🏗️ New commits pushed to Fleet: - github-actions[bot]: Update Go to 1.26.6 [automated] (#51406) - lukeheath: Remove dependabot QA ticket workflow (#51429) - Dhvanit41: Stop retrying VPP install details on a 404 (#51413) - sharon-fdm: Fix pack config cache to skip caching when label-scoped queries exist (#51046) - MagnusHJensen: add fetch_devices to AB API tool (#51341) - hmacr: fix: return 403/404 instead of 500 when fetching or deleting a nonexistent ce... - allenhouchins: Add article: Detecting the ChainDrop npm worm before it reaches your devices ... - kilo-code-bot[bot]: Handbook: document built-in Slack polls, remove app-request instructions (#51... - kilo-code-bot[bot]: New guide: Driving automations and reports based on available disk space on m... - fleet-release: Update Fleet-maintained apps (#51422) - allenhouchins: Update Evernote (darwin) to 11.30.6 (#51432) - allenhouchins: Add allenhouchins as a docs/solutions maintainer (auto-approval) (#51320) - allenhouchins: Add article: Agentic security is only as good as the device data underneath i... - MagnusHJensen: PARCP: Migration + API layer for resending config profiles via policy automat... - sharon-fdm: Use cache deletion instead of short TTL in pack config tests (#51431) - allenhouchins: Keep FMA custom script comments admin-facing (new-fma skill) (#50805) - lukeheath: Add myself to claude codeowners (#51445) - lukeheath: Add EMs to .claude codeowners (#51447) - lucasmrod: Missing fix in tools (#51435) - lukeheath: Add code comment guidance to Claude project instructions (#51444) - noahtalerman: Review AI generated issues for accuracy (#51453) - allenhouchins: Add article: What Apple's latest security update shows about patch lag across... - lukeheath: Fix high npm Dependabot alerts across all JS lockfiles (#51078) - lukeheath: Enforce API-only endpoint restrictions on /debug/* routes (#49607) - MagnusHJensen: MDMStatusModal: use isFetching over isLoading to always show spinner first (#... - fleet-release: Update Fleet-maintained apps (#51451) - RachelElysia: Fleet UI: Align InfoBanner leading icon with first line of wrapped copy (#51446) - melpike: Fix Clear passcode modal checkbox color mismatch (#51438) - georgekarrv: Adding changes for Fleet v4.90.1 (#51172) - sharon-fdm: Fix enrolled hosts chart including pending hosts in platform counts (#51295) - juan-fdz-hawa: Fix built-in Linux labels missing derived distributions - getvictor: Autopilot sync (#51109) - allenhouchins: Update author information in article (#51477) - allenhouchins: Edit article to remove author details and promotion (#51478) - fleet-release: Update Fleet-maintained apps (#51480) - melpike: [Route] Add route for policy automation resend configuration (#51142) - lucasmrod: Fix 'All hosts' label for osquery-perf hosts (#51481) - marko-lisica: Update yaml-files.md (#51424) - mikermcneil: Docs: Usually see it written differently like semver (rather than SemVer) (#5... - marko-lisica: Clarify package order and update labels in YAML docs (#51420) - Sampfluger88: Update attribution (#51503) - fleet-release: Update Fleet-maintained apps (#51500) - raju249: Verify Apple Business assignment before deleting a host (#51418) - fleet-release: Update Fleet-maintained apps (#51504) - fleet-release: Update Fleet-maintained apps (#51505) - rfairburn: move spend alerts to confidential infra to support private changes (#51515) - mcnahum: Update go-to-market-operations.md (#51518) - fleet-release: Update Fleet-maintained apps (#51526) - noahtalerman: Show

fleetctl generate-gitops

in

fleetctl --help

output (#51487) - fleet-release: Update Fleet-maintained apps (#51529) - GrayW: Update driving-automations-and-reports-based-on-available-disk-space-on-macos... - spalmesano0: Add install automation detail to GitOps section (#51376) - melpike: Match macOS enroll modal's company-owned label to iOS/iPadOS and Android (#51...

- lucasmrod: Deprecate

fleetdm/bomutils

(#51349) - JordanMontgomery: Move controls to dedicated tab (#51357) - MagnusHJensen: Policy automation resend config profile trigger (#51469) - headmin: Fix perpetual "Update available" for OneDrive macOS FMA (#51513) - Dhvanit41: Fix typo in engagement note (#51538) - dependabot[bot]: Bump software.sslmate.com/src/go-pkcs12 from 0.7.1 to 0.7.2 (#51403) - nulmete: Fix ActionsDropdown icon-trigger menu overlapping its button (#51494) - fleet-release: Update Fleet-maintained apps (#51543) - juan-fdz-hawa: Allow users to filter the Dashboard by severity (CVSS score) - jakestenger: Document how to hide the Fleet Desktop macOS menu bar icon (#50929) - MagnusHJensen: include mock APNS and Android in update-go automation (#51554) - mattcheston: Fix typo in SFDC campaign existence check handbook section (#51550) - sharon-fdm: Fix fleetd package installs overwriting user-provided osquery.flags (#51483) - juan-fdz-hawa: Bump macadmins extensions (#51533) - lukeheath: Add big-table migration guidance to Claude database rules (#51362) - allenhouchins: Escape cask metadata in Homebrew Fleet-maintained-app script generation (#51324) - sharon-fdm: Handbook: Add security issues as a work item type (#51566) - allenhouchins: Update deprecated GitOps keys in dogfood config (#51568) - fleet-release: Update Fleet-maintained apps (#51570) - MagnusHJensen: remove lost mode bug from article as it is fixed (#51565) - fleet-release: Update Fleet-maintained apps (#51573) - eashaw: Website: add Endpoint governance page, update site navigation (#51572) - allenhouchins: Update product maturity projections to Q3 2026 – Q4 2027 (#51585) - Leanngove: Move Delete Android Enterprise endpoint to public REST API docs (#51302) - noahtalerman: Who's responsible for each work item showing up on the board? (#51381) - MagnusHJensen: move product groups next to each other (#51354) - nulmete: Only accept query results for queries scheduled for the host (#51361) - lukeheath: Run only a fast Go test tier on draft PRs (#51455) - noahtalerman: Update goals for product groups (#51386) - RachelElysia: Docs: Add frontend test coverage rule + expand testing patterns (#51156) - fleet-release: Update Fleet-maintained apps (#51589) - lukeheath: Restrict dogfood ALB to canonical host (dogfood.fleetdm.com) (#51275) - eashaw: Website: Update endpoint governance page (#51597) - lucasmrod: Render duration log fields with time units instead of raw nanoseconds (#51571) - mikermcneil: Website: Update endpoint-governance.ejs (#51606) - raju249: Add endpoint to cancel pending Apple MDM commands (#51525) - nulmete: Fail closed on exclude-label policy scope when label membership is unknown (#... - lucasmrod: Remove seemingly accidental

__pycache__

push to repository (#51618) - lucasmrod: Fix API endpoint catalog validation in mock-backed tests (unbreak main) (#51616) - github-actions[bot]: Update Go to 1.26.7 [automated] (#51612) - ireedy: Update CODEOWNERS to remove BCTBB (#51289) - fleet-release: Update Fleet-maintained apps (#51624) - lucasmrod: Add VEX exclusions for fleetdm/fleetctl (#51619) - lukeheath: Fix low npm Dependabot alerts: bump @babel/core and esbuild-loader (#51581) - fleet-release: Update Fleet-maintained apps (#51633) - allenhouchins: Unfreeze Webex (darwin) (#51562) - fleet-release: Update Fleet-maintained apps (#51638) - allenhouchins: Add article: three things to know before you renew your current MDM (#51636) - eashaw: Website: Update trial type given to users with a Fleet email. (#51642) - allenhouchins: Update Fleet description for clarity and accuracy (#51645) - fleet-release: Update Fleet-maintained apps (#51643) - sharon-fdm: Disable WSTEP ROBO certificate renewal Fleet does not implement (#51468) - noahtalerman: Product maturity (

~product-maturity

) stories come before other stories (#51... - fleet-release: Update Fleet-maintained apps (#51646)

- sharon-fdm: Fix ACME cert not showing for user-channel profiles (#51297) - eashaw: Website: add additional conversion tracking for sign ups (#51660) - mikermcneil: Website: Update device-management.ejs - make kicker consistent (#51663) - dantecatalfamo: Clear state on Android re-enrollment (#51290) - cdcme: Require a screenshot or recording on frontend PRs (#51244) - eashaw: Website: remove route for old self-service action, add exit to webhooks. (#51... - eashaw: Website: Update input validation in create-license-key helper. (#51677) - allenhouchins: chown Claude.app to console user so Claude Desktop auto-updates keep working ... - fleet-release: Update Fleet-maintained apps (#51681) - noahtalerman: Stories get links to the Figma "Ready" page (#51201) - raju249: osquery-perf: fetch-to-ack delay for testing MDM command cancellation (#51685) - Dhvanit41: Name the JSON field in the premium license error (#51625) - g-eng-ar: doc: minor syntax fix for terraform.tfvars example (#50037) - sharon-fdm: Fix flaky TestRotator race on cached mtime (#51669) - JordanMontgomery: Disallow bypass_conditional_access on iOS/iPadOS (#51555) - MagnusHJensen: Policy Automation configuration profile UI (#51535) - RachelElysia: Fleet UI: Show Uninstall for script and .tgz packages with an uninstall scrip... - marko-lisica: Update spec-story skill (#51437) - ksykulev: Properly map AMAPI status codes to fleet status codes (#51601) - jkatz01: Retry mysql 1615 errors (#51665) - sharon-fdm: Fix policies Software automation filter including patch policies (#51650) - Brajim20: Add QA tools: released-in script and Claude Code skills index (#49785) - dependabot[bot]: Bump axios from 1.16.1 to 1.18.0 in /tools/fleetctl-npm (#49599) - fleet-release: Update Fleet-maintained apps (#51693) - eashaw: Update placeholder value in build-configuration-profiles-with-ai article (#51... - juan-fdz-hawa: Flush NVD vulnerability matches in bounded chunks to cut vuln cron memory - getvictor: UI for Autopilot pending hosts (#51423) - sharon-fdm: Fix dark mode background color on authentication pages (#51678) - jbelbo: Create la-ia-reescribe-las-descripciones-de-puestos.md (#51699) - lizlubelczyk: Fix grammatical error in warm-up actions description (#51700) - Dhvanit41: Allow uninstalling script packages from macOS hosts (#51695) - raju249: Add UI to cancel pending Apple MDM commands (#51617) - hmacr: Add config support for overriding endpoint max request size (#50823) - ThomasSalomon4: Create ia-reecrit-les-descriptions-de-postes.md (#51567) - RachelElysia: Software: Return 4xx for invalid auto-update window on app_store_app PATCH (#... - allenhouchins: Website: add missing Hawx case study card to /customers (#51710) - fleet-release: Update Fleet-maintained apps (#51711) - allenhouchins: Update Hawx description for clarity (#51720) - sharon-fdm: Fix report description newlines being collapsed - getvictor: Updated Contributing codeowners. (#51724) - rachaelshaw: Update note about Fleet MCP experimental status (#51726) - kilo-code-bot[bot]: Comment out Customer Support Engineer (APAC) open position (#51727) - ksatter: Add FLEET_SECRET variable to GitOps example (#44863) - ksatter: Update encryption passphrase instructions for clarity (#46969) - allenhouchins: Add Inactive user status for users who haven't logged in for 30+ days (#49211) Read more: https://github.com/fleetdm/fleet/commits/main