🏗️ New commits pushed to Fleet: - allenhouchins: Bump Linux Claude Desktop patch policy to 2.2553.1 (#53504) - lukeheath: Bump google.golang.org/grpc to v1.83.2 in tools/terraform (#53507) - mike-j-thomas: Rename leave-behind deck PDF and update handbook link (#53491) - getvictor: BitLocker PIN frontend (#53322) - allenhouchins: Bump Zoom Rooms FMA (custom-tap) to 7.1.7.13891 (#53510) - fleet-release: Update Fleet-maintained apps (#53515) - nulmete: Keep role text next to API endpoint count in users table (#53519) - kilo-code-bot[bot]: Add 'Monitor the #help-marketing Slack channel' responsibility to Marketing h... - jkatz01: Filter VPP apps by title id as well as adam id in filterVPPAppsByLabel (#53385) - jkatz01: Update VPP command uuid in setup_experience_status_results for retries (#53295) - lukeheath: Remove #51896 entry from the 4.91.1 changelog section (#53550) - jbelbo: Order Windows MDM commands by insert order (#53353) - melpike: Update setup-experience.md with account creation details (#53553) - eashaw: Website: Update configuration generator (#53530) - mike-j-thomas: Restyle searchbar-submit button (#53492) - mike-j-thomas: Add Reed College quote section to device management landing page (#53497) - mike-j-thomas: Match software-management logo grid to endpoint-governance (#53493) - eashaw: Website: fix bug in send-template-email helper (#53567) - fleet-release: Update Fleet-maintained apps (#53568) - fleet-release: Update Fleet-maintained apps (#53569) - allenhouchins: Unfreeze Logi Options+ (darwin) (#53578) - fleet-release: Update Fleet-maintained apps (#53576) - fleet-release: Update Fleet-maintained apps (#53587) - MagnusHJensen: block modal and error in API for mdm not turned on when editing profiles (#53... - kilo-code-bot[bot]: Clear "Recovery Lock password" tooltip copy for pending and failed states (#4... - lucasmrod: Update reports cap to allow one result per host (#53122) - JordanMontgomery: One time enroll secrets(3/3): Frontend (#53167) - jbelbo: Clean up stale Windows MDM enrollments hourly (#53506) - getvictor: Drive the Create PIN modal off the page's query, and type device-only fields ... - MagnusHJensen: add query param for allowing fallback to serial for archived keys + require g... - fleet-release: Update Fleet-maintained apps (#53596) - juan-fdz-hawa: Software inventory: Collect hashes for homebrew - karmine05: Rename Software inventory guide to software-inventory-reference (#53614) - juan-fdz-hawa: Fix blank software rows for apps with an invisible display name - MagnusHJensen: stop sending AccountConfiguration for AB migrations (#53483) - fleet-release: Update Fleet-maintained apps (#53616) - noahtalerman: Release article: Fleet 4.92.0 (#52938) - lucasmrod: Fix orbit downgrade then upgrade to same version in Windows (#52761) - getvictor: Upgrade OpenTelemetry stack to 1.46.0 / log 0.22.0 (#53610) - rachaelshaw: Preview of v4.92.0 doc changes (#50478) - lukeheath: Adding changes for Fleet v4.92.0 to main (#52270) (#53565) - irenareedy: Update fleet-4.92.0.md (#53629) - juan-fdz-hawa: Added go binaries and their vulnerabilities to software inventory - eashaw: Website: Update prompt used to generate slugs for Fleet Premium trial instanc... - kc9wwh: Enhance documentation on IdP user mapping and enrollment (#53634) - nulmete: Scope SAML AllowIDPInitiated to unsolicited logins (#53600) - lukeheath: Website: Add profile generator test case for Bookstore access (#53527) - mikermcneil: Website: Add redirect for backwards compatibility of bookmarks/links … (#53636) - irenareedy: Update fleet-at-oktane-2026.md (#53643) - noahtalerman: Clarify how to triage new requests (#53415) - fleet-release: Update Fleet-maintained apps (#53621) - ireedy: Update README.md (#53648) - lukeheath: Check out the release tag in release-helm workflow (#53669) - fleet-release: Update Fleet-maintained apps (#53666)

- RachelElysia: Fleet UI: Update Hosts list Status copy to account for mobile hosts (#53673) - RachelElysia: Fleet UI: Border radius is 8px for all cards (#53657) - spalmesano0: Fix customer support SLA link (#53664) - kilo-code-bot[bot]: Fix os_version arch column description (#53397) - noahtalerman: Document that GitOps-only config fields also affect other fleet/config endpoi... - noahtalerman: Fix broken anchor links (#53548) - tux234: Docs: use preferred CERTIFICATE_RENEWAL_ID variable in SCEP guides (#49829) - AdamBaali: Guides: clarify Windows MDM tenant vs per-user licensing (#53271) - karmine05: Handbook: link software types in Supply Chain goal to software inventory refe... - MagnusHJensen: update entra PSSO with Simplified PSSO docs (#53598) - raju249: Add nano_ table cleanup indexes (#53599) - MagnusHJensen: fix collect metrics timestamp calculation + add mock APNS error log query (#5... - fleet-release: Update Fleet-maintained apps (#53713) - juan-fdz-hawa: Fix silent truncation of oversized NVD feeds in CVE generation - RachelElysia: Fleet UI: Reinstall button no longer shifts adjacent installer action (#53620) - raju249: Add Apple MDM command cleanup config knobs and retention classes (#53607) - WaveBirdDash: removed

!

logic and pipe to

grep -q

from gitops.sh (fixes SC2251, SC2337)... - nulmete: Website: add support for third-party integration usage statistics (#53516) - JordanMontgomery: Renumber migrations (#53735) - karmine05: docs: split AI tools coverage into its own section (#53733) - hollidayn: Update 📜 Fleet Subscription Terms.md (#53377) - allenhouchins: Add Connect Fonts (Monotype Connect) as a Windows Fleet-maintained app (#53325) - getvictor: Improved performance of filtering the hosts list by OS settings status on Win... - noahtalerman: Activity: Fleet icon for dark mode (#53687) - getvictor: Updated otelmux library. (#53680) - JordanMontgomery: Make one time enroll secrets free (#53743) - Leanngove: Show Android enrollment instructions instead of Apple MDM error (#53298) - terry-kwok-code: Update Quality Assurance team member list (#53732) - lukeheath: Add BugBunny to AI code review options in engineering handbook (#53759) - robinedev: Update newsletter-2026-09.md author (#53556) - lucasmrod: Allow technicians to delete hosts (#53719) - lucasmrod: Prevent hosts from deleting own manual labels (#53746) - andreasn-work: Updating stat (#53188) - lucasmrod: Fix drift of osquery schema for fleet-mcp (#53763) - jkatz01: Regenerate FMA reference files for 51577 migration (#53721) - fleet-release: Update Fleet-maintained apps (#53740) - Dhvanit41: Return an error when refetching an Android host (#51119) - sjawhar: Support credentialProviderPolicy in Android app configuration (#51020) - getvictor: ai_tools: fixing misleading claims about socket connections. (#53592) - allenhouchins: Add Okta Verify for Linux to Workstations (#53783) - allenhouchins: Add articles: Chrome's seventh 2026 zero-day and macOS 27 dropping Intel Mac ... - allenhouchins: Set app icon for Okta Verify for Linux (#53807) - MagnusHJensen: fix max endpoint overwrite (#53706) - raju249: Remove the deprecated Apple command results endpoint (#53411) - MagnusHJensen: MOP: Migration (#53714) - raju249: Add persisted cursor state for the Apple MDM command cleanup (#53699) - noahtalerman: Remove product design ritual (#53823) - allenhouchins: Bump Linux Claude Desktop patch policy to 2.2553.13 (#53778) - allenhouchins: Unfreeze Adobe Acrobat Pro (darwin) (#53350) - allenhouchins: Update Evernote macOS FMA to version 11.35.6 (#53722) - allenhouchins: Keep Go-http-client token in FMA installer User-Agent (#53828) - allenhouchins: Add article: Chrome 153 starts a two-week release cycle, and Google says most... - allenhouchins: Add article: iOS 27 fixes 126 flaws, macOS 27 Golden Gate fixes 210, and most...

- eashaw: Website: Add mocha tests for configuration profile generator, scripts to gene... - github-actions[bot]: Update versions of fleetd components in Fleet's TUF [automated] (#53837) - melpike: Refine Windows MDM setup instructions (#53253) - fleet-release: Fleet-maintained app staged updates (#53818) - Leanngove: Update confirmation process for customer requests (#53764) - allenhouchins: Set Okta Verify OrgUrl on Linux workstations (#53838) - georgekarrv: Add notify before patching policies (#53502) - allenhouchins: Add article: Nearly half of companies caught an AI agent doing something no o... - cdcme: merge main - cdcme: merge main - allenhouchins: Bump Linux Claude Desktop patch policy to 2.7032.0 (#53831) - RachelElysia: Fleet UI: Scope multi-title notify rows to the current policy (#53775) - allenhouchins: Update article title for consistency (#53844) - allenhouchins: Add article: Spain just logged its first data breach with no human at the key... - irenareedy: Update fleet-at-oktane-2026.md (#53853) - allenhouchins: Fix dogfood patch-when-closed policies: set

install_software: true

(#53849) - xpkoala: Fix load test metrics collection bugs and improve run comparison (#50468) - jakestenger: Add fleetd proxy installer build scripts to solutions (#53860) - kilo-code-bot[bot]: Add testimonial from Jonathan Keyes (#53309) - claude[bot]: Add Softchoice logo to partners page (#53751) - mikermcneil: Handbook: "Update competitor database" (#51730) - fleet-release: Update Fleet-maintained apps (#53841) - allenhouchins: Website: replace ISO 27001 coming-soon footer badge with certified badge (#53... - lucasmrod: Bump create pull request v7 (#53854) - Leanngove: Hide QR code for company-owned Android enrollment (#53857) - cdcme: Renumber migrations (#53864) - kilo-code-bot[bot]: Remove Pinterest case study from website (#53868) - ksykulev: Android zero touch enrollment backend (#52840) - AndreyKizimenko: Update release QA template with new SCEP options (#53880) - fleet-release: Update Fleet-maintained apps (#53865) - allenhouchins: Add Flycut as a macOS FMA (#53874) - cdcme: Strip trailing slashes from FLEET_URL in the GitOps CI templates (#53843) - jkatz01: Notify before patching - differentiate between patch policy types in install ... - ShreyashAgare26: Fleet UI: Keep upload list corners rounded while a row is hovered (#53586) - noahtalerman: Use existing script to generate schema for the website and the MCP server (#5... - jbelbo: Clean up Windows MDM command history hourly (#53662) - lukeheath: Add ai-profile-test skill for proposing profile generator test cases (#53518) - fleet-release: Update Fleet-maintained apps (#53929) - raju249: Add hourly cleanup of inactive Apple MDM commands (#53702) - rajendrachavan: Expand linux platform filter in chart host filter (#52990) - raju249: Add time-based retention sweeps to the Apple MDM command cleanup (#53813) - lucasmrod: Add

ubuntu-20.04

and remove installer from docker image (#53949) - noahtalerman: Okta Verify on Windows guide: recommend static SCEP, note dynamic support (#5... - fiws: Add Vorssaint (macOS) to Fleet-maintained apps (#53945) - fleet-release: Update Fleet-maintained apps (#53947) Read more: https://github.com/fleetdm/fleet/commits/main