Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-21 13:37:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 91
fleet/changes
History
Jonathan Katz 0d15fd6cd6
Override patch policy query (#42322) 
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #41815
### Changes
- Extracted patch policy creation to `pkg/patch_policy`
- Added a `patch_query` column to the `software_installers` table
- By default that column is empty, and patch policies will generate with
the default query if so
- On app manifest ingestion, the appropriate entry in
`software_installers` will save the override "patch" query from the
manifest in patch_query

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements), JS
inline code is prevented especially for url redirects, and untrusted
data interpolated into shell scripts/commands is validated against shell
metacharacters.
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [x] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually
- Relied on integration test for FMA version pinning

## Database migrations

- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
2026-03-25 10:32:41 -04:00
..
.keep Issue 1009 calculate diff software (#1305) 2021-07-08 13:57:43 -03:00
14276-post-json-redact-response-body Log response body in PostJSONWithTimeout error case (#40509) 2026-02-25 15:35:29 -06:00
28091-vulnerabilities-cleanup Added vulnerabilities cleanup cron (#41195) 2026-03-10 14:03:39 -05:00
29657-custom-settings-configuration-profiles Rename custom settings to configuration profiles (#41250) 2026-03-25 10:07:53 +01:00
31303-citrix-workspace-resolved-in-version Reapply "Update Citrix Workspace CPE generation to distinguish betwee… (#41614) 2026-03-12 16:17:40 -07:00
31914-patch-policy Feat/31914 patch policy (#41518) 2026-03-13 16:47:09 -04:00
31921-windows-profile-verification-without-osquery remove windows profile osquery verification (#40539) 2026-02-27 12:21:45 -05:00
32026-last-opened-time Decrease last opened time diff (#40506) 2026-03-02 09:18:30 -07:00
32662-include-correct-cpe Generate correct CPE from malformed ipswitch whatsup CPE, ensure matches relevant CVEs (#41704) 2026-03-16 16:17:47 -05:00
33045-fleet-free-targetting-queries-by-label Added license checks when targeting queries by label (33045) (#41255) 2026-03-09 16:54:53 -04:00
33421-ndes-windows Added support for NDES CA for Windows hosts (#41356) 2026-03-12 15:36:44 -05:00
33427-batch-script-run-deleted-hosts-tooltip Added tooltip to batch run host count 2026-02-26 07:43:24 -04:00
33495-list-arch-linux-together Trim ARM suffixes from arch linux OS names (#41656) 2026-03-13 12:14:22 -07:00
33714-inconsistent-use-of-hyphen-scripts-host-results-endpoint Made Host Results endpoint URL consistent (33714) (#41501) 2026-03-13 14:00:26 -04:00
34068-software-install-retries Add retries for software installs (#39827) 2026-02-23 08:48:53 -05:00
34433-speedup-macos-profile-delivery speed up macOS profile delivery for initial enrollments (#41960) 2026-03-19 14:58:10 -05:00
35024-normalize-links-buttons Fleet UI: Clean up link styling (#41485) 2026-03-12 14:11:14 -04:00
35067-windows-pro-missing-vulnerabilities Fixed bug where Windows hosts would get 0 CVEs. (#42021) 2026-03-19 22:01:59 -05:00
35467-detail-query-config-preload Reduced redundant database calls in the osquery distributed query results hot path (#42157) 2026-03-23 10:31:12 -05:00
35484-improve-policy_membership-contention Improve contention around policy_membership table (35484) (#40853) 2026-03-16 15:12:25 -04:00
35528-wrong-title-platform Check platform when matching title ID to software installer (#39933) 2026-02-18 12:52:06 -05:00
35799-software-titles Optimized api/latest/fleet/software/titles endpoint (#40458) 2026-02-27 14:30:05 -06:00
35805-zero-host-counts Fixed dead rows accumulating in software host counts tables (#40288) 2026-02-24 15:35:02 -06:00
36032-eua-account-name Add lock end user info migrations, API support and AccountConfiguration command updates (#40551) 2026-03-02 12:16:31 -05:00
36093-live-report-cross-team-targeting Fix observer query bypass: prevent cross-team targeting (#40717) 2026-03-05 15:12:04 -03:00
36093-observer-query-bypass-followup Follow-up changes to observer live query bypass (#41146) 2026-03-11 13:42:33 -03:00
36312-trim-spaces-from-fleets-names Trim spaces on Fleet's names (36312) 2026-03-18 12:20:23 -04:00
36321-filevault-banner-hide-for-new-enrollments Improve UI for FileVault "action required" notifications banner (#41594) 2026-03-16 11:21:25 -05:00
36682-orphan-mdm-command-refs Log orphan MDM command references instead of returning 500 (#40877) 2026-03-09 09:54:14 -03:00
36799-macos-disk-space-purgeable Add disk_space fleetd table for accurate macOS disk space reporting (#41575) 2026-03-17 12:59:17 -03:00
37092-idp-throttle Added per-IP rate limiting and response caching (#41516) 2026-03-13 15:21:16 -05:00
37249-use-username-idp-email-for-maintenance-windows Prioritize using IdP email address when available for maintenance window scheduling (#37250) 2026-02-27 14:57:43 -04:00
37323-jetbrains-cve Updated ingestion/CVE logic to support Jetbrains software with 2 version numbers (#42003) 2026-03-19 11:14:14 -05:00
37802-fix-windows-fma-list Match Windows Fleet maintained apps by similar name (#40544) 2026-02-26 12:47:52 -05:00
38002-throttle-ca-certificate-profiles Throttle CA access through MDM (#42114) 2026-03-23 09:04:55 -05:00
38036-gitops-ca-delete-order Fixed GitOps failing to delete a certificate authority (#41693) 2026-03-16 15:51:28 -05:00
38041-entra-windows-conditional-access Windows conditional access: Ingest device_id from Windows devices (#41822) 2026-03-17 12:33:39 -03:00
38254-new-app-categories-on-older-builds Allow FMAs to be added when default categories don't exist (#38303) 2026-03-03 14:29:28 -05:00
38356-fix-pkg-metadata-extraction Bugfix: ignore nested .app files in .pkg metadata extraction (#40851) 2026-03-03 12:33:31 -05:00
38366-contributor-flag-for-allowing-all-declarations Skip MDM Declaration Validation logic with Configuration. (#38212) 2026-02-27 16:07:33 -05:00
38431-enforce-setup-experience-restrictions Enforce GitOps setup experience when manual agent install is enabled (#39775) 2026-02-13 16:21:39 -05:00
38432-dont-allow-mai-without-bootstrap don't allow manual_agent_install without bootstrap package (#40812) 2026-03-02 15:25:46 -05:00
38536-new-activity-bc Move NewActivity to activity bounded context (#39521) 2026-02-25 14:11:03 -06:00
38585-ndes-selection Fixed Microsoft NDES CA not being selectable (#41490) 2026-03-11 19:15:16 -05:00
38593-block-self-service-personal-enrollments block self service on personal enrollments (#41054) 2026-03-06 10:23:15 -05:00
38611-remove-unused-var Remove unused/confusing --mdm_apple_scep_signer_allow_renewal_days config (#40800) 2026-03-04 11:53:59 -05:00
38659-script-path-support Add path support to script files (#40821) 2026-03-04 13:22:44 -05:00
38779-collect-fma-usage Add Fleet-maintained apps to usage statistics payload (#38779) 2026-02-25 09:43:08 -04:00
38793-python-scripts Add Python script support for macOS and Linux (#38562) 2026-03-24 10:01:54 -04:00
38965-preserve-team-context refactor path generation (#41126) 2026-03-06 12:11:37 -05:00
39066-vpp-timeout-install-details Improve VPP errors for large install failures (#41997) 2026-03-20 15:37:42 -04:00
39082-setup-logo-light-background Save logo URL for dark and light backgrounds during setup (#41823) 2026-03-17 12:35:36 -03:00
39150-cleanup-host-isssues-on-host-delete clean up host_issues on host deletion (#40827) 2026-03-03 14:14:29 -05:00
39247-retry retry software installer download and upload during gitops (#40643) 2026-02-27 14:05:15 -05:00
39308-team-ca-read-access Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740) 2026-03-16 12:24:31 -05:00
39324-digicert-upn-host-isolation Fix DigiCert CA UPN variable substitution cross-host contamination (#40474) 2026-02-27 10:34:46 -05:00
39325-dropdown-bugginess Fleet UI: Fix dropdown rendering (#40418) 2026-02-26 11:42:00 -05:00
39465-transparency-url Fleet UI: Fix dropdown rendering (#40418) 2026-02-26 11:42:00 -05:00
39713-min-os-dep Update DEP enrollment flow to apply minimum macOS version check when specified (#40720) 2026-03-12 16:54:46 -05:00
39723-mac-recovery-lock-passwords UI: Add ability to manually rotate Mac Recovery Lock passwords (#41420) 2026-03-11 14:01:56 -07:00
39899-deterministic-cpe-matching Fixed nondeterministic CPE matching when multiple CPE candidates share the same product name (#41649) 2026-03-17 07:22:23 -05:00
39968-sso-validity-increase-default Update SSO session validity from 5 to 15 min by default (#41456) 2026-03-20 10:56:54 +01:00
40007-mattermost-desktop-cpe Fixed false positive vulnerabilities for Mattermost Desktop. (#41619) 2026-03-13 13:26:36 -05:00
40021-ubuntu-python-false-positive Fixed python package false positives on Ubuntu (#40199) 2026-02-25 15:52:09 -06:00
40024-endpoint-to-create-android-webapp Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329) 2026-03-02 15:14:19 -05:00
40036-windows-server-2025-vulns Added vulnerability scanning support for Windows Server 2025 hosts (#41232) 2026-03-10 14:03:59 -05:00
40050-server-core-msrc-differentiation Differentiate between Windows Server Core and full desktop installations (#42034) 2026-03-21 10:03:57 -05:00
40054-slog-2 Migrating MDM files to slog method signatures. (#40263) 2026-02-23 09:26:58 -06:00
40108-avoid-double-encoding-fleet-secrets avoid double encoding $FLEET_SECRET in GitOps (#40866) 2026-03-03 14:14:58 -05:00
40260-5xx-on-scim-users-endpoint Surface correct HTTP status on SCIM data constraint errors (40260) (#41530) 2026-03-13 13:22:10 -04:00
40284-android-certs Modified Android certificate renewal logic to make it easier to test. (#40635) 2026-03-02 16:25:48 -08:00
40287-fix-certificate-details-modal-tooltip-alignment Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124) 2026-03-06 14:02:51 -03:00
40302-support-glob-for-scripts Support globs in script paths in GitOps (#40799) 2026-03-02 22:18:36 -06:00
40327-filter always show the filters and search bar (#41163) 2026-03-09 09:05:36 -04:00
40415-conditional-access-critical-policy-rework Rework conditional access policy bypass conditions to use critical column (#40736) 2026-03-05 17:05:03 -05:00
40488-add-more-aliases Add aliases for macos fields (#40959) 2026-03-05 18:08:54 -06:00
40489-reorder-host-columns Reorder columns on Host page (#41180) 2026-03-07 17:32:59 -06:00
40496-detect-unknown-fields Detect unknown keys in GitOps (phase 1) (#40963) 2026-03-06 16:16:17 -06:00
40564-otel-http-client Added OTEL instrumentation to Fleet's internal HTTP client. (#40568) 2026-02-26 12:49:52 -06:00
40607-copy-icon Fixed table shifting left when clicking the copy hash icon (#41411) 2026-03-11 19:15:36 -05:00
40627-add-webhooks-and-tickets-enabled-flag Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183) 2026-03-10 15:11:27 -05:00
40641-fix-arch-linux-rolling-tooltip-alignment Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124) 2026-03-06 14:02:51 -03:00
40642-add-new-fleet-saml-attribute-prefix Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402) 2026-03-13 08:34:29 -05:00
40685-smallstep-proxy Added Content-Type header to Smallstep authorization requests (#40686) 2026-02-27 08:37:07 -06:00
40715-allow-whitespace-end-users-form Allow typing whitespaces on Settings > Integrations > SSO > End users form (#41817) 2026-03-17 12:35:25 -03:00
40789-fix-select-all-header-checkbox Fix select-all header checkbox not selecting rows in a specific case (#40940) 2026-03-04 11:39:04 -03:00
40790-fix-clear-idp-error-message Update error message when clearing End Users settings while EUA is enabled (#41243) 2026-03-10 13:20:43 -03:00
40859-update-stored-results-ui Update stored results setting UI (#40874) 2026-03-04 09:58:27 -06:00
40881-fix-stuck-setup-experience-with-scep-renewal don't short circuit scep renewal if awaiting configuration (#41523) 2026-03-16 10:37:06 -05:00
40887-fix-file-permission-self-heal Fix orbit crash loop on incorrect file permissions (#40887) 2026-03-06 17:41:31 -03:00
40900-allow-omitting-secrets-key-in-gitops Allow secrets: key to be optional in GitOps (#40901) 2026-03-03 17:16:10 -06:00
40910-correct-request-certificate-pem Update PEM header type per hydrant spec (#42052) 2026-03-19 15:37:22 -04:00
40944-fix-gitops-policy-linked-to-software-with-env-var Bugfix: gitops policy linked to software package with env var fails to apply (#40944) 2026-03-04 14:03:34 -05:00
41006-support-more-globs Add glob support to more labels, policies and reports (#41141) 2026-03-09 15:39:13 -05:00
41012-allow-omitting-top-level-gitops-keys Make most GitOps top-level optional (#41138) 2026-03-09 08:56:05 -05:00
41073-update-table-heading-styles UI: Update table heading and result filter styles (#41072) 2026-03-06 17:41:28 -06:00
41074-add-fleet-columns-to-csv Add fleet_id / fleet_name columns to CSV hosts export (#41446) 2026-03-11 11:38:07 -05:00
41091-update-multiplatform-keys Add aliases for more multi-platform setup experience fields (#41599) 2026-03-13 15:17:05 -05:00
41111-fix-table-footer-rendering Do not show table footer under Target specific hosts table (#41252) 2026-03-09 17:23:44 -03:00
41190-audit-log-entries Don't clear past lock/wipe (#41504) 2026-03-13 15:21:24 -05:00
41225-cpe-matching-reserved-keywords Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT) (#41226) 2026-03-10 14:03:25 -05:00
41239-dont-trigger-resend-on-device-mapping-if-no-changes Don't resend profiles if IdP values do not change (41239) (#41662) 2026-03-13 14:16:07 -04:00
41324-support-labels-include-all-for-installers Backend: Support labels_include_all for installers/apps (#41324) 2026-03-18 13:27:53 -04:00
41345-add-fleetctl-new Add fleetctl new command (#41909) 2026-03-20 17:27:27 -05:00
41532-ca-delete-error-message Fixed error message when deleting a certificate authority (#41635) 2026-03-13 13:25:35 -05:00
41534-host-details-reports-api-end-point New API endpoint for host reports (41534) 2026-03-18 11:03:48 -04:00
41542-android-cert-resend-backend 41542 android cert resend backend (#42099) 2026-03-23 17:01:52 -04:00
41586-admin-by-request-false-positive Fixed Admin By Request false positive CVEs (#42095) 2026-03-20 10:35:56 -05:00
41603-fix-query-responses Fix get/create/update query response (#41966) 2026-03-20 10:30:52 -05:00
41631-not-installed fix usage of query params in host software endpoint (#42302) 2026-03-24 17:53:19 -04:00
41644-improve-cpe-matching Improved cpe deterministic matching (#42325) 2026-03-24 17:48:02 -05:00
41652-fix-reports-edit Fixed editing reports on free tier failing due to triggering a premium license check (#41747) 2026-03-16 11:42:58 -03:00
41653-disallow-header-button-wraps Disallow manage hosts page header buttons from wrapping text (#41654) 2026-03-13 09:02:40 -07:00
41663-duplicates fix issue with duplicate entries in setup experience for FMAs (#41685) 2026-03-13 18:10:55 -04:00
41664-vulnerability-cron-db-contention Use swap table pattern and batch delete to improve DB access patterns for vuln cron (#41729) 2026-03-17 10:34:52 -05:00
41672-allow-omitting-manual-hosts-label Allow hosts key to be empty for manual labels (#42022) 2026-03-20 10:36:14 -05:00
41688-fix-icons-via-gitops Fix icon upload for multi-team software titles (#41785) 2026-03-17 06:55:22 -04:00
41742-fix-my-device-500-fleet-free Fixed 500 and 402 on My Device page. (#41748) 2026-03-16 16:09:43 -05:00
41771-fix-fma-endpoint Fix addFleetMaintainedAppEndpoint to accept fleet_id param (#41805) 2026-03-17 09:59:03 -05:00
41778-fix-enqueue-setup-experience-items-for-arch-linux Bugfix: properly enqueue compatible setup experience items for arch/omarchy linux (#41778) 2026-03-17 15:04:33 -04:00
41815-override-patch-policy-query Override patch policy query (#42322) 2026-03-25 10:32:41 -04:00
41888-otel-service-name Allow OTEL service name to be overridden (#41890) 2026-03-18 13:59:28 -05:00
42017-host-details-reports-tab [Host details > Reports] Frontend changes (#42017) 2026-03-24 10:45:34 -03:00
42185-add-flatcar-coreos-linux-platforms Add Flatcar Container Linux and CoreOS to recognized Linux platforms (#42186) 2026-03-23 10:33:48 -03:00
42260-fix-fma-apps-via-gitops Fix missing FMA apps added via GitOps (#42306) 2026-03-24 10:53:23 -04:00
bump-mysql Bump MySQL test version from 8.0.39 to 8.0.42 (#42122) 2026-03-20 14:24:29 -05:00
bump-mysql-8.0.42 Bump MySQL test version from 8.0.39 to 8.0.42 (#42122) 2026-03-20 14:24:29 -05:00
fix-end-user-auth-clear-form Fix end user auth form: allow saving cleared IdP settings (#40424) 2026-02-27 17:09:54 -03:00
host-search-always-match-email Improve host search by end user email address (#40197) 2026-02-24 11:25:00 -03:00
improve-body-validation Use http.MaxBytesReader on the raw body and on the gzip decode output (#42265) 2026-03-25 06:27:58 -03:00
issue-38546-fix-mdm-page-update fix issue where mdm page wasnt updating properly when turning off apple mdm (#40854) 2026-03-05 17:02:21 +00:00
issue-39184-apns-banner-fix show apns expiration banner in UI for free tier (#40936) 2026-03-04 13:12:33 +00:00
issue-40684-no-resend-button allow ios and ipados hosts profiles to be resent (#40684) 2026-02-27 17:03:52 +00:00
issue-40697-fix-os-setting-overflow fix overflow of button off the table on the os settings modal (#40697) 2026-02-27 17:04:14 +00:00
refactor-named-functions-nil-checks Refactored to improve NilAway coverage (#42106) 2026-03-19 22:01:44 -05:00
up-default-software-batch up default limit for software batch (#41827) 2026-03-17 10:20:09 -05:00
update-go-1.26.1 Updated go to 1.26.1 (#42027) 2026-03-19 07:01:00 -05:00