... - lukeheath: Handbook: update AI code review options (remove Claude, add Qodo) (#51277) - noahtalerman: Add '~3rd-party' label for partner-related bugs (#51283) - kilo-code-bot[bot]: Exclude ~3rd-party bugs from bug KPI report (#51284) - zayhanlon: Add onTargetEarnings to Infra eng (#51248) - kilo-code-bot[bot]: Remove Andrew Mellor and Jorge Falcon from handbook (#51287) - eashaw: Website: Comment out marketing attribution section in CRM helper (#51193) - MagnusHJensen: [API]: Add callout for global config mdm that it's Apple MDM only (#51233) - mike-j-thomas: Add Windows CSP guides to docs further learning list (#51207) - eashaw: Website: update error-handling in update-one-devices-compliance-status (#51294) - fleet-release: Update Fleet-maintained apps (#51304) - fleet-release: Update Fleet-maintained apps (#51305) - allenhouchins: Fix enrollment URL spacing on iOS & iPadOS tab of Add hosts modal (#51196) - fleet-release: Update Fleet-maintained apps (#51319) - allenhouchins: Unfreeze FreeFileSync (darwin) (#51314) - allenhouchins: Unfreeze Worksheet Crafter (darwin) (#51162) - fleet-release: Update Fleet-maintained apps (#51323) - kitzy: Add guides for deploying printers with Fleet (#51167) - fleet-release: Update Fleet-maintained apps (#51328) - MagnusHJensen: Support mock APNS in osquery-perf (#51130) - raju249: Let .ipa apps be selected for iOS/iPadOS setup experience (#51124) - MagnusHJensen: remove extra target text in Apple OS updates (#51344) - Dhvanit41: Fix autofilled inputs rendering white in dark mode (#51221) - lucasmrod: Add VEX CVE exclusions for

fleetdm/fleetctl

(#51348) - eashaw: Website: Track new key events for signups (#51291) - allenhouchins: Add EU & UK GDPR representatives to privacy policy (#51360) - lucasmrod: Add VEX exclusions for fleetdm/wix (#51350) - sjawhar: Sort generate-gitops software by name for stable output (#51181) - ksykulev: Custom android mdm commands (#50728) - rachaelshaw: Clarify which board to uses for feature request triage (#51384) - MagnusHJensen: add nano cert auth index (#51342) - eashaw: Website: update marketing attribution in update-or-create-contact-and-account... - MagnusHJensen: delete host_dep_assignment if apple business is not configured when deleting ... - lucasmrod: Add automation for Go patch releases (#51239) - lucasmrod: Update fleetd TUF versions in documentation (#51379) - noahtalerman: GitOps reference: Clarify

display_name

(#51394) - dependabot[bot]: Bump nanoid from 3.3.17 to 3.3.18 (#51339) - eashaw: Website: collect metrics for android management requests per enterprise ID. (... - lucasmrod: Fix check-go-patch-release workflow: install the new Go version (#51400) - allenhouchins: Fix GeoGebra Classic winget ingestion after upstream scope flip (#51407) - rfairburn: Force rebuild of entire migration order sequence on fix (#51311) - raju249: Tell the end user when their SSO sign-in timed out (#51215) - raju249: Cancel a queued profile removal when the profile is added back (#51346) - fleet-release: Update Fleet-maintained apps (#51410) - fleet-release: Update Fleet-maintained apps (#51412) - raju249: Install in-house apps during iOS/iPadOS setup experience (#51135) - spalmesano0: Add tarball example to note (#51364) - MagnusHJensen: update loadtest with mock apns server (#51136) - juan-fdz-hawa: Fix exclude_any label targeting hiding software from all hosts Read more: https://github.com/fleetdm/fleet/commits/main