diff --git a/CHANGELOG.md b/CHANGELOG.md
index bc5b9ea467..5eb7ab78ac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,65 @@
+## Fleet 4.73.0 (Oct 1, 2025)
+
+### Security Engineers
+- Added support for Hydrant as a Certificate Authority and added an experimental API that can be used to have Fleet request a certificate from a Hydrant.
+- Added a check to disallow FLEET_SECRET variables in Apple configuration profile `<PayloadDisplayName>` fields for security.
+- Added `/batch/{batch_execution_id:[a-zA-Z0-9-]+}/host-results` API endpoint to list hosts targeted in batch.
+- Added `POST /api/v1/fleet/configuration_profiles/batch` API endpoint to batch modify MDM configuration profiles.
+- Added a new page in the UI for batch script run details.
+- Added support for AWS RDS (MySQL) IAM authentication.
+- Added support for AWS ElastiCache (Redis) IAM authentication.
+
+### IT Admins
+- Added setup experience software items for Linux devices.
+- Added API endpoints for Linux setup experience.
+  - Device API endpoints for fleetd: `POST /api/fleet/orbit/setup_experience/init` and `POST /api/v1/fleet/device/{token}/setup_experience/status`.
+  - `PUT /api/v1/fleet/setup_experience/software` and `GET /api/v1/fleet/setup_experience/software` now have a `platform` argument (`linux` or `macos`, defaults to `macos`).
+- Added IdP `fullname` attribute as a valid Fleet variable for Apple configuration profiles.
+- Added the username of the managed user account user-scoped profiles are delivered to for macOS hosts.
+- Enabled configuring webhook and ticket policy (Jira/Zendesk) automations for "No team".
+- Added support for writing multiple packages in a single GitOps YAML file included under `software.packages`.
+- Moved `self_service`, `labels_include_any`, `labels_exclude_any`, `categories`, and `setup_experience` declarations to team level for software in GitOps; `setup_experience` can now be set on a software package, Fleet Maintained App, or App Store app.
+- Changed `GET /host/:id` to return an empty array for `software` field when `exclude_software=true`.
+- Updated `generate-gitops` command to output filenames with emojis and other special characters where applicable.
+- Added a Fleet-maintained app for macOS: Omnissa Horizon Client.
+- Added opening instructions to self-service macOS apps and Windows programs.
+
+### Other improvements and bug fixes
+- Added index to `distributed_query_campaign_targets` table to speed up DB performance for live queries.
+> **WARNING:** For deployments with millions of rows in `distributed_query_campaign_targets`, the database migration to add the index may take significant time. We recommend testing migration duration in a staging environment first. The initial cleanup of old campaign targets will occur progressively over multiple hours to avoid database overload.
+- Added clean up of live query campaign targets 24 hours after campaign completion. This keeps the DB size in check for performance of large and frequent live query campaigns.
+- Improved OpenTelemetry integration to add tracing to async tasks (host seen, labels, policies, query stats) and improve HTTP span naming, enabled gzip compression, reduced batch size to prevent gRPC errors.
+- Updated output from `packages_only=true` so that it only returns software with available installers.
+- Added tarballs summary card back into UI. 
+- Improved the sorting of batch scripts in the Batch Progress UI. Batches in the "started" state now sort by started date, and batches in the "finished" state now sort by the finished date.
+- Removed inaccurate host count timestamp on the software version details page.
+- Downgraded "distributed query is denylisted" error to a warning on the Fleet server since this message indicates a likely issue on the host and not the server. We will surface this issue in the UI in the future.
+- Improved performance for YARA rules: when modifying config (`PATCH /api/latest/fleet/config`) with a large number of yara rules and when large numbers of hosts fetch rules via /api/osquery/yara/{name} endpoint.
+- Improved performance when updating multiple policies in the UI. The policies are now updated in series to reduce server/DB load.
+- Added user icon to OS settings custom profiles on host details page if they are user scoped.
+- Added clearer error messages when a new password doesn't meet the password criteria.
+- Removed extra spacing from under disk encryption table.
+- Updated `fleetctl get mdm-command-results` to show output in a vertical format instead of a table.
+- Refactored ApplyQueries DS method so that queries are upserted in batches, this was done to avoid deadlocks during large gitops runs.
+- Refactored the way failing policies are computed on host details endpoint to avoid discrepancies due to read replica delays and async computation.
+- Refactored PATH fleet/config endpoint to use the primary DB node for both persisting changes and fetching modified App Config.
+- Fixed missing ticket integration options in Policies -> Other workflows modal for teams.
+- Fixed deduplicating bug in UI to only count unique vulns when counting software title vulnerabilities across versions in various software title vulnerabilities count, and host software title vulnerabilities count.
+- Fixed cases where the default auto-install policy for .deb packages would treat installed-then-uninstalled software as still installed.
+- Fixed the message rendered from user_failed_login global activities on the Activity feed if the email is not specified.
+- Fixed fleetctl printing binary data to terminal in debug mode.
+- Fixed a bug where incorrect CVEs were received from MSRC feed.
+- Fixed Fleet-installed host count not updating after software is installed over an older version.
+- Fixed UI issue in the Dashboard page. The software card is now rendered while content is been fetched to avoid the layout to jump around.
+- Fixed error when updating a script to exactly match the contents of another script.
+- Fixed an issue where string concatenations in a LIKE expression caused a syntax error in the query editor.
+- Fixed `fleetctl gitops` issue uploading an Apple configuration profile with a FLEET_SECRET in a `<data>` field.
+- Fixed Linux lock script on Ubuntu with GDM to now switch UI to text mode to work around GUI issues.
+- Fixed Google Cloud Storage (GCS) support broken since Fleet 4.71.0 by implementing a workaround for AWS Go SDK v2 signature compatibility issues with GCS endpoints.
+- Fixed banner link colors in UI. 
+- Fixed an alignment issue on the My device page.
+- Fix deadlocks when updating automations for 10+ policies at one time.
+
 ## Fleet 4.73.3 (Sep 26, 2025)
 
 ### Bug fixes
diff --git a/changes/1812-aws-rds-iam-auth b/changes/1812-aws-rds-iam-auth
deleted file mode 100644
index 5452f37673..0000000000
--- a/changes/1812-aws-rds-iam-auth
+++ /dev/null
@@ -1,2 +0,0 @@
-- Added support for AWS RDS (MySQL) IAM authentication
-- Added support for AWS ElastiCache (Redis) IAM authentication
diff --git a/changes/25025-dedup-vuln-count b/changes/25025-dedup-vuln-count
deleted file mode 100644
index bcfda84248..0000000000
--- a/changes/25025-dedup-vuln-count
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Fixed bug deduplicating to only count unique vulns when counting software title vulnerabilities across versions in various software title vulnerabilities count, and host software title vulnerabilities count
diff --git a/changes/28642-deadlocks-during-gitops-run b/changes/28642-deadlocks-during-gitops-run
deleted file mode 100644
index 3eebbf270e..0000000000
--- a/changes/28642-deadlocks-during-gitops-run
+++ /dev/null
@@ -1 +0,0 @@
-* Refactored ApplyQueries DS method so that queries are upserted in batches, this was done to avoid deadlocks during large gitops runs.
\ No newline at end of file
diff --git a/changes/28974-add-hydrant-and-request-cert-api b/changes/28974-add-hydrant-and-request-cert-api
deleted file mode 100644
index 531d57b8d3..0000000000
--- a/changes/28974-add-hydrant-and-request-cert-api
+++ /dev/null
@@ -1 +0,0 @@
-* Added support for Hydrant as a Certificate Authority and added an experimental API that can be used to have Fleet request a certificate from a CA(only supporting Hydrant at this time)
diff --git a/changes/29795-deleted-policies-still-showing b/changes/29795-deleted-policies-still-showing
deleted file mode 100644
index 64b35388ce..0000000000
--- a/changes/29795-deleted-policies-still-showing
+++ /dev/null
@@ -1 +0,0 @@
-* Refactored the way failing policies are computed on Host end-point to avoid discrepancies due to read replica delays and async computation.
\ No newline at end of file
diff --git a/changes/29894-fix-deb-auto-install-query b/changes/29894-fix-deb-auto-install-query
deleted file mode 100644
index 5d672a1ed3..0000000000
--- a/changes/29894-fix-deb-auto-install-query
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed cases where the default auto-install policy for .deb packages would treat installed-then-uninstalled software as still installed
diff --git a/changes/29909-yara-rules-performance b/changes/29909-yara-rules-performance
deleted file mode 100644
index 8f0d02b736..0000000000
--- a/changes/29909-yara-rules-performance
+++ /dev/null
@@ -1 +0,0 @@
-* Improved performance for YARA rules: when modifying config (PATCH /api/latest/fleet/config) with a large number of yara rules and when large numbers of hosts fetch rules via /api/osquery/yara/{name} endpoint.
diff --git a/changes/30095-gitops b/changes/30095-gitops
deleted file mode 100644
index 89c765844b..0000000000
--- a/changes/30095-gitops
+++ /dev/null
@@ -1 +0,0 @@
-* Moved `self_service`, `labels_include_any`, `labels_exclude_any`, `categories`, and `setup_experience` declarations to team level for software in GitOps; `setup_experience` can now be set on a software package, Fleet Maintained App, or App Store app.
\ No newline at end of file
diff --git a/changes/30238-add-open-instructions-for-apps-programs b/changes/30238-add-open-instructions-for-apps-programs
deleted file mode 100644
index d0c9a86f87..0000000000
--- a/changes/30238-add-open-instructions-for-apps-programs
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Added opening instructions to self-service macOS apps and Windows programs
diff --git a/changes/30403_fix_host_count_discrepancy b/changes/30403_fix_host_count_discrepancy
deleted file mode 100644
index 799a5304cd..0000000000
--- a/changes/30403_fix_host_count_discrepancy
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed fleet installed host count not updating after software is installed over an older version.
diff --git a/changes/30849-multipkg-gitops b/changes/30849-multipkg-gitops
deleted file mode 100644
index 75c323909e..0000000000
--- a/changes/30849-multipkg-gitops
+++ /dev/null
@@ -1 +0,0 @@
-- Added support for writing multiple packages in a single GitOps YAML file included under `software.packages`.
diff --git a/changes/30854-fix-string-concat-in-sql-parser b/changes/30854-fix-string-concat-in-sql-parser
deleted file mode 100644
index 1644f8b135..0000000000
--- a/changes/30854-fix-string-concat-in-sql-parser
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed an issue where string concatenations in a LIKE expression caused a syntax error in the query editor.
diff --git a/changes/308888-add-fullname-idp-fleet-variable b/changes/308888-add-fullname-idp-fleet-variable
deleted file mode 100644
index 990acf75ce..0000000000
--- a/changes/308888-add-fullname-idp-fleet-variable
+++ /dev/null
@@ -1 +0,0 @@
-* Added IdP fullname attribute as a valid fleet variable for Apple configuration profiles
\ No newline at end of file
diff --git a/changes/31167-surface-user-scoped-profiles b/changes/31167-surface-user-scoped-profiles
deleted file mode 100644
index 1831a93beb..0000000000
--- a/changes/31167-surface-user-scoped-profiles
+++ /dev/null
@@ -1 +0,0 @@
-* Added the username of the managed user account user-scoped profiles are delivered to for macOS hosts
diff --git a/changes/31173-fix-policy-deadlocks b/changes/31173-fix-policy-deadlocks
deleted file mode 100644
index 0d8ec2543e..0000000000
--- a/changes/31173-fix-policy-deadlocks
+++ /dev/null
@@ -1 +0,0 @@
-Fix deadlocks when updating automations for 10+ policies at one time
diff --git a/changes/31173-fix-policy-deadlocks-frontend b/changes/31173-fix-policy-deadlocks-frontend
deleted file mode 100644
index 168f261f36..0000000000
--- a/changes/31173-fix-policy-deadlocks-frontend
+++ /dev/null
@@ -1 +0,0 @@
-When updating multiple policies in the UI, the policies are now updated in series to reduce server/DB load.
diff --git a/changes/31202-allow-special-chars-in-generated-gitops-files b/changes/31202-allow-special-chars-in-generated-gitops-files
deleted file mode 100644
index f863f5f036..0000000000
--- a/changes/31202-allow-special-chars-in-generated-gitops-files
+++ /dev/null
@@ -1 +0,0 @@
-- Updated `generate-gitops` command to output filenames with emojis and other special characters where applicable
diff --git a/changes/31226-batch-script-run-detail-page b/changes/31226-batch-script-run-detail-page
deleted file mode 100644
index 823f0896ac..0000000000
--- a/changes/31226-batch-script-run-detail-page
+++ /dev/null
@@ -1 +0,0 @@
-- Implement a new page for batch script run details
diff --git a/changes/31267-no-team-automations b/changes/31267-no-team-automations
deleted file mode 100644
index d0fb6135de..0000000000
--- a/changes/31267-no-team-automations
+++ /dev/null
@@ -1,2 +0,0 @@
-* Allow configuring webhook and ticket policy (Jira/Zendesk) automations for "No team"
-* If using the FLEET_PARTNERSHIPS_ENABLE_PRIMO feature, please set FLEET_PARTNERSHIPS_ENABLE_PRIMO=1 environment variable before running database migrations (e.g., `fleet prepare db`). This one-time migration copies the failing policy webhook/ticket configurations from "All teams" to "No team". If migrations run without this environment variable, the migration is marked applied and won't copy settings later.
diff --git a/changes/31291-linux-lock-script b/changes/31291-linux-lock-script
deleted file mode 100644
index 573633efd3..0000000000
--- a/changes/31291-linux-lock-script
+++ /dev/null
@@ -1 +0,0 @@
-Linux lock script on Ubuntu with GDM now switches UI to text mode to work around GUI issues.
diff --git a/changes/31343-blank-email-on-failed-login-activity b/changes/31343-blank-email-on-failed-login-activity
deleted file mode 100644
index 611c148273..0000000000
--- a/changes/31343-blank-email-on-failed-login-activity
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed the message rendered from user_failed_login global activities on the Activity feed if the email is not specified.
\ No newline at end of file
diff --git a/changes/31379-ui-issue-with-activity-feed b/changes/31379-ui-issue-with-activity-feed
deleted file mode 100644
index eb893cf1ba..0000000000
--- a/changes/31379-ui-issue-with-activity-feed
+++ /dev/null
@@ -1,2 +0,0 @@
-* Fixed UI issue in the Dashboard page. The software card is now rendered while content is been fetched to avoid the layout
-to jump around.
\ No newline at end of file
diff --git a/changes/31432-live-query-campaigns b/changes/31432-live-query-campaigns
deleted file mode 100644
index 2c88622378..0000000000
--- a/changes/31432-live-query-campaigns
+++ /dev/null
@@ -1,3 +0,0 @@
-* Added clean up of live query campaign targets 24 hours after campaign completion. This keeps the DB size in check for performance of large and frequent live query campaigns.
-* Added index to distributed_query_campaign_targets table to speed up DB performance for live queries.
-> **Warning:** For deployments with millions of rows in `distributed_query_campaign_targets`, the database migration to add the index may take significant time. We recommend testing migration duration in a staging environment first. The initial cleanup of old campaign targets will occur progressively over multiple hours to avoid database overload.
diff --git a/changes/31474-remove-incorrect-cves b/changes/31474-remove-incorrect-cves
deleted file mode 100644
index 8c8b83f613..0000000000
--- a/changes/31474-remove-incorrect-cves
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed a bug where incorrect CVEs were received from MSRC feed.
diff --git a/changes/31477-secrets-in-macos-profiles b/changes/31477-secrets-in-macos-profiles
deleted file mode 100644
index c4a344d3d1..0000000000
--- a/changes/31477-secrets-in-macos-profiles
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fixed `fleetctl gitops` issue uploading an Apple configuration profile with a FLEET_SECRET in a `<data>` field.
-- Added a check to disallow FLEET_SECRET variables in Apple configuration profile `<PayloadDisplayName>` fields for security.
diff --git a/changes/31536-add-script-host-results-api b/changes/31536-add-script-host-results-api
deleted file mode 100644
index 10bfd694a6..0000000000
--- a/changes/31536-add-script-host-results-api
+++ /dev/null
@@ -1 +0,0 @@
-- Added "list hosts targeted in batch script" API
\ No newline at end of file
diff --git a/changes/31580-duplicate-scripts b/changes/31580-duplicate-scripts
deleted file mode 100644
index 675bec6511..0000000000
--- a/changes/31580-duplicate-scripts
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed error when updating a script to exactly match the contents of another script.
diff --git a/changes/31581-output-from-packages-only b/changes/31581-output-from-packages-only
deleted file mode 100644
index 04a70c353b..0000000000
--- a/changes/31581-output-from-packages-only
+++ /dev/null
@@ -1 +0,0 @@
-* Output from packages_only=true returns software with available installers.
diff --git a/changes/31601-remove-inaccurate-timestamp b/changes/31601-remove-inaccurate-timestamp
deleted file mode 100644
index 516d182e97..0000000000
--- a/changes/31601-remove-inaccurate-timestamp
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Removes inaccurate host count time stamp on the software version details page
diff --git a/changes/31721-missing-tar-summary-card b/changes/31721-missing-tar-summary-card
deleted file mode 100644
index 193e3242ab..0000000000
--- a/changes/31721-missing-tar-summary-card
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Re-added tarballs summary card
diff --git a/changes/31736-fleetctl-debug-binary-output b/changes/31736-fleetctl-debug-binary-output
deleted file mode 100644
index 592cee9db3..0000000000
--- a/changes/31736-fleetctl-debug-binary-output
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed fleetctl printing binary data to terminal in debug mode
diff --git a/changes/31755-disk-encryption-table-spacing b/changes/31755-disk-encryption-table-spacing
deleted file mode 100644
index 8260733659..0000000000
--- a/changes/31755-disk-encryption-table-spacing
+++ /dev/null
@@ -1 +0,0 @@
-- Remove extra spacing from under disk encryption table
diff --git a/changes/31876-update-password-validator b/changes/31876-update-password-validator
deleted file mode 100644
index 077ec4f8ce..0000000000
--- a/changes/31876-update-password-validator
+++ /dev/null
@@ -1 +0,0 @@
-- Added clearer error messages when a new password doesn't meet the password criteria.
diff --git a/changes/31944-consistent-banner-link-colors b/changes/31944-consistent-banner-link-colors
deleted file mode 100644
index 5fb0b972e1..0000000000
--- a/changes/31944-consistent-banner-link-colors
+++ /dev/null
@@ -1 +0,0 @@
-- Fleet UI: Fixed banner link colors
diff --git a/changes/32037-linux-setup-experience b/changes/32037-linux-setup-experience
deleted file mode 100644
index 06fe276626..0000000000
--- a/changes/32037-linux-setup-experience
+++ /dev/null
@@ -1 +0,0 @@
-* Implement setup experience software for Linux
diff --git a/changes/32040-linux-setup-experience-backend b/changes/32040-linux-setup-experience-backend
deleted file mode 100644
index d1236ff970..0000000000
--- a/changes/32040-linux-setup-experience-backend
+++ /dev/null
@@ -1,3 +0,0 @@
-- Added API endpoints for Linux setup experience.
-  - Device API endpoints for fleetd: `POST /api/fleet/orbit/setup_experience/init` and `POST /api/v1/fleet/device/{token}/setup_experience/status`
-  - `PUT /api/v1/fleet/setup_experience/software` and `GET /api/v1/fleet/setup_experience/software` now have a `platform` argument (`linux` or `macos`, defaults to `macos`).
diff --git a/changes/32274-denylisted-error b/changes/32274-denylisted-error
deleted file mode 100644
index 826ff660a0..0000000000
--- a/changes/32274-denylisted-error
+++ /dev/null
@@ -1 +0,0 @@
-Downgraded "distributed query is denylisted" error to a warning on the Fleet server since this message indicates a likely issue on the host and not the server. We will surface this issue in the UI in the future.
diff --git a/changes/32313-otel-improvements b/changes/32313-otel-improvements
deleted file mode 100644
index f173c86b88..0000000000
--- a/changes/32313-otel-improvements
+++ /dev/null
@@ -1 +0,0 @@
-Minor OpenTelemetry improvements: added tracing to async tasks (host seen, labels, policies, query stats). Improved HTTP span naming, enabled gzip compression, reduced batch size to prevent gRPC errors.
diff --git a/changes/32550-missing-ticket-options b/changes/32550-missing-ticket-options
deleted file mode 100644
index 212a3b9d6e..0000000000
--- a/changes/32550-missing-ticket-options
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed missing ticket integration options in Policies -> Other workflows modal for teams.
diff --git a/changes/32558-new-fma-omnissa b/changes/32558-new-fma-omnissa
deleted file mode 100644
index e2aba3065a..0000000000
--- a/changes/32558-new-fma-omnissa
+++ /dev/null
@@ -1 +0,0 @@
-* Added the Fleet-maintained app for macOS: Omnissa Horizon Client.
diff --git a/changes/32560-improve-batch-script-sorting b/changes/32560-improve-batch-script-sorting
deleted file mode 100644
index 26034127ef..0000000000
--- a/changes/32560-improve-batch-script-sorting
+++ /dev/null
@@ -1 +0,0 @@
-- Improved the sorting of batch scripts in the Batch Progress UI. Batches in the "started" state now sort by started date, and batches in the "finished" state now sort by the finished date.
diff --git a/changes/32571-fix-gcs-support b/changes/32571-fix-gcs-support
deleted file mode 100644
index 132415a87c..0000000000
--- a/changes/32571-fix-gcs-support
+++ /dev/null
@@ -1 +0,0 @@
-* Fixed Google Cloud Storage (GCS) support broken since Fleet 4.71.0 by implementing a workaround for AWS Go SDK v2 signature compatibility issues with GCS endpoints.
diff --git a/changes/32624-extra-space-on-DUP b/changes/32624-extra-space-on-DUP
deleted file mode 100644
index 4f42ebfa2c..0000000000
--- a/changes/32624-extra-space-on-DUP
+++ /dev/null
@@ -1 +0,0 @@
-- Fix an alignment issue on the My device page
diff --git a/changes/4498-return-empty-software b/changes/4498-return-empty-software
deleted file mode 100644
index 4b84d8c2d3..0000000000
--- a/changes/4498-return-empty-software
+++ /dev/null
@@ -1 +0,0 @@
-* Changed `GET /host/:id` to return an empty array for `software` field when exclude_software=true
diff --git a/changes/issue-24706-public-batch-modify-profiles b/changes/issue-24706-public-batch-modify-profiles
deleted file mode 100644
index 27333c64eb..0000000000
--- a/changes/issue-24706-public-batch-modify-profiles
+++ /dev/null
@@ -1 +0,0 @@
-- add public endpoint to batch modify mdm config profiles
diff --git a/changes/issue-30944-integrate-cert-auth-api-frontend b/changes/issue-30944-integrate-cert-auth-api-frontend
deleted file mode 100644
index 69a560a440..0000000000
--- a/changes/issue-30944-integrate-cert-auth-api-frontend
+++ /dev/null
@@ -1 +0,0 @@
-- integrates the new cert authoities API on the frontend.
diff --git a/changes/issue-31166-add-user-icon-to-profiles b/changes/issue-31166-add-user-icon-to-profiles
deleted file mode 100644
index df89bdb9d6..0000000000
--- a/changes/issue-31166-add-user-icon-to-profiles
+++ /dev/null
@@ -1,2 +0,0 @@
-- add user icon to os settings custom profiles on host details page if they are user scoped
-
diff --git a/changes/jve-get-mdm-command-line-output b/changes/jve-get-mdm-command-line-output
deleted file mode 100644
index 2bf381f77d..0000000000
--- a/changes/jve-get-mdm-command-line-output
+++ /dev/null
@@ -1 +0,0 @@
-- Updated `fleetctl get mdm-command-results` to show output in a vertical format instead of a table.
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
index 76c6327e9c..6e791f4d13 100644
--- a/charts/fleet/Chart.yaml
+++ b/charts/fleet/Chart.yaml
@@ -4,11 +4,11 @@ name: fleet
 keywords:
   - fleet
   - osquery
-version: v6.6.17
+version: v6.6.18
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.73.3
+appVersion: v4.74.0
 dependencies:
   - name: mysql
     condition: mysql.enabled
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index 46c30a17a6..dee99e0332 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.73.3 # Version of Fleet to deploy
+imageTag: v4.74.0 # Version of Fleet to deploy
 # imagePullSecrets is optional.
 # imagePullSecrets:
 #   - name: docker
diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
index 43d6330a39..4cc9540e9e 100644
--- a/infrastructure/dogfood/terraform/aws/variables.tf
+++ b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.73.3"
+  default     = "fleetdm/fleet:v4.74.0"
 }
 
 variable "software_inventory" {
diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
index eb6341e9fd..fef6542ef3 100644
--- a/infrastructure/dogfood/terraform/gcp/variables.tf
+++ b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,7 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.73.3"
+  default = "fleetdm/fleet:v4.74.0"
 
 variable "software_installers_bucket_name" {
   default = "fleet-software-installers"
diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
index 1c14fd7645..39bd6fe856 100644
--- a/tools/fleetctl-npm/package.json
+++ b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.73.3",
+  "version": "v4.74.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"