mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
Luke Heath
GitHub
parent
b563e7bd97
commit
57ea93859d
107 changed files with 113 additions and 118 deletions
108
CHANGELOG.md
108
CHANGELOG.md
|
|
@ -1,9 +1,115 @@
|
|||
## Fleet 4.83.0 (Apr 1, 2026)
|
||||
|
||||
### IT Admins
|
||||
- Added ability to deploy an Android web app via setup experience or self-service.
|
||||
- Added ability to set and manually rotate Mac recovery lock passwords.
|
||||
- Added ability to lock the pre-filled user information for macOS hosts that login via End User Authentication during Setup Experience.
|
||||
- Added automatic retries for failed software installs, excluding VPP apps.
|
||||
- Updated host software library to always allow filtering.
|
||||
- Added retry functionality when adding software installers to Fleet via GitOps.
|
||||
- Added `fleetctl new` command to initialize a GitOps folder.
|
||||
- Added support for `paths:` key under `reports:`, `labels:` and `policies:` in GitOps files.
|
||||
- Added glob support for `configuration_profiles` in GitOps files.
|
||||
- Added support for referencing `.sh` or `.ps1` script files directly in the GitOps `path` field for software packages.
|
||||
- Implemented `webhooks_and_tickets_enabled` flag for policies in GitOps.
|
||||
- Added server config for allowing all Apple MDM declaration types.
|
||||
- Added ability to use `FLEET_JIT_USER_ROLE_FLEET_` as a prefix on SAML attributes.
|
||||
- Added `fleet_name` and `fleet_id` columns to hosts CSV export.
|
||||
- Added resend button in the OS settings modal for iOS and iPadOS hosts.
|
||||
- Added patch policies for Fleet-maintained apps that automatically update when the app is updated.
|
||||
|
||||
### Security Engineers
|
||||
- Added support for NDES CA for Windows hosts.
|
||||
- Added vulnerability scanning support for Windows Server 2025 hosts.
|
||||
- Added OTEL instrumentation to Fleet's internal HTTP client.
|
||||
- Added Content-Type header to Smallstep authorization requests to prevent Cloudflare from blocking them.
|
||||
- Added ability to omit `secrets:` in GitOps files to retain existing enroll secrets on server.
|
||||
- Fixed python package false positives on Ubuntu, such as `python3-setuptools` on Ubuntu 24.04 with version 68.1.2-2ubuntu1.2.
|
||||
- Fixed false positive vulnerabilities for Mattermost Desktop.
|
||||
|
||||
### Other improvements and bug fixes
|
||||
- Most top-level keys can now be omitted from GitOps files in place of supplying them with an empty value.
|
||||
- Improved host search to always match against host email addresses, not only when the query looks like an email.
|
||||
- Prevented a 500 error on the host details page when an MDM command reference in `host_mdm_actions` pointed to a non-existent command (orphan reference).
|
||||
- Allowed Fleet-maintained apps to be added if they have default categories configured that are not available in older builds from this point forward.
|
||||
- Migrated to using Policy `critical` option when disallowing Okta conditional access bypass.
|
||||
- Updated DEP enrollment flow to apply minimum macOS version check when specified.
|
||||
- Updated GitOps to fail runs when unknown keys are detected in files.
|
||||
- Updated default last opened time diff to 2m to increase the chances of updating the last opened time for software that is opened frequently.
|
||||
- Updated the host results endpoint URL to be consistent with the other URLs.
|
||||
- Added tooltip to batch run result host count to clarify that the count might include deleted hosts.
|
||||
- Updated table heading and result filter styles.
|
||||
- Reordered the columns on the Hosts page.
|
||||
- Updated Fleet desktop to surface custom transparency links to the device user.
|
||||
- Changed `PostJSONWithTimeout` to log response body in error case.
|
||||
- Removedd unused and confusingly-named --mdm_apple_scep_signer_allow_renewal_days config.
|
||||
- Refactored `NewActivity` functionality by moving it to the new activity bounded context.
|
||||
- Modified Android certificate renewal logic to make it easier to test.
|
||||
- Optimized `api/latest/fleet/software/titles` endpoint.
|
||||
- Trimmed incoming `ABM` suffix for Arch Linux hosts so Arch OSs are grouped together in the database and UI.
|
||||
- Updated determination process used for selecting which user email address to use when scheduling a maintenance event for a host failing policies.
|
||||
- Added license checks for `fleet-free` targeting queries by label.
|
||||
- Added APNs expiry banner in the UI for Fleet free users.
|
||||
- Added error if GitOps/batch attempts to add setup experience software when manual agent install is enabled.
|
||||
- Added Fleet-maintained app utilization to anonymous usage statistics collected by Fleet.
|
||||
- Surfaced data constraints using the proper HTTP status code on the `/api/v1/fleet/scim/users` endpoint.
|
||||
- Updated macOS device details UI to delay showing FileVault "action required" notifications banner during the first hour after MDM enrollment to allow sufficient time for Fleet to automatically escrow keys from ADE devices.
|
||||
- Added an early return in the `PUT /hosts/{id}/device_mapping` endpoint so that setting the same IDP email that is already stored no longer triggers unnecessary database updates, activity log entries, or profile resends.
|
||||
- Improved cleanup functionality so that when deleting a host record, Fleet will now clean up host issues, such as failing policies and critical vulnerabilities associated with the host.
|
||||
- Improved the way we verify Windows profiles to no longer rely on osquery for faster verification.
|
||||
- Improved body parsing validation by using `http.MaxBytesReader` and wrapping gzip decode output too.
|
||||
- Improved rate-limiting on conditional access endpoints.
|
||||
- Finished migrating code from go-kit/log to slog.
|
||||
- Updated UI for disabling stored report results for clarity.
|
||||
- Revised which versions Fleet tests MySQL against to 9.5.0 (unchanged), 8.4.8, 8.0.44, and 8.0.39, 8.0.44.
|
||||
- Deprecated several configuration keys in favor of new names: `custom_settings` -> `configuration_profiles`, `macos_settings` -> `apple_settings`, `macos_setup` -> `setup_experience` and `macos_setup_assistant` -> `apple_setup_assistant`.
|
||||
- Deprecated `setup_experience.bootstrap_package` in favor of `setup_experience.macos_bootstrap_package`.
|
||||
- Deprecated `setup_experience.manual_agent_install` in favor of `setup_experience.macos_manual_agent_install`.
|
||||
- Deprecated `setup_experience.enable_release_device_manually ` in favor of `setup_experience.apple_enable_release_device_manually`.
|
||||
- Deprecated `setup_experience.script` in favor of `setup_experience.macos_script`.
|
||||
- Fixed an issue where the MDM section on the integration page did not update correctly when Apple MDM is turned off.
|
||||
- Fixed an issue where iOS/iPadOS hosts couldn't add app store apps from the host library page.
|
||||
- Fixed inaccurate error message when clearing identity provider settings while end user authentication is enabled.
|
||||
- Fixed Microsoft NDES CA not being selectable after deleting an existing NDES CA without a page refresh.
|
||||
- Fixed an issue where Apple setup experience could get stuck, if the device was in the middle of a SCEP renewal, and then re-enrolled.
|
||||
- Fixed `secure.OpenFile` to self-heal incorrect file permissions via `chmod` instead of returning a fatal error.
|
||||
- Fixed an issue where personal iOS and iPadOS enrollments could see software in the self-service webclip.
|
||||
- Fixed table footer rendering unexpectedly in the host targets search dropdown.
|
||||
- Fixed a security issue where canceling a pending lock or wipe command permanently deleted the original `locked_host`/`wiped_host` activity from the audit log. The original activity is now preserved, and the subsequent cancellation activity serves as the follow-up record.
|
||||
- Fixed dropdown rendering center of a row and from pushing down save button below open dropdown options.
|
||||
- Fixed end user authentication form to allow saving cleared IdP settings.
|
||||
- Fixed inconsistent link styling in UI.
|
||||
- Fixed the error resend button overflowing over the edge of the os settings modal table.
|
||||
- Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT).
|
||||
- Fixed table shifting left when clicking the copy hash icon in host software inventory.
|
||||
- Fixed a bug where vulnerability counts increased over time due to orphaned entries remaining in the database after hosts were removed.
|
||||
- Fixed a bug where software installers could create titles with the wrong platform.
|
||||
- Fixed a bug where Fleet maintained apps for Windows won't show as available in the list when they actually are.
|
||||
- Fixed host search in live queries returning no results for observer users when many hosts on inaccessible teams matched the search term before accessible ones.
|
||||
- Fixed live query host/team targeting to correctly scope `observer_can_run` to the query's own team, preventing observers from targeting hosts on other observed teams.
|
||||
- Fixed alignment of tooltip text in the certificate details modal.
|
||||
- Fixed a bug where a policy that links a software to install fails to apply when that software package uses an environment variable in its yaml definition.
|
||||
- Fixed error message when deleting a certificate authority (that is referenced by a certificate template) to show a helpful message instead of a raw database error.
|
||||
- Fixed observer query bypass by restricting live query/report team targeting to only teams where the user has sufficient permissions, including global observers who are now limited to the query's own team when `observer_can_run` is true.
|
||||
- Fixed a bug where manage hosts page header button text would wrap and distort at certain widths.
|
||||
- Fixed an issue where `$FLEET_SECRET` was being double encoded, if set via GitOps.
|
||||
- Fixed editing reports on free tier failing due to `labels_include_any` triggering a premium license check.
|
||||
- Fixed a bug where certain incorrect resolved-in versions were reported for certain vulnerable versions of Citrix Workspace.
|
||||
- Fixed DigiCert CA UPN variable substitution so each host receives a certificate containing its own unique values instead of another host's substituted values.
|
||||
- Fixed alignment and spacing of the "rolling" tooltip next to "Arch Linux" in the host vitals card.
|
||||
- Fixed select-all header checkbox not selecting rows on partial pages where not all rows are selectable.
|
||||
- Fixed an issue where it was possible to configure manual_agent_install without specifiying a bootstrap package via the API and GitOps.
|
||||
- Fixed dead rows accumulating in software host counts tables by using an atomic table swap instead of in-place updates during the sync process.
|
||||
- Fixed a bug where script packages (.sh, .ps1) incorrectly used the unsaved script size limit (10K characters) instead of the saved script limit (500K characters), preventing large scripts from being added as software packages.
|
||||
- Fixed an issue where Windows MDM profiles could remain in pending if hosts acknowledged them too quickly after upload.
|
||||
- Fixed an issue where users with the same ID as an invited user would be hidden from the users table, and fixed the users count to include invited users.
|
||||
|
||||
## Fleet 4.82.2 (Mar 27, 2026)
|
||||
|
||||
### Bug fixes
|
||||
|
||||
- Fixed the metadata extraction for `.pkg` macOS installers, which was introduced in `4.77.0` and could prevent updating some installers that were added in a previous Fleet version.
|
||||
* **NOTE**: the fix may cause some installers that were added in Fleet `4.77.0` and later to fail to update with the message "The selected package is for different software". In this case, you will have to delete and re-add the installer. This will not only make it possible to update it successfully later, it will also create it with the correct metadata (name, version, bundle identifier).
|
||||
- **NOTE**: the fix may cause some installers that were added in Fleet `4.77.0` and later to fail to update with the message "The selected package is for different software". In this case, you will have to delete and re-add the installer. This will not only make it possible to update it successfully later, it will also create it with the correct metadata (name, version, bundle identifier).
|
||||
- Fixed FMA apps not showing up for a fleet when added via GitOps after an automated FMA version update with an unchanged binary.
|
||||
|
||||
## Fleet 4.82.1 (Mar 18, 2026)
|
||||
|
|
|
|||
|
|
@ -1 +0,0 @@
|
|||
* Changed PostJSONWithTimeout to log response body in error case.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed a bug where vulnerability counts increased over time due to orphaned entries remaining in the database after hosts were removed.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed a bug where certain incorrect resolved-in versions were reported for certain vulnerable versions of Citrix Workspace.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added patch policies for Fleet-maintained apps that automatically update when the app is updated.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Changed the way we verify Windows profiles, to no longer rely on osquery, for faster verification
|
||||
|
|
@ -1 +0,0 @@
|
|||
- updated default last opened time diff to 2m to increase the chances of updating the last opened time for software that is opened frequently
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added license checks for fleet-free targeting queries by label.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added support for NDES CA for Windows hosts.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added tooltip to batch run result host count to clarify that the count might include deleted hosts.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
- Trimmed incoming " ARM" suffix for Arch Linux hosts so Arch OSs are grouped together in the
|
||||
database and UI.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Made the host results endpoint URL consistent with the other URLs.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added automatic retries for failed software, excluding VPP app installs.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fleet UI: Normalize link styling
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed a bug where software installers could create titles with the wrong platform.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Optimized api/latest/fleet/software/titles endpoint.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed dead rows accumulating in software host counts tables by using an atomic table swap instead of in-place updates during the sync process.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added a setting allowing the user to configure whether or not the pre-filled user information is locked for macOS hosts that login via End User Authentication during Setup Experience
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed observer query bypass by restricting live query/report team targeting to only teams where the user has sufficient permissions, including global observers who are now limited to the query's own team when `observer_can_run` is true.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
* Fixed host search in live queries returning no results for observer users when many hosts on inaccessible teams matched the search term before accessible ones.
|
||||
* Fixed live query host/team targeting to correctly scope `observer_can_run` to the query's own team, preventing observers from targeting hosts on other observed teams.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
- Updated macOS device details UI to delay showing FileVault "action required" notifications banner
|
||||
during the first hour after MDM enrollment to allow sufficient time for Fleet to automatically
|
||||
escrow keys from ADE devices.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Prevented a 500 error on the host details page when an MDM command reference in `host_mdm_actions` pointed to a non-existent command (orphan reference).
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added per-IP rate limiting and response caching to the unauthenticated conditional access IdP metadata and SSO endpoints to prevent DDoS-driven database overload.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Updated determination process used for selecting which user email address to use when scheduling a maintenance event for a host failing policies.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed a bug where Fleet maintained apps for Windows won't show as available in the list when they actually are.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Allows Fleet-maintained apps to be added if they have default categories configured that are not available in older builds from this point forward.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
- Fixed the metadata extraction for `.pkg` macOS installers, which was introduced in `4.77.0` and could prevent updating some installers that were added in a previous Fleet version.
|
||||
* **NOTE**: the fix may cause some installers that were added in Fleet `4.77.0` and later to fail to update with the message "The selected package is for different software". In this case, you will have to delete and re-add the installer. This will not only make it possible to update it successfully later, it will also create it with the correct metadata (name, version, bundle identifier).
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added server config for allowing all Apple MDM declaration types.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added error if GitOps/batch attempts to add setup experience software when manual agent install is enabled
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed an issue where it was possible to configure manual_agent_install without specifiying a bootstrap package via the API and GitOps.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Refactored NewActivity functionality by moving it to the new activity bounded context.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed Microsoft NDES CA not being selectable after deleting an existing NDES CA without a page refresh.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed an issue where personal iOS and iPadOS enrollments could see software in the self-service webclip.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Removed unused and confusingly-named --mdm_apple_scep_signer_allow_renewal_days config
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added support for referencing `.sh` or `.ps1` script files directly in the GitOps `path` field for software packages.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fleet-maintained app utilization is now included in the anonymous usage statistics collected by Fleet
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed an issue where iOS/iPadOS hosts couldn't add app store apps from the host library page.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* When deleting a host record, Fleet will now clean up host issues, such as failing policies and critical vulnerabilities associated with the host.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added retry functionality when adding software installers to Fleet via GitOps.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed DigiCert CA UPN variable substitution so each host receives a certificate containing its own unique values instead of another host's substituted values.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fleet UI: Fix dropdown rendering center of a row and from pushing down save button below open dropdown options
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fleet Desktop: Surface custom transparency links to the device user
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Updated DEP enrollment flow to apply minimum macOS version check when specified.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added ability to set and manually rotate Mac recovery lock passwords.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed false positive vulnerabilities for Mattermost Desktop.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed python package false positives on Ubuntu, such as `python3-setuptools` on Ubuntu 24.04 with version 68.1.2-2ubuntu1.2
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added support to create an Android webapp and add it to Fleet to be installed during setup experience or via self-service.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added vulnerability scanning support for Windows Server 2025 hosts.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Finished migrating code from go-kit/log to slog.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed an issue where $FLEET_SECRET was being double encoded, if set via GitOps.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Made sure that data constraint errors are surfaced using the proper HTTP status code on the /api/v1/fleet/scim/Users endpoint.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Modified Android certificate renewal logic to make it easier to test.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed alignment of tooltip text in the certificate details modal.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Add support for the `paths:` key for scripts in GitOps fleet files.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Updated host software library to always allow filtering.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Migrated to using Policy `critical` option when disallowing Okta conditional access bypass
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Deprecated several configuration keys in favor of new names: `custom_settings` -> `configuration_profiles`, `macos_settings` -> `apple_settings`, `macos_setup` -> `setup_experience` and `macos_setup_assistant` -> `apple_setup_assistant`.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Reordered the columns on the Manage Hosts page
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Updated GitOps to fail runs when unknown keys are detected in files.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added OTEL instrumentation to Fleet's internal HTTP client.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed table shifting left when clicking the copy hash icon in host software inventory.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Implemented webhooks_and_tickets_enabled flag for policies in GitOps
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed alignment and spacing of the "rolling" tooltip next to "Arch Linux" in the host vitals card.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added ability to use `FLEET_JIT_USER_ROLE_FLEET_` as a prefix on SAML attributes
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Added Content-Type header to Smallstep authorization requests to prevent Cloudflare from blocking them.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed select-all header checkbox not selecting rows on partial pages where not all rows are selectable.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed inaccurate error message when clearing identity provider settings while end user authentication is enabled.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Updated UI for disabling stored report results for clarity.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed an issue where Apple setup experience could get stuck, if the device was in the middle of a SCEP renewal, and then re-enrolled.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed `secure.OpenFile` to self-heal incorrect file permissions via `chmod` instead of returning a fatal error.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added ability to omit `secrets:` in GitOps files to retain existing enroll secrets on server.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed a bug where a policy that links a software to install fails to apply when that software package uses an environment variable in its yaml definition.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added support for `paths:` key under `reports:`, `labels:` and `policies:` in GitOps .yml files.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Most top-level keys can now be omitted from GitOps files in place of supplying them with an empty value.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Updated table heading and result filter styles
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added `fleet_name` and `fleet_id` columns to hosts CSV export where needed
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
- Deprecated `setup_experience.bootstrap_package` in favor of `setup_experience.macos_bootstrap_package`
|
||||
- Deprecated `setup_experience.manual_agent_install` in favor of `setup_experience.macos_manual_agent_install`
|
||||
- Deprecated `setup_experience.enable_release_device_manually ` in favor of `setup_experience.apple_enable_release_device_manually `
|
||||
- Deprecated `setup_experience.script` in favor of `setup_experience.macos_script`
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed table footer rendering unexpectedly in the host targets search dropdown.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed a security issue where canceling a pending lock or wipe command permanently deleted the original `locked_host`/`wiped_host` activity from the audit log. The original activity is now preserved, and the subsequent cancellation activity serves as the follow-up record.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT).
|
||||
|
|
@ -1 +0,0 @@
|
|||
Added an early return in the PUT /hosts/{id}/device_mapping endpoint so that setting the same IDP email that is already stored no longer triggers unnecessary database updates, activity log entries, or profile resends.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
- Added `fleetctl new` command to initialize a GitOps folder
|
||||
- Added glob support for `configuration_profiles`
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed error message when deleting a certificate authority (that is referenced by a certificate template) to show a helpful message instead of a raw database error.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed editing reports on free tier failing due to `labels_include_any` triggering a premium license check.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed a bug where manage hosts page header button text would wrap and distort at certain widths.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Stopped duplicate Fleet-maintained app entries from showing up in setup experience.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
* Reduced database contention during the vulnerability cron.
|
||||
* Added a secondary index on `host_software(software_id)` to improve query performance.
|
||||
|
|
@ -1 +0,0 @@
|
|||
Fixed custom app icons not getting set via GitOps when the same software title exists in multiple teams.
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
- Fixed an issue where the "add Fleet-maintained app" endpoint incorrectly added software to the Unassigned fleet.
|
||||
- Muted deprecation warnings for body params when the "deprecated-field-names" topic is not enabled.
|
||||
|
|
@ -1 +0,0 @@
|
|||
Fixed FMA apps not showing up for a fleet when added via GitOps after an automated FMA version update with an unchanged binary.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed an issue where users with the same ID as an invited user would be hidden from the users table, and fixed the users count to include invited users.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed a bug where script packages (.sh, .ps1) incorrectly used the unsaved script size limit (10K characters) instead of the saved script limit (500K characters), preventing large scripts from being added as software packages.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed an issue where Windows MDM profiles could remain in pending if hosts acknowledged them too quickly after upload
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Revised which versions Fleet tests MySQL against to 9.5.0 (unchanged), 8.4.8, 8.0.39, and 8.0.42.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Fixed end user authentication form to allow saving cleared IdP settings.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Improved host search to always match against host email addresses, not only when the query looks like an email.
|
||||
|
|
@ -1 +0,0 @@
|
|||
* Improved body parsing validation by using http.MaxBytesReader and wrapping gzip decode output too.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Fixed an issue where the MDM section on the integration page did not update correctly when Apple MDM is turned off.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- Added APNs expiry banner in the UI for fleet free tier.
|
||||
|
|
@ -1 +0,0 @@
|
|||
- add resend button on the os settings modal table for ios and ipados hosts
|
||||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue