Commit graph

18586 commits

Author SHA1 Message Date
Gabriel Hernandez
c99aa8cbff
dont allow cert to have same name if the same cert type in the UI (#33343)
fixes #33246

This adds logic on the UI to show an error if a cert with the same types
tries to create a new cert with an existing name
2025-09-23 17:11:10 +01:00
Jonathan Katz
11fa6ff313
Add icons for P4V, Adobe Creative Cloud (#33281)
#33124
#30817 
#28356 
## Testing

- [x] QA'd all new/changed functionality manually
2025-09-23 11:14:39 -04:00
Lucas Manuel Rodriguez
bc14761854
Add workflow to publish go modules (#33335)
For #6994.
2025-09-23 12:03:37 -03:00
Noah Talerman
25cf917d45
GitOps software migration tool: Bypass Gatekeeper (#33348) 2025-09-23 09:57:00 -05:00
Martin Angers
64f27c69aa
Bugfix: retry VPP assets API call on Apple timeout, until our own context hits its timeout (#33313) 2025-09-23 10:46:30 -04:00
Dante Catalfamo
834ab62ed0
Use new pacman table to ingest software from arch linux (#33238)
#32862
2025-09-23 10:28:32 -04:00
Magnus Jensen
4e56d53ccd
Require given and fullname from SCIM (#33336)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Followup fix for #30888

See
https://github.com/fleetdm/fleet/issues/30888#issuecomment-3321700108

Needs to be cherry-picked into 4.74

# Checklist for submitter

If some of the following don't apply, delete the relevant line.


## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-09-23 17:09:42 +03:00
Victor Lyuboslavsky
2c38e97c97
Research doc for Okta conditional access. (#33057)
**Related issue:** Resolves #32766
2025-09-23 09:06:52 -05:00
Magnus Jensen
e311e26538
fix certificate parser part 2 (#33152)
fixes: #31390 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-09-23 16:12:11 +03:00
Juan Fernandez
da07fff9da
Revert changes introduced for #28713 (#33320)
Revert changes introduced when trying to address 28713, since this won't fix the problem in question.
2025-09-23 06:32:02 -04:00
Magnus Jensen
ee10e1711a
fix inconsistent header spacing by using section header (#33095)
fixes: #30166 

Opted to use the already existing `SectionHeader` component, and it's
subtitle prop, that way we stay consistent across all pages in the
entire product.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually

## Media:

<img width="538" height="170" alt="image"
src="https://github.com/user-attachments/assets/d54b6b1c-d864-43ab-ac3b-5308267d4610"
/>

<img width="685" height="116" alt="image"
src="https://github.com/user-attachments/assets/872bd916-59cf-4e50-b1c8-6e3647008fc0"
/>
2025-09-23 09:55:11 +03:00
Steven Palmesano
eed0b92c94
Update issue link with correct FR (#32995)
The current link for a "coming soon" feature directs to a GitHub Issue
that doesn't seem to be related. After
[discussing](https://fleetdm.slack.com/archives/C06M4CRP7M4/p1757594623859339)
on Slack, it was determined that a new FR should be opened.
2025-09-22 18:34:28 -05:00
Eric
71df108561
Website: remove receive-from-zoom webhook (#33325)
Closes: https://github.com/fleetdm/fleet/issues/33284

Changes:
- Removed the receive-from-zoom webhook.
2025-09-22 18:26:36 -05:00
jacobshandling
008f9f57b2
UI: Fix browser history issues navigating between batch progress and batch details pages (#33297)
## For #33285 

- Push to details page with `status` param included to avoid that page's
effect that muddies browser history. Since tab nav on that page is
controlled by URL query params, this effect is important - there _must_
always be a status param.
- Update the details page table query change handler to replace instead
of push to the URL


https://github.com/user-attachments/assets/b15b4eda-df24-4d01-a7f4-a60a63282e63


- [x] QA'd all new/changed functionality manually

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-09-22 16:09:35 -07:00
Noah Talerman
a543a9c49e
Don't use contributor configuration (#33314)
Same language as the contributor API docs:
https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/api-for-contributors.md

Context:
https://github.com/fleetdm/fleet/issues/32669#issuecomment-3321434569
2025-09-22 17:48:16 -05:00
Lucas Manuel Rodriguez
4fc731b9b2
Skip CVE in fleetctl (#33267)
Fixes https://github.com/fleetdm/fleet/actions/runs/17906206819.
2025-09-22 18:55:08 -03:00
Scott Gress
162346c4a2
Allow fleet host ID when specifying Gitops manual label hosts (#33078)
for #32014

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [X] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- New Features
- GitOps manual labels can now reference hosts by Fleet host ID in
addition to hostname, hardware serial, or UUID.
- GitOps YAML/JSON accepts integers for host IDs; numeric IDs are
handled seamlessly alongside strings.

- Validation
- Stronger input validation for label hosts: only strings or integers
are allowed.
- Clear error returned for invalid types (e.g., floats) in hosts lists.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-09-22 13:54:30 -05:00
Allen Houchins
41f51fe02e
Update 1Password macOS version number to 8.11.10 (#33290) 2025-09-22 13:30:07 -05:00
Carlo
500d1bc5e8
Improve Android host storage display (#33125)
Builds on #27080 / #32133. Shows disk space if we can calculate it, otherwise, shows 'Not supported'. Excludes unsupported hosts from low disk space filter.
2025-09-22 14:19:54 -04:00
Victor Lyuboslavsky
e872f9a984
Update golangci-lint to v2.4.0 (#33251)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33250

Waived most new failures. Planning to come back and fix some of them in
subsequent PRs.
2025-09-22 13:17:11 -05:00
Eric
353b8d0374
Website: Update scripts-details and command-details view actions (#33286)
Changes:
- Updated view-script-details and view-command-details to throw a
`notFound` response instead of returning it.
2025-09-22 12:40:30 -05:00
Juan Fernandez
306caf0ba8
Extend error detection for cached statements (#33189)
Resolves #30779

Extend the number of errors we look for when determining whether we
should invalidate the prepared statements cache.
2025-09-22 13:12:16 -04:00
jacobshandling
1b6a7e567b
UI: 3 unreleased bug fixes (#33247)
## For #33229, #33241, #33222 

### Spacing below tabs is correct:
<img width="955" height="755" alt="Screenshot 2025-09-19 at 2 57 56 PM"
src="https://github.com/user-attachments/assets/e21adbf2-43e9-4e7a-8dfb-a5a033e3e787"
/>
<img width="1188" height="775" alt="Screenshot 2025-09-19 at 2 58 54 PM"
src="https://github.com/user-attachments/assets/12fadd73-2f0e-4e38-8126-89aab65a9f2a"
/>

### Back to script activity link has no extra width:
<img width="1188" height="775" alt="Screenshot 2025-09-19 at 3 30 26 PM"
src="https://github.com/user-attachments/assets/5d5a6cfb-5dc5-4010-b83a-0d666a52a206"
/>

### Team is maintained through script batch progress –> details –> view
all hosts flow
 (missing host name in GIF being tracked in different bug)

![ezgif-7b50802fb72e73](https://github.com/user-attachments/assets/56d3b1c9-9d29-436b-bc72-6bf90142d3f7)

- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-09-22 10:04:15 -07:00
Martin Angers
b691cd4934
Bugfix: Downgrade soap fault logging to info with soap_fault field (#33101) 2025-09-22 11:50:45 -04:00
Adam Baali
4577157e76
4 FMA's (#32460)
---------

Co-authored-by: Jonathan Katz <44128041+jkatz01@users.noreply.github.com>
Co-authored-by: jkatz01 <yehonatankatz@gmail.com>
2025-09-22 10:33:54 -05:00
Martin Angers
72571a9f8e
Feature branch for Android config profiles (#32976) 2025-09-22 11:29:57 -04:00
Kenny Botelho
bf025c9d7b
feat: add Adobe Creative Cloud as a maintained app (#30500)
This PR adds Adobe Creative Cloud as a new maintained app for macOS. The
app is available through homebrew and is used for creative software
management and installation, including access to Adobe’s suite of tools
like Photoshop, Illustrator, and Premiere Pro.

Co-authored-by: Kenny Botelho <kbotelho@nvidia.com>
2025-09-22 11:29:24 -04:00
Kenny Botelho
62d1f32c70
feat: add P4V as a maintained app (#30498)
This PR adds P4V as a new maintained app for macOS. The app is available
through homebrew and is used for accessing and managing Perforce version
control repositories via a graphical interface.

---------

Co-authored-by: Kenny Botelho <kbotelho@nvidia.com>
Co-authored-by: Jonathan Katz <44128041+jkatz01@users.noreply.github.com>
2025-09-22 11:28:33 -04:00
Allen Houchins
b394e3da18
Update fleetctl.md (#33271)
- Fixed typo
2025-09-22 09:57:26 -05:00
Gabriel Hernandez
9593c7dec4
update UI to support unenrolling android and ios and ipados devices (#32974)
resolves #31821, resolves #32120

this updates the UI to support unenrolling android and ios and ipad
devices. This includes:

**updating the host details page to include and unenroll action in the
host actions dropdown**

**Updating the unenroll modal to have dynamic content depending on the
device we are unenrolling**

**updating the global activities to have different messages for mdm
enroll and mdm unenroll actions**

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-09-22 15:41:24 +01:00
Mike Thomas
4a3ebc738a
Update how-fleet-raised-a-27m-series-b-without-a-pitch-deck.md (#33256)
Closes https://github.com/fleetdm/confidential/issues/12068

I shortened and sharpened up the Series B article by cutting about a
third of the length while keeping the narrative intact. I also updated
the meta description to be clearer and more concise.
2025-09-22 10:00:29 -04:00
Gabriel Hernandez
f399bc9eee
update my device page to allow resend of profiles (#33108)
resolves #32686

this adds the ability for users to resend profiles in the OS Settings
modal on the my device page.
This also changes which profiles can resend. Now only macos hosts
.mobileconfig profiles can be resent

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [x] QA'd all new/changed functionality manually
2025-09-22 14:31:06 +01:00
RachelElysia
5e203ce7a3
FE: Remove flakey tooltip test (#33252)
## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-09-22 12:26:30 +01:00
Marko Lisica
8b7ac56fe2
Redirect to Google Play (#33153)
Redirect to Google Play used in UI.
2025-09-22 12:27:32 +02:00
Marko Lisica
6a1e4ac170
Redirect for empty state (#33151)
Needed for empty state in #33060
2025-09-22 12:27:18 +02:00
Allen Houchins
6ccf1a00b3
Removing minimum_version to fix enrollment issues (#33258)
- Newly enrolled devices are running into issues installing macOS 26. Removing `minimum_version` requirements in favor of Nudge enforcing OS updates.
2025-09-21 23:58:04 -05:00
Eric
26e552f2c0
Docs: Update host vital queries in queries.yml (#33228)
Changes:
- Updated host vital queries in queries.yml to include changes from
134c74a94b,
e9f595a2e2,
50151f6dee,
11097befb4,
4994571c22,
39dc7a3772, and
4dfe95304b.
2025-09-19 17:32:56 -05:00
Eric
799ecca7bb
Website: Update automatic issues created for rituals (#33234)
Closes: https://github.com/fleetdm/fleet/issues/20792

Changes:
- Added support for the quarterly frequency for issues automatically
created for rituals
- Added support for templated auto-issue issue descriptions. Rituals
with an `issueDescription` value nested in the `autoIssue` object will
now use that value as the issue description when an issue for the ritual
is created.
2025-09-19 17:05:39 -05:00
Victor Lyuboslavsky
8f0800a185
Improved orbit debug logs when response contains a large HTML page. (#33195)
Resolves #33219

Note: this only fixes orbit. The issue remains on osquery:
[#33019](https://github.com/fleetdm/fleet/issues/33019)

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

## fleetd/orbit/Fleet Desktop

- [x] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [x] Verified that fleetd runs on macOS, Linux and Windows
- [x] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- Bug Fixes
  - Improved error messages when servers return HTML instead of JSON.
- Truncates oversized responses in logs to prevent overwhelming output
while preserving context.
  - More robust parsing of non-JSON error responses.

- Documentation
- Added changelog entry noting enhanced debug logging for large HTML
responses.

- Tests
- Added tests covering HTML, plain text, empty, long, and invalid JSON
error bodies to validate error message handling.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-09-19 17:00:19 -05:00
Ian Littman
f8ef5d8052
Blog post for Fleet @ GopherCon 2025 (#32701)
Ready to go, pending writing feedback and image insertion.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2025-09-20 06:32:50 +09:00
Eric
db79280f1e
Website: Update rituals table styles (#33242)
Closes: https://github.com/fleetdm/fleet/issues/31942

Changes:
- Updated the styles of ritual tables in the handbook to keep the
formatting of multi-line descriptions.
2025-09-19 16:28:01 -05:00
Eric
e706507ae5
Website: re-order sidebar links on controls pages. (#33243)
Changes:
- Updated the sidebar links on /mdm-commands, /scripts, and /os-settings
- Updated the width of the sidebar on the os-settings page to be
consistent with /mdm-commands and /scripts
2025-09-19 16:21:34 -05:00
Victor Lyuboslavsky
d6695bf299
Fixed MySQL DB performance regressions (#33184)
Resolves #33147 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

## Database migrations

- [x] Checked table schema to confirm autoupdate


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- Bug Fixes
- Resolved MySQL performance regressions from 4.73.0/4.73.1 affecting OS
versions and software titles views, improving load times and reducing
timeouts.

- Refactor
- Optimized OS vulnerabilities fetching by batching multiple OS versions
in a single request.
- Added a supporting database index to speed kernel-related
vulnerability queries.

- Tests
- Added comprehensive tests for multi-OS vulnerability retrieval, CVSS
enrichment, team-scoped data, and service endpoint behavior.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-09-19 15:35:05 -05:00
jacobshandling
994256bcaa
Refactor DiskSpaceIndicator to use ProgressBar (#33198)
## Precursor for #31671 

- Add width option to `ProgressBar`
- Refactor `DiskSpaceIndicator`
  - Use `ProgressBar` with new `width` option
  - Replace raw react tooltip with `TooltipWrapper`
  - Clean up confusing styles
- Update tests, ensure consistent style with previous implementation on
hosts table, hosts details page, my device page

<img width="1020" height="546" alt="Screenshot 2025-09-18 at 4 49 28 PM"
src="https://github.com/user-attachments/assets/a0c958d0-8b2b-466c-b169-a91dc8fb984c"
/>
<img width="1020" height="546" alt="Screenshot 2025-09-18 at 4 49 35 PM"
src="https://github.com/user-attachments/assets/f60f1e0a-573d-438b-9ded-ec45825599c1"
/>


- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2025-09-19 12:54:43 -07:00
Luke Heath
a9bf8342d2
Update github.com/ulikunitz/xz to v0.5.15 (#33221)
Resolve https://github.com/fleetdm/fleet/security/code-scanning/1445.
2025-09-19 14:47:11 -05:00
Jonathan Katz
8847ce0fab
Allow + in app names for homebrew apps (#33233)
To allow Logitech Options+ for Fleet maintained apps.
2025-09-19 15:00:23 -04:00
Eric
048fcd13ed
Website: Add controls library pages (#33143)
Related to: https://github.com/fleetdm/confidential/issues/10737

Changes:
- Added `docs/scripts.yml`, a YAML file that contains a list of scripts
- Added `docs/mdm-commands.yml`, a YAML file that contains Windows and
Apple MDM commands
- Added `/mdm-commands`, a page that contains a list of MDM commands for
Windows and Apple commands
- Added `/scripts`, a page that contains a list of scripts
- Updated the `<docs-nav-and-search>` component to have a link to the
controls library, and reordered the lists.
- Updated the build static content script to add the scripts and mdm
commands from scripts.yml and mdm-commands.yml to the website's
`builtStaticContent` configuration.
- Updated the layout of the os-settings page to match the latest
wireframes
2025-09-19 12:02:55 -05:00
Allen Houchins
ba054c43e1
Revert "Update testing-and-qa.yml" (#33223)
Reverts fleetdm/fleet#33216
2025-09-19 11:51:48 -05:00
Allen Houchins
c84145948d
Update testing-and-qa.yml (#33216)
Testing: https://github.com/fleetdm/fleet/issues/32977
2025-09-19 11:43:52 -05:00
Luke Heath
23a0f8148b
Update GitHub Actions workflow with permissions (#33220) 2025-09-19 11:19:04 -05:00