Commit graph

19881 commits

Author SHA1 Message Date
jacobshandling
d87f69563f
Fix and improve handling of "installed" software scenarios (#36516)
**Related issue:** Resolves #31973 

Addresses a few closely related issues around determining the
appropriate UI to display for installed software

- Pass the inherited host's `softwareUpdatedAt` to the handler
responsible for determining the software's "UI display status" so it can
calculate whether it is "recently installed", as intended.
- In the scenario where the above is _not_ passed in for some reason,
default to "installed" ui display status any time the software's status
is "installed"
- Add a check that ensures the above default "installed" ui status is
captured even when `installed_versions` is `null`. This scenario
previously returned an "uninstalled" ui display status, which caused
this bug initially

<img width="1720" height="880" alt="Screenshot 2025-12-01 at 12 02
29 PM"
src="https://github.com/user-attachments/assets/20874ff5-133c-4b74-8634-2cdc2d3a1497"
/>

- [x] Changes file added for user-visible changes in `changes/
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
2025-12-01 13:17:42 -08:00
Harrison Ravazzolo
5a0720cefc
Add Podman Desktop as macOS FMA (#36519) 2025-12-01 15:11:18 -06:00
Mike McNeil
c0b3517f75
Add malicious package checking (Shai-Halud only) to website CI/CD test script (#36438) 2025-12-01 15:04:10 -06:00
Juan Fernandez
ec71fb814e
Added missing detail column to host_certificate_templates (#36397)
**Related issue:** Resolves #36292 

- Allow clients to specify details about the certificate template status
change.
- Allow clients to see the details of the certificate template status
change.

---------

Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2025-12-01 14:46:14 -04:00
Magnus Jensen
a986132dcd
disable android proxy debug logging and redact auth header (#36498)
Part of QA finding, disables debug logging, since we have no good way of
toggling based on Fleet's total logging level, but also added the Auth
header redaction just for good measures.
2025-12-01 15:32:59 -03:00
Allen Houchins
e95b4cf382
Add Sublime Text as a Windows FMA (#36448) 2025-12-01 11:56:01 -06:00
Tim Lee
21b2aee4fc
Android SCEP client (#36139) 2025-12-01 10:43:26 -07:00
fleet-release
c286dd89e3
Update Fleet-maintained apps (#36497)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-12-01 11:35:54 -06:00
Mitch Francese
a00ff175ed
Add Android Studio as a macOS FMA (#36341)
- Add input manifest for android-studio
- Generate output files
- Add description to apps.json
2025-12-01 11:26:56 -06:00
Magnus Jensen
75a9170502
Always return fields for Windows MDM command result even if pending (#36483)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #31819 

I also ended up tweaking the return value for windows commands in the
`commands` endpoint, so it aligns everywhere.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

MDM Command result with a pending command:
<img width="770" height="334" alt="Screenshot 2025-12-01 at 12 36 55"
src="https://github.com/user-attachments/assets/51adb4bd-cc07-455c-8255-e1ec654521d2"
/>

MDM comman result with a result:
<img width="764" height="517" alt="Screenshot 2025-12-01 at 12 36 07"
src="https://github.com/user-attachments/assets/dec2f1c1-e756-4170-a1d0-5496dc8039b9"
/>
2025-12-01 13:53:22 -03:00
Gabriel Hernandez
37985e3df6
feat activity audit fancy search activities (#35825)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #29727

**new filters:**

<img width="720" height="931" alt="image"
src="https://github.com/user-attachments/assets/bba33904-24ae-4c12-b2ed-49152588e636"
/>

**new type filter**

<img width="411" height="433" alt="image"
src="https://github.com/user-attachments/assets/14b060df-f01b-48ce-8dff-ca01e5fad6d6"
/>

> NOTE: i will be doing a follow up PR for keyboard navigation

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

---------

Co-authored-by: Magnus Jensen <magnus@fleetdm.com>
2025-12-01 16:48:43 +00:00
Allen Houchins
13921dcc28
Add Tailscale as a Windows FMA (#36445) 2025-12-01 10:47:33 -06:00
Allen Houchins
902152b257
Add GitHub Desktop as a Windows FMA (#36444) 2025-12-01 10:12:51 -06:00
Allen Houchins
9e5496a73f
Improve darwin version validation to handle shorter osquery versions (#36391)
Add reverse prefix check in validation logic to accept cases where the
expected version (from Homebrew) is longer than what osquery reports.
This allows removing version shorteners for Twingate and Citrix
Workspace that were only shortening dot-separated version strings. This
also allows for our FMA library on fleetdm.com to represent more
accurate version strings.

- Add HasPrefix check for expected version starting with found version
- Remove TwingateVersionShortener
- Remove CitrixWorkspaceVersionShortener
- Remove citrix_workspace_version_shortener_test.go
2025-12-01 10:03:24 -06:00
Victor Lyuboslavsky
ef49ac35d9
Add policies.delete command to Android tool. (#36369)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36202
2025-12-01 10:01:15 -06:00
github-actions[bot]
53039172cb
Update versions of fleetd components in Fleet's TUF [automated] (#36478)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-12-01 12:26:11 -03:00
Mitch Francese
3cebee8e73
Add Fleet-managed app: Little Snitch for macOS (#36338)
- Add input manifest for little-snitch
- Generate output files
- Add description to apps.json
2025-12-01 08:58:16 -06:00
Lucas Manuel Rodriguez
924f0a6f52
Fix Entra conditional access integration docs (#36472) 2025-12-01 09:26:22 -05:00
Allen Houchins
55cc7cf465
Add Cisco Webex as Windows FMA (#36463) 2025-11-30 22:24:01 -06:00
Allen Houchins
5b8d596d2c
Convert Google Chrome for Windows to msi installer (#36456) 2025-11-30 20:06:48 -06:00
fleet-release
e8c2ba6d6a
Update Fleet-maintained apps (#36455)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-30 16:49:00 -06:00
Victor Lyuboslavsky
9482003394
Re-timestamping migrations due to 4.77 cherry-pick. (#36429)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677

20251112191443 -> 20251117020100
20251114102941 -> 20251117020200
2025-11-30 16:10:22 -06:00
johnjeremiah
a142fc4d87
Adding website KPIs/metrics dashboard (#35945)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves
#[13040](https://github.com/fleetdm/confidential/issues/13040)

This update to the handbook adds a section about the new looker
dashboard for website KPIs

---------

Co-authored-by: Irena Reedy <205901210+irenareedy@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 12:44:09 -06:00
fleet-release
1c0bada9a2
Update Fleet-maintained apps (#36447) 2025-11-29 12:06:12 -06:00
Tina Ong
556f5fad4d
Update README.md (#36122)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 11:42:13 -06:00
johnjeremiah
e7a9674608
Add link to ritual addition tutorial video (#36433)
Adding a short video for how to add a ritual

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-29 10:36:40 -06:00
fleet-release
c3b9fd9d8e
Update Fleet-maintained apps (#36446)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-29 08:17:30 -06:00
Allen Houchins
1dc0d5077c
Add AnyDesk as a macOS FMA (#36441) 2025-11-28 21:50:44 -06:00
Allen Houchins
10e02b21fe
Add Adobe Digital Editions as a macOS FMA (#36440) 2025-11-28 21:33:54 -06:00
fleet-release
88d4a25284
Update Fleet-maintained apps (#36435)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-28 18:00:39 -06:00
Sam Pfluger
3d941b1024
Refactor CEO scheduling and contact process (#36437)
- Consolidated and clarified instructions for scheduling time with the
CEO, moving details from communications.md to leadership.md.
- Added explicit steps for requesting CEO on-site presence and updated
contact procedures to streamline communication and ensure proper
scheduling via the Executive Assistant.
2025-11-28 16:10:14 -06:00
Eric
e81c25b867
Website: Add script to send emails for expired local Fleet Premium trials. (#36378)
Changes:
- Added a script that sends emails to users with a local Fleet Premium
trial that expired in the past 24 hours.
2025-11-28 11:42:24 -06:00
fleet-release
9cb2750477
Update Fleet-maintained apps (#36415)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
2025-11-27 21:23:38 -06:00
Allen Houchins
96ba1af696
Add Teleport Connect & Teleport Suite as macOS FMAs (#36413) 2025-11-27 21:09:03 -06:00
Lucas Manuel Rodriguez
f332f61c97
Fixes to releaser.sh (fleetd TUF) (#36409) 2025-11-27 17:06:52 -03:00
Lucas Manuel Rodriguez
bb07b47d12
Update changelog for fleetd 1.50.1 release (#36408) 2025-11-27 17:04:22 -03:00
Magnus Jensen
06761243d7
Optimize clean up apple profiles query (#36405)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35601 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] QA'd all new/changed functionality manually
2025-11-27 17:02:57 -03:00
github-actions[bot]
8a14f7c066
Update versions of fleetd components in Fleet's TUF [automated] (#36407)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2025-11-27 16:24:37 -03:00
Mason Buettner
aa0581176f
Clarify reporting of specific software configuration vulnerabilities (#36299)
Added note about reporting vulnerabilities that impact specific software
configurations.
2025-11-27 11:57:43 -05:00
Noah Talerman
144904d652
Product Design handbook: Changes to the activity feed are closed instead of merged (#36399)
Example: https://github.com/fleetdm/fleet/pull/32481
2025-11-27 11:51:41 -05:00
Noah Talerman
847707fdac
Revise quarterly roadmap blog post (#36154)
Some features are getting pushed to Q1 2026
2025-11-27 11:42:57 -05:00
Allen Houchins
46bdcaa6c0
Changing "macOS Setup Assistant" to "Setup Assistant" in frontend and guide (#36296)
We recently implemented this change:
https://github.com/fleetdm/fleet/pull/35782

I think it makes sense to capitalize Setup Assistant because it is a
proper noun. However, we should drop macOS from the name since the Setup
Assistant exists on iOS/iPadOS too and the skip panes functionality is
platform agnostic. Otherwise users may be confused on how they achieve
this on their iOS/iPadOS devices since this is so explicitly labeled as
macOS.
2025-11-27 08:16:00 -06:00
fleet-release
cd5e37bed9
Update Fleet-maintained apps (#36396)
Automated ingestion of latest Fleet-maintained app data.

Co-authored-by: mostlikelee <16102903+mostlikelee@users.noreply.github.com>
2025-11-27 08:14:00 -06:00
Mike Thomas
0d91b75c6e
Create a-new-chapter-for-device-management.md (#36392)
Publish "A new chapter for device management" blog post.
2025-11-27 19:50:09 +09:00
Mike McNeil
c4dc63a5ef
Add Ashish and John as auto-approvers for html edits (#36390) 2025-11-26 20:46:15 -06:00
johnjeremiah
40a2e79737
update announcement banner text jamf to fleet (#36358)
Responding to slack:
https://fleetdm.slack.com/archives/C01ALP02RB5/p1764178328924339
Doesn't mention jamf
=>Mike: TODO: Change to that, or something better and equally short.
2025-11-27 10:49:29 +09:00
jacobshandling
3ca1ff4754
Detect UpgradeCodes when adding Windows FMA software, and persist them when the user adds that software; Fix recently introduced issue with list host software (#35876)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #35724 

- Fixes issues 1 and 2 of the referenced bug ticket
- Also fixes [this
issue](https://github.com/fleetdm/fleet/pull/35739/files#r2548349172)

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:
- [x] Alerted the release DRI if additional load testing is needed

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added upgrade code support to Windows maintained applications for
improved MSI installer tracking and management.

* **Documentation**
* Updated Windows onboarding instructions with more precise manifest
path guidance and concrete command examples for the maintained-apps
generator.

* **Tests**
* Added comprehensive test coverage for upgrade code association with
maintained applications.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-11-26 17:00:03 -08:00
Alex Mitchell
5a10ff78f0
Update README.md (#33810)
Clarification of order forms and quotes

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2025-11-26 17:41:38 -06:00
Rachael Shaw
a7177e466a
Update permissions language about scripts (#36370)
For #28390
2025-11-26 16:52:30 -06:00
Eric
700825482c
Website: Update header navigation. (#36368)
Changes:
- Updated the "Customers" dropdown links in the header navigation menus
to reflect the recent changes
(https://github.com/fleetdm/fleet/pull/36322) to a linked case study
article
2025-11-26 16:46:54 -06:00