🏗️ New commits pushed to Fleet: - getvictor: Disable APM in loadtest for performance (#53107) - noahtalerman: Fix missing underline indicator on Hosts table Agent column tooltip (#52960) - lucasmrod: Fix color in output breaking failure detection for Slack message (#53114) - marko-lisica: Add guidance for converting unmanaged iOS/iPadOS apps to managed (#52922) - ShreyashAgare26: Fix horizontal scrollbar on Labels table for read-only roles (#52879) - raju249: Keep internal Apple errors out of the host-delete refusal message (#53118) - fleet-release: Update Fleet-maintained apps (#53121) - allenhouchins: Bump Linux Claude Desktop patch policy to 1.52386.6 (#53128) - lucasmrod: Add

--cpu-quota

flag to set systemd's

CPUQuota

for fleetd on Linux (#53069) - fleet-release: Update Fleet-maintained apps (#53133) - lucasmrod: Build Fleet Desktop for Linux without the Docker image (#53124) - lucasmrod: Bump macadmins/osquery-extension to v1.5.4 (#53119) - RachelElysia: Fleet UI: Auto updates indicator app-wide (#52132) - tux234: Add policies section to CrowdStrike deployment guide (#52864) - raju249: Revert "Show manual BYOD re-enroll instructions for manual BYOD hosts" (#53138) - snowyeline: Add R as a macOS Fleet-maintained app (#52360) - allenhouchins: Record the per-user/SYSTEM-context FMA findings in the new-fma skill (#52030) - allenhouchins: Bump Claude for Windows FMA to 1.52386.6 and freeze its input (#53134) - getvictor: Handle BitLocker boot protector missing (#52877) - allenhouchins: Fix per-user install context for 16 Windows Fleet-maintained apps (batch 2) (... - lucasmrod: Release fleetd v1.61.0 (#53150) - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#53156) - allenhouchins: Add Orion as a macOS Fleet-maintained app (#53172) - robinedev: Revise article title for GnuPG vulnerability (#53170) - harrisonravazzolo: Update bootstrap_package URL requirements (#52901) - Leanngove: Show disabled Resend for Android config profiles, fix stuck Android cert rese... - noahtalerman: Border-radius is 8px for lists, cards, and tables (#52679) - kilo-code-bot[bot]: Add 'Why short emails?' section to why-this-way handbook (#52933) - Leanngove: Remove redundant "Enrollment instructions" sub-header from Add hosts modal (#... - mikermcneil: Delete handbook/marketing/fleetchampions.md (#53207) - mikermcneil: Handbook search is now AI search (well it will be) (#53208) - mikermcneil: No more AI writing like this. (#53209) - eashaw: Website: Update article category page sidebar (#53212) - allenhouchins: Add CrowdStrike and SCCM client status reports to the standard query library ... - fleet-release: Update Fleet-maintained apps (#53210) - getvictor: Updated copy for Windows pending hosts (#53202) - eashaw: Website: update configuration generator, add testing script and helper. (#53219) - irenareedy: Update testimonials.yml (#52743) - claude[bot]: Link Fleet Hardware Tiers doc from Equipment handbook section (#52893) - kilo-code-bot[bot]: Add 'Localize content' responsibility to marketing handbook (#52690) - juan-fdz-hawa: Fix Software page navigating to a fleet ID of -1 - claude[bot]: Comment out Customer Support Engineer open position (#53230) - MagnusHJensen: expand env var when parsing for profile->name lookup to avoid parsing failure... - Dhvanit41: Name a renamed premium field by the key the caller sent (#53224) - raju249: Cap each APNs push cron run at 10 minutes (#53227) - sharon-fdm: Fix JIT provisioning activity copy to use passive voice (#52681) - noahtalerman: Fix misplaced "Last opened" column header tooltip (#52988) - fleet-release: Update Fleet-maintained apps (#53231) - allenhouchins: Update Evernote maintained app to 11.34.8 (#53238) - allenhouchins: Add article: Fleet joins Anthropic's Project Glasswing (#53240) - Dhvanit41: Fix flaky TestErrorBodyIsBoundedBeforeReading (#53237)

- noahtalerman: Update reports help text and empty state copy: Reports are collected at a fix... - RachelElysia: Fleet UI: FMA icon falls back to default when the raster request fails (#53239) - cdcme: Keep BYOD iDevice inventory managed-only (#53028) - cdcme: Stop re-downloading hashless FMAs (#53126) - nonpunctual: Include script for printer configuration from CSV (#51881) - ArendPeter: Fix typo in instructions for blog file creation (#53258) - lucasmrod: Ingest pacman package versions without epoch and with release split out (#53268) - cdcme: Fix generate-gitops setup experience selections for script packages (#52774) - juan-fdz-hawa: Add identity verification controls for certificate requests - noahtalerman: Docs/guides: Clarify Okta and NDES have same config surface b/c Okta using ND... - fleet-release: Update Fleet-maintained apps (#53283) - eashaw: Website: replace handbook search, update searchbar styles (#53281) - melpike: Add Safari helper text to iOS/iPadOS enroll link (#53290) - lukeheath: Regenerate schema.sql for new integrations app config fields (#53294) - noahtalerman: Update macOS supported version from 14 to 15 (#53184) - allenhouchins: Add ARM64 Firefox Developer Edition and Firefox Nightly Windows FMAs (#52964) - ireedy: Fix broken link in why-this-way.md (#53228) - raju249: Add nullable command_uuid to host_mdm_commands (#53313) - JordanMontgomery: Improve SCEP logging/responses on client errors (#53276) - raju249: Allow filtering hosts by platform label and disk encryption status together (... - nulmete: Stop the transfer hosts endpoint from revealing out-of-fleet host existence (... - raju249: Apple MDM Get Token: UI for default AB token selection (#53111) - adriant172: Update security.md (#53306) - MagnusHJensen: harden sso desktop gate (#53125) - MagnusHJensen: wait 5 seconds before refetching host details on apns ping (#53311) - cdcme: Sort software by display name (#53174) - allenhouchins: Add Linux OS up-to-date policy to Workstations (dogfood) (#53292) - harrisonravazzolo: add

ai_tools

query to DEX pack (#53328) - nulmete: Match host status and label filter dropdown heights (#53326) - kc9wwh: Add sentinelone fleetd table (#52190) - harrisonravazzolo: Modify DEX query (#53332) - MagnusHJensen: tooltip menu portal fix (#53327) - allenhouchins: Add article: The power of collaboration (Privileges audit trail via privilege... - cdcme: Lock out network users during Linux wipe (#53131) - lukeheath: Return a uniform error response when HTTP message signature verification fail... - lucasmrod: Add Fleet server Network RX/TX to load test compare metrics (#52253) - raju249: Match the disk encryption and bootstrap package filter dropdowns to the share... - raju249: Set and clear the default AB token via API and GitOps (#52912) - robinedev: Update article title for FFmpeg vulnerabilities (#53337) - spalmesano0: Use

path

for a single file (#53251) - dependabot[bot]: Bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /tools/terraform (#49947) - dantecatalfamo: Stop rendering a fabricated response for MDM commands with no result (#53187) - dantecatalfamo: Print Android MDM command payloads and results as JSON in fleetctl (#53246) - eashaw: Website: add script to generate newsletter email templates, add ability to se... - JordanMontgomery: Fix filevault messaging(#53222) (#53282) - eashaw: Website: update search (#53349) - fleet-release: Update Fleet-maintained apps (#53344) - getvictor: Added support for end users to create their own BitLocker startup PIN (#53095) - juan-fdz-hawa: Fix SCIM rename delete on MySQL 8.4+ - fleet-release: Update Fleet-maintained apps (#53352) - lucasmrod: Fix flaky test

TestDefaultRunNsdiag

(#53364) - RachelElysia: Mobile: Return accurate online/offline status for iOS/iPadOS/Android hosts (#... - RachelElysia: Fleet UI: Host details > Software > Library skipped installs show as "Patch s...

- eashaw: Website: Update homepage announcement banner (#53372) - noahtalerman: Fix missing space before "(self service)" in host activity feed (#53359) - dantecatalfamo: Reject Android commands that cannot run on a personally-owned work profile (#... - fleet-release: Update Fleet-maintained apps (#53373) - eashaw: Website: Update configuration profile generator tests (#53358) - MicahParks: Fix jwkset goroutine leak (#52628) - fleet-release: Update Fleet-maintained apps (#53400) - spalmesano0: Add comment explaining why we run the script this way (#53379) - spalmesano0: Add DDM profile to defer Golden Gate (#53392) - raju249: Record command UUIDs on refetch tracking rows and match them on ack (#53314) - RachelElysia: Fleet UI: Show online-status history on host details page (#52483) - fleet-release: Update Fleet-maintained apps (#53412) - claude[bot]: Remove software updates policy from workstations team (dogfood GitOps) (#53421) - kilo-code-bot[bot]: Move Solutions Consultant content from IT team page to Sales team page (#53418) - raju249: Clean up host MDM command tracking rows by queue state instead of age (#53405) - allenhouchins: Bump Linux Claude Desktop patch policy to 2.110.1 (#53420) - dantecatalfamo: Enforce the no-wipe-on-personally-owned rule on the Android custom command pa... - nulmete: Keep manually mapped IdP user on MDM re-authentication (#53367) - noahtalerman: Product maturity: "Complete" for Windows by end of Q1 2027 (#53346) - JordanMontgomery: One time enroll secrets(1/3): Migration (#53158) - fleet-release: Update Fleet-maintained apps (#53419) - allenhouchins: Docker Desktop macOS FMA: stop rewriting Docker's CLI symlinks so updates don... - spalmesano0: Update the ChatGPT app ID (#53429) - noahtalerman: Revise product design review task description (#53434) - getvictor: Fix BitLocker encrypting status (#53430) - ksykulev: Android custom command a number of fixes (#53223) - dantecatalfamo: Pretty-print JSON in the MDM command details modal (#53380) - allenhouchins: Add Pinterest case study (#53422) - eashaw: Website: update deliver newsletter emails action (#53447) - JordanMontgomery: One time enroll secrets(2/3): backend (#53166) - jbelbo: Populate IdP host vitals for Entra-joined agent-only Windows hosts (#53164) - getvictor: Added fleetd support for end users to create BitLocker PIN (#53277) - allenhouchins: Add three guides for deploying Socket Firewall with Fleet (#53433) - fleet-release: Update Fleet-maintained apps (#53456) - lukeheath: Verify enroll secret before other checks in Android enrollment token endpoint... - noahtalerman: Clarify Platform SSO (PSSO) is Mac-only on software management page (#53030) - jp-cpe: [Update documentation] - Clarify Okta FastPass behavior during enrollment (#5... - allenhouchins: Add NVIDIA Sync as a macOS Fleet-maintained app (#53476) - claude[bot]: Add ARM/x86 labels for Linux workstations (#53477) - GrayW: Update CrowdStrike deployment article with .exe logging (#53027) - GrayW: Update fleet-maintained-apps.md (#53409) - GrayW: Update connect-end-user-to-wifi-with-certificate.md (#53129) - Dhvanit41: Test that DecodeBody endpoints return 413 for oversized bodies (#53406) - adriant172: Update Customer Success README.md (#53485) - karmine05: Add ChromeOS visibility gaps to Software inventory guide (#53448) - MagnusHJensen: always show MDM turn on emtpy state, even with GitOps mode (#53484) - noahtalerman: Deploy Hydrant/EST certs via script-only package (#53211) - noahtalerman: Fix missing .md extension for product-maturity-assessment reviewer config (#5... Read more: https://github.com/fleetdm/fleet/commits/main