🏗️ New commits pushed to Fleet: - rfairburn: Add Fevzi to same codeowners as Robert (#55932) - AndreyKizimenko: Add fleetd downgrade check to release smoke tests (#55949) - zayhanlon: Change summit focus from 2030 to 2027 (#55963) - mikermcneil: Website: Announcement banner 2.0 (#55985) - mikermcneil: Website: Right sidebar in api docs needs help (#55989) - mikermcneil: Website: Add glass to partners page, and normalize announcement banner behavi... - mikermcneil: Add banner image to Fleet virtual summit 2026 article (#55992) - claude[bot]: Website: remove button from 500 page (#55983) - github-actions[bot]: Update Go to 1.27.3 [automated] (#55986) - RachelElysia: Fleet UI: Honor GitOps software exception across software editing surfaces (#... - lucasmrod: Read all imagetools output in make update-go digest lookup (#56000) - MagnusHJensen: fix typo in software update declaration it-and-security (#55995) - fiws: Add Fathom (macOS) to Fleet-maintained apps (#56012) - allenhouchins: Only show Nudge once an update is prepared (#51546) - allenhouchins: Update Evernote macOS FMA to 11.39.2 (#56014) - alt-Rational: Add Github Copilot App as fma (#55946) - fleetdm-bot: Fix inner payload name in disable-internet-sharing profile (#55943) - allenhouchins: Fix draw.io and Zed winget FMA ingest (manifest Scope drift) (#56019) - allenhouchins: Add article: Android's no-interaction privilege escalation is fixed at patch ... - allenhouchins: Add article: CVE-2026-0322 needs a valid login to reach root on PAN-OS, so th... - RachelElysia: Fleet UI: Open Edit appearance and Apple VPP Edit software in disabled state ... - allenhouchins: Add article: Which apps hold Global Administrator in your tenant? ConnectWise... - jkatz01: Improve policy automation runs performance (#55711) - jkatz01: Reword Android host refetch tooltip (#55945) - getvictor: Return no rows from bitlocker_key_protectors when BitLocker is not installed ... - harrisonravazzolo: Deploying managed attestation guide (#55969) - allenhouchins: Website: Pluralize "Newsletters" link in article category sidebar (#56023) - Leanngove: Fix Android install status tooltip (#55819) - Leanngove: Update Android profile error for software settings by license tier (#55406) - fleet-release: Update Fleet-maintained apps (save) (#56020) - fiws: Add Handy as a macOS Fleet-maintained app (#56049) - JordanMontgomery: Revert api_endpoints.yml back to go codeowners (#56053) - jbelbo: Encrypt Windows BitLocker keys with the server private key (#55906) - mikermcneil: Website: add superadmin management page (/admin/superadmins) (#55979) - RachelElysia: VPP: Return platform-matching display name for install activity (#56013) - allenhouchins: Fix macOS FMA relaunch for bundle IDs with non-identifier characters (#53570) - fleet-release: Update Fleet-maintained apps (#56059) - nulmete: Add the unsupported header to the NixOS software library empty state (#56057) - eashaw: Website: add package.json override for csv-parse (#55540) - eashaw: Profile generator: update rules for generated mobileconfig profiles (#55796) - eashaw: Profile generator: update csp rule (#55801) - allenhouchins: Add guide and scripts for syncing AppleCare coverage to Fleet (#55615) - allenhouchins: Bump Linux Claude Desktop patch policy to 3.1623.0 (#56086) - allenhouchins: Fix Adobe Acrobat Pro and Reader (Windows) FMA queries and uninstall scripts ... - escomeau: Update README.md (#55916) - getvictor: Adding GitOps batch guidance to backend patterns (#55493) - noahtalerman: Add guides: Conditional access with PingFederate and Duo (#54346) - jbelbo: Show why a Windows host is Enforcing disk encryption (#55936) - mikermcneil: Website: add missing portraits for summit (#56100) - getvictor: Allow $FLEET_VAR_CERTIFICATE_RENEWAL_ID in the Windows SCEP CN (#55816) - mikermcneil: /pharma (#56116) - mikermcneil: Add three phrases to homepage "One agent for" ticker (#56093)

- mikermcneil: Website: point "Releases / news" nav link to /announcements (#56068) - mikermcneil: Website: advertise free certification workshops in header "More" promo card (... - mikermcneil: Fix /tables page auto-scrolling down when a table is selected (#56120) - mikermcneil: Update /fast-track page with new MDM migration brochure content (#56121) - allenhouchins: Match both ChatGPT bundle identifiers in macOS FMA queries (#55246) - claude[bot]: Website: update logos and quote on /contact page (#56138) - allenhouchins: Update Fleet-maintained apps: nightly version bumps; MEGAsync, Mobirise, and ... - allenhouchins: Regen macOS Fleet-maintained app scripts (10/13: pycharm through shortcat) (#... - allenhouchins: Regen macOS Fleet-maintained app scripts (1/13: 010-editor through aws-vpn-cl... - allenhouchins: Regen macOS Fleet-maintained app scripts (11/13: shotcut through syncthing-ap... - allenhouchins: Regen macOS Fleet-maintained app scripts (5/13: firefly-iota-desktop through ... - allenhouchins: Regen macOS Fleet-maintained app scripts (3/13: claude-devtools through devon... - allenhouchins: Regen macOS Fleet-maintained app scripts (4/13: devtoys through firealpaca) (... - allenhouchins: Regen macOS Fleet-maintained app scripts (9/13: opencloud through pycharm-ce)... - allenhouchins: Regen macOS Fleet-maintained app scripts (6/13: hive-app through linear) (#56... - allenhouchins: Regen macOS Fleet-maintained app scripts (2/13: axure-rp through citrix-works... - allenhouchins: Regen macOS Fleet-maintained app scripts (7/13: linearmouse through minstalle... - allenhouchins: Regen macOS Fleet-maintained app scripts (13/13: vnc-viewer through zwift) (#... - allenhouchins: Regen macOS Fleet-maintained app scripts (8/13: miro through openboard) (#56131) - allenhouchins: Regen macOS Fleet-maintained app scripts (12/13: syntax-highlight through vnc... - fleet-release: Update Fleet-maintained apps (#56154) - fleet-release: Update Fleet-maintained apps (#56155) - harrisonravazzolo: Add NVM as a Windows Fleet-maintained app (#56119) - adriant172: Revise EDR configuration steps for Fleet (#55877) - MagnusHJensen: indent using two spaces instead of tabs for apple XML (#56011) - juan-fdz-hawa: Fit Host details > Software > Library controls in the card at 768–820 px - allenhouchins: Add article: Fleet brings NVIDIA AI hardware under enterprise IT control (#56... - nulmete: Fleet Free: rename "IncludeHiddenPolicies" to "include_hidden_policies" in De... - nulmete: Block technician host deletion on Fleet Free (#56054) - nulmete: Leave critical and hidden out of generate-gitops policies on Fleet Free (#56078) - nulmete: Ignore hidden in policy specs on Fleet Free, like critical (#56077) - allenhouchins: Fix capitalization in article title and header (#56180) - nulmete: Do not report NixOS -data/-env paths as extra software versions (#56056) - JasonMKurtz: Fix 55850 disabled action button (#55900) - JordanMontgomery: Fix CSP nonce in Microsoft TOS and SSO callback (#56064) - fleet-release: Update Fleet-maintained apps (#56171) - ireedy: Update receive-from-github.js (#55564) - kc9wwh: Fix sentinelone table policy example to work on Windows (#36582) (#55506) - noahtalerman: Conditional access: Google: iPhone, iPad, and Android with Identity-Aware Pro... - RachelElysia: Fleet UI: Type, flatten, and consolidate shared form validators (#56060) - RachelElysia: GitOps: Clear Android VPP app configuration when omitted (#56028) - juan-fdz-hawa: Add AI tools to software inventory - chriskennard-kobold: Add QGIS and QGIS LTR as macOS and Windows Fleet-maintained apps (#54685) - fleet-release: Update Fleet-maintained apps (#56186) - lucasmrod: Exclude compromised eMudhra emSign roots from Orbit CA bundle (#56173) - lukeheath: Add lukeheath as an owner of /orbit/ in CODEOWNERS (#56191) - dantecatalfamo: Stop the JSON/XML editor from loading Ace's missing worker (#55160)

- dantecatalfamo: Keep an Android host's disk space until it measures again after re-enrollment... - aliaska-varieva: Ignore VLC for Android CVEs on non-Android VLC (#55058) - allenhouchins: Handbook: move weekly Vanta check ritual to People (#56198) - zayhanlon: Delete Infrastructure Engineer job listing (#56197) - spalmesano0: Fix unpacking the why link (#56218) - allenhouchins: Add Windows Technical Marketing Engineer open position (#56216) - ireedy: Handbook: replace BYOD tech lead with Dante Catalfamo (#56101) - getvictor: EJBCA service (PR 3) (#55926) - mikermcneil: Website: make docs content column fill available width (#56229) - JordanMontgomery: Website: generate configuration profiles through one shared pipeline with per... - fleet-release: Update Fleet-maintained apps (#56219) - chrsdrhm: Fix the duplicate fleet name check in the fleetctl new GitOps template (#55353) - noahtalerman: Website: add conditional access (Okta, Entra, Duo, PingFederate, Google) to /... - allenhouchins: Fix single-entry check in 32 Windows Fleet-maintained app uninstall scripts (... - allenhouchins: Dogfood: add eMudhra CA compromise policies and remediation scripts (#56187) - RachelElysia: Fleet UI: Center managed configuration icon in Software name cell (#56227) - MagnusHJensen: add contrib guide to rotate static scep challenge (#55732) - harrisonravazzolo: Add Splashtop Streamer Windows Fleet-maintained app (#56226) - jbelbo: Only promise a new BitLocker key when the host will be asked for one (#56233) - jkatz01: Change logic for app store version status counts (#56062) - noahtalerman: Vulnerability processing guide: say Fleet supports Fedora 40 and below (#55173) - lukeheath: Add fallback registries for the Trivy vulnerability DB in CI (#56255) - karmine05: Add eMudhra CA compromise article with Fleet reports, policies, and scripts (... - eashaw: Website: replace headshot in Fleet virtual summit article (#56263) - eashaw: Website: add /windows page (#56251) - Aaditya1273: Fix stale LESS path in website CLAUDE.md (#56214) - noahtalerman: Google conditional access guide: rename Step 6, link coming soon to #56195 (#... - noahtalerman: Guides: explain why to set a recovery lock password (#55102) - noahtalerman: Guides: stop saying "Fleet MDM" (#55103) - georgekarrv: Adding changes for Fleet v4.93.2 (#56207) - fleet-release: Update Fleet-maintained apps (#56269) - fleet-release: Update Fleet-maintained apps (#56272) - jarrydstan: feat(fma): add Grok Bot for macOS (#56266) - allenhouchins: Add Grok Bot as a Windows Fleet-maintained app (#56273) - alt-Rational: Add UnnaturalScrollWheels as fleet maintained app (#56072) - MagnusHJensen: 55789 apple schema (#55994) - raju249: Hide MDM status profile assignment for hosts whose AB token was deleted (#56172) - MagnusHJensen: 55790 windows schema (#56158) - allenhouchins: Add sustainability DEX reports to dogfood (#56279) - JordanMontgomery: Improve validation/error codes on SCEP endpoints (#56185) - noahtalerman: Enroll hosts guide: what happens after you delete a host (#54693) - MagnusHJensen: add PayloadVersion to CIS benchmarks (#56298) - MagnusHJensen: fixed profiles to conform to -strict validation in solutions that aren't miss... - MagnusHJensen: add PayloadVersion to solution profiles (#56296) - nulmete: Truncate long host names in the Hosts table (#56250) - nulmete: Fix Policies search width and Automations cell focus ring (#56245) - nulmete: Prevent horizontal swipes over code editors from navigating back (#56244) - nulmete: Add regression test for Global variables name and created date (#56246) - fleet-release: Update Fleet-maintained apps (#56297) - nulmete: Keep page width stable when a modal opens (#56253) - Synse: Bug: Listing or getting another users session marks that session as accessed ... - JordanMontgomery: Website: write .mobileconfig and Windows profiles from the settings the model...

- noahtalerman: Add banner when host count exceeds purchased license count (#55821) Read more: https://github.com/fleetdm/fleet/commits/main