🏗️ New commits pushed to Fleet: - MagnusHJensen: hide hidden toggle on fleet free device page (#54515) - GrayW: Add example to stuck hosts guidance in setup experience (#53034) - raju249: Report only rejected passwords as bad credentials in Platform SSO registratio... - MagnusHJensen: MOP: add hidden, and self_service fields to profile API endpoints (#54511) - MagnusHJensen: Add empty Package.swift to help LSP indexing (#54770) - JordanMontgomery: Add migration for dynamic DEP tokens (#54639) - lucasmrod: Fix

TestExplainListHostsMobileJoin

failing on MySQL server versions running... - MagnusHJensen: MOP: Gitops (#54772) - RachelElysia: Fleet UI: Consolidate file uploaders and add drag-and-drop support (#54688) - nulmete: Fail the host name right away when the device isn't supervised (#54652) - raju249: Require the ACME CSR key to match the device-attested key (#54769) - lucasmrod: Allow using deb/rpm artifacts for testing osqueryd PRs on linux (#54631) - getvictor: Fixed encoding in MS conditional access (#54700) - fleet-release: Update Fleet-maintained apps (#54779) - RachelElysia: Fleet UI: Disable file drop while uploader is loading (#54781) - RachelElysia: Fleet UI: Add explicit aria-labels to DropdownWrapper call sites (#54640) - lucasmrod: Do not render tested/not tested on the Slack message, use links for contribut... - fleet-release: Update Fleet-maintained apps (#54784) - jbelbo: Replace profile modals with an add/edit page (#54494) - lucasmrod: Release fleetd-chrome 1.3.6 (#54794) - cdcme: Upload large software and bootstrap packages directly to GCS (#54709) - allenhouchins: Add guide and article for syncing Retriever warehouse status to Fleet (#54767) - JordanMontgomery: Add manual profile modification warning (#54701) - allenhouchins: Update fleetd-chrome beta testing steps to use Google Groups (#54815) - lucasmrod: VEX fleetctl for CVE-2026-68494 (#54780) - allenhouchins: Handbook: add warehouse inventory check to the IT page (#54766) - nulmete: Reject empty global role so team admins cannot escalate to global admin (#54798) - JordanMontgomery: Add some test cases and small tweaks to wifi generation (#54567) - getvictor: Refactor SyncML responses (#54710) - getvictor: Add BYPASS_END_USER_AUTH MSI property to fleetd Windows installer (#54492) - noahtalerman: Fix ai_tools identifier column docs for apps and browser extensions (#54539) - nulmete: Fix performance impact styling in activity report modal (#54818) - nulmete: Show 404 page for /device without a device token (#54819) - dantecatalfamo: Redeliver Android profiles after re-enrollment and verify only against the ho... - Dhvanit41: Record Android host re-enrollment and last-seen times (#53307) - noahtalerman: Open Product Designer position (#54800) - Prajwal2246: fix: distinguish script packages in software lists (#53810) - dantecatalfamo: Show company-owned Android hosts as "Off" after Android MDM is turned off (#5... - MrNRod: Add Noel Rodriguez-Lebron to Customer Support Engineer (#54682) - kilo-code-bot[bot]: Website: add Fleet Virtual Summit banner to homepage (#54730) - georgekarrv: Add fleetd release day events to release calendar sync (#53695) - allenhouchins: Add Retriever to the integrations page (#54820) - allenhouchins: Add October 2026 newsletter (#54503) - allenhouchins: Fix typo in October 2026 newsletter (#54851) - ireedy: Handbook: Irena Reedy reports to Allen Houchins (#54828) - mike-j-thomas: Style changes to Fleet virtual summit page (#54852) - mike-j-thomas: Update CTA text (#54854) - JordanMontgomery: One time tokens: one time handout at SSO (#54664) - MagnusHJensen: AMDS: schema (#54855) - raju249: Report FileVault awaiting removal after transfer to a fleet without it (#54790) - raju249: Log activities when enrollment links, replaces, or removes a host's IdP accou... - RachelElysia: Fleet UI: Fix host refetch cycle stacking and auto-restart on tab switch (#54...

- MagnusHJensen: MOP: add deploy dropdown and hidden checkbox to profile page (#54795) - eashaw: Update profile generator test to report a passing status if 95% of cases (#5... - marko-lisica: Use "fleet" instead of "team" in policy automation error messages (#54777) - patrickrgr: Update fleet-desktop.md docs - fleet-release: Update Fleet-maintained apps (#54802) - almenscorner: Update Support Companion icon for macOS FMA (#54181) - allenhouchins: Fix Airtable Windows FMA ingestion (installer arch now x64) (#54864) - allenhouchins: Bump Linux Claude Desktop patch policy to 2.19675.1 (#54868) - fleet-release: Update Fleet-maintained apps (#54867) - allenhouchins: Update Evernote macOS FMA to 11.37.5 (#54870) - cdcme: Skip unchanged scripts on apply (#54837) - Prajwal2246: Fix script timeout duration in run details - cdcme: Skip software cleanups on unchanged apply (#54843) - zayhanlon: Update job titles for speakers in summit article (#54892) - pintomi1989: Update transparency.ejs - Browser history section update (#54829) - hollidayn: Update 📜 Fleet Subscription Terms.md (#54887) - noahtalerman: Steven Palmesano takes over as #g-power-to-pc Product Designer (#54891) - noahtalerman: After user story review... (#54813) - getvictor: Refactoring Win MDM enrollment. (#54762) - lucasmrod: Reduce load on DB writer for supporting ~100k hosts with ~500 ~1h-interval re... - noahtalerman: Clarify error when Fleet can't find the CA at the SCEP URL (#54895) - fleet-release: Update Fleet-maintained apps (#54893) - nulmete: Hide and clean up cleared report results without deleting them in the request... - getvictor: Fix GitOps deadlock in post-apply policy membership cleanup (#54840) - nulmete: Renumber report results migration for 4.93.0 (#54917) - lukeheath: Website: bump brace-expansion and engine.io (#54686) - dependabot[bot]: Bump proxy-addr from 2.0.7 to 2.0.8 in /tools/fleet-slackbot (#54931) - dependabot[bot]: Bump source-map-js from 1.2.1 to 1.2.2 (#54930) - dependabot[bot]: Bump @modelcontextprotocol/sdk from 1.30.0 to 1.31.0 in /tools/fleet-slackbot... - dependabot[bot]: Bump postcss-selector-parser from 7.1.5 to 7.1.6 (#54934) - dependabot[bot]: Bump joi from 17.13.7 to 17.13.8 (#54933) - getvictor: Added deviceid protection for Win MDM enrollment (#54826) - getvictor: Clean up out-of-scope policy membership under async processing (#54919) - allenhouchins: Create all-users Start Menu shortcut for Clockify Windows FMA (#54725) - allenhouchins: Expand wildcard bundle IDs in FMA uninstall quit (#54210) - allenhouchins: Fix Crestron AirMedia Windows FMA open query process name (#54723) - allenhouchins: Add open/patched query verification to the new-fma skill (#54614) - allenhouchins: Remove obsolete WhatsApp FMA version shortener (#54736) - fleet-release: Update Fleet-maintained apps (#54947) - MagnusHJensen: AMDS: challenge check, bounded CSR and cleanup (#54886) - raju249: Keep SCEP renewals going when APNs pushes fail (#54955) - lucasmrod: Fix out of sort memory reading a host's stored report results (#54957) - MagnusHJensen: Opt-in profile test plan fixes (#54958) - fleet-release: Update Fleet-maintained apps (#54967) - getvictor: Fixed enrollments with certs (#54833) - allenhouchins: Bump Linux Claude Desktop patch policy to 2.26454.0 (#54979) - TraiLynne: Update Head of People reference in README.md (#54981) - marko-lisica: Fleet Desktop (macOS): exit 50 when a notification is already displayed, add ... - lucasmrod: Add initial support to NixOS (#54098) - eashaw: Profile generator: add support for 3rd party ADMX profiles (#54936) - GrayW: Update fleet-usage-statistics.md (#54962) - melpike: Update rest-api.md (#54878) - nulmete: Reduce DB load from host report stats and VPP policy automation (#54975) - jkatz01: Set in-house app installs with an MDM error response to failed (#55012) - noahtalerman: Clarify security issues section in product groups (#55020)

- fleet-release: Update Fleet-maintained apps (#55015) - marko-lisica: Docs: fix software API docs to match server behavior (#54419) - juan-fdz-hawa: Add a software "Type" filter and rename software type labels - jkatz01: Don't attempt to verify canceled in-house/VPP installs (#55021) - eashaw: Website: add /europe page (#55031) - juan-fdz-hawa: Add api-design-check skill for REST API convention reviews - thisisjoegrant: Add Bitlocker PIN Disk encryption configuration steps (#55013) - eashaw: Website: update nav icon and image on /europe page (#55048) - allenhouchins: Bump Linux Claude Desktop patch policy to 2.26454.2 (#55034) - fleet-release: Update Fleet-maintained apps (#55035) - lukeheath: Bump axios, webpack-dev-middleware, and source-map-js dev dependencies (#54982) - dependabot[bot]: Bump fast-uri from 3.1.7 to 3.1.8 in /tools/fleet-slackbot (#55061) - lucasmrod: Run dev/test MySQL containers on the host's native architecture (#54959) - noahtalerman: Software inventory reference: IGEL OS isn't supported (#55063) - lukeheath: Adding changes for Fleet v4.92.3 (#55062) - ireedy: Handbook: rename Digital Marketing Manager posting to GTM Engineer (#54904) - fleet-release: Update Fleet-maintained apps (#55067) - allenhouchins: Windows FMAs (I–Z): don't report task HRESULTs or a missing installer as succ... - allenhouchins: Windows FMAs (A–G): don't report task HRESULTs or a missing installer as succ... - fleet-release: Update Fleet-maintained apps (#55082) - allenhouchins: Treat Entra ID user hives as user context in per-user Windows FMA uninstall s... - raju249: Add Learn more link to the unsigned bootstrap package error (#54966) - rajendrachavan: Validate label name and description length before apply (#54853) - raju249: Wait for a free Redis connection in the APNs mock (#54963) - Prajwal2246: Show Run policy for Observer+ on Unassigned (#54726) - Prajwal2246: Fix fleetctl apply custom profile path and label validation (#55097) - lucasmrod: VEX fleetctl for CVE-2026-75140 (#55099) - ShreyashAgare26: Fix Variables page UI inconsistencies - Dhvanit41: Read in-house app metadata from the app's own Info.plist (#53113) - rachaelshaw: v4.93.0 doc changes (#51490) - noahtalerman: Release article: Fleet 4.93.0 (#54593) - cdcme: Improve package upload handling (#55024) - mike-j-thomas: Update fleet-ai-device-management-patching-and-governance-for-every-os.pdf (#... - mike-j-thomas: Website: Update testimonial attributions & logo carousel (#55083) - spalmesano0: Disable rather than hide controls (#52590) - spalmesano0: Wrap setup experience advanced options in a card (#52672) - getvictor: Reduced DB load for Win MDM check-ins (#55032) - 416rehman: Fix wording in README for Apple computer purchases (#55127) - lukeheath: Adding changes for Fleet v4.93.0 to main (#53630) (#55110) - allenhouchins: Restructure the new-fma skill and fix its cross-platform slug guidance (#55076) - allenhouchins: Install GitHub Desktop Windows FMA from the per-user exe so it appears in the... - allenhouchins: Fleet Desktop (macOS): open the MDM enrollment page in a sheet (#54508) - ksykulev: Properly handle re-enrolling android devices (#54918) - noahtalerman: Website: fix Linux disk encryption Learn more link (#55052) - marko-lisica: Change patch policies to notify before patching (#55134) Read more: https://github.com/fleetdm/fleet/commits/main