mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
227e94de5b
Some checks are pending
Build binaries / build-binaries (push) Waiting to run
Check automated documentation is up-to-date / check-doc-gen (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
Deploy Fleet website / build (20.x) (push) Waiting to run
Apply latest configuration to dogfood with GitOps / fleet-gitops (push) Waiting to run
Test latest changes in fleetctl preview / test-preview (ubuntu-latest) (push) Waiting to run
golangci-lint / lint (push) Waiting to run
golangci-lint / lint-incremental (push) Waiting to run
Docker publish / publish (push) Waiting to run
Ingest maintained apps / build (push) Waiting to run
OSSF Scorecard / Validate Gradle wrapper (push) Waiting to run
OSSF Scorecard / Scorecard analysis (push) Waiting to run
Sync Maintained Apps Outputs to R2 / sync-to-r2 (push) Waiting to run
Test DB Changes / test-db-changes (push) Waiting to run
Run fleetd-chrome tests / test-fleetd-chrome (ubuntu-latest) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, vuln) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, fleetctl) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-core) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-enterprise) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, main) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, mysql) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, service) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.4.8, vuln) (push) Waiting to run
Go Tests / test-go-nanomdm (push) Waiting to run
Go Tests / test-go-no-db (fast) (push) Waiting to run
Go Tests / test-go-no-db (scripts) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, main) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, mysql) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, service) (push) Waiting to run
Go Tests / test-go (mysql:8.0.44, vuln) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, fleetctl) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-core) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, integration-mdm) (push) Waiting to run
Go Tests / test-go-extended-mysql (mysql:8.0.42, integration-enterprise) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, main) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, mysql) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, service) (push) Waiting to run
Go Tests / test-go (mysql:9.5.0, vuln) (push) Waiting to run
Go Tests / upload-coverage (push) Blocked by required conditions
Go Tests / aggregate-result (push) Blocked by required conditions
JavaScript Tests / test-js (ubuntu-latest) (push) Waiting to run
JavaScript Tests / lint-js (ubuntu-latest) (push) Waiting to run
Test Mock Changes / test-mock-changes (push) Waiting to run
Test native tooling packaging / test-packaging (local, ubuntu-latest) (push) Waiting to run
Test native tooling packaging / test-packaging (remote, ubuntu-latest) (push) Waiting to run
Test Puppet / test-puppet (push) Waiting to run
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #44723 # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes ## Testing - [x] Added/updated automated tests - [x] Where appropriate, [automated tests simulate multiple hosts and test for host isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing) (updates to one hosts's records do not affect another) - [ ] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Strengthened validation of sorting/order parameters across many list and cursor-based endpoints — unsupported sort keys now return explicit errors and prevent unsafe queries. * Labels listing: label-list pagination query name changed; ordering by host_count is rejected when host counts are disabled (validated at request parsing). * **Tests** * Added/expanded tests covering allowed order keys, rejection of unknown keys, and pagination behavior for multiple listing APIs. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com> |
||
|---|---|---|
| .. | ||
| .keep | ||
| 33557-inconsistent-team-name-conflicts | ||
| 34464-gitops-dry-run-manual-agent-install-script-conflict | ||
| 34924-expired-license-cli-banner | ||
| 35171-macos-15-cis-2.0.0 | ||
| 35172-macos-14-cis-3.0 | ||
| 35173-cis-macos-26-v1 | ||
| 35483-empty-states | ||
| 36976-activities-for-labels | ||
| 37142-local-admin-password-rotation | ||
| 38348-allow-saving-invalid-sql | ||
| 38647-remove-duplicate-disk-encryption-activity | ||
| 38785-windows-setup-experience-cancel | ||
| 39016-upload-custom-org-logo | ||
| 39570-clear-passcode | ||
| 40322-fix-ddm-pending-issues | ||
| 40322-make-ddm-name-check-case-insensitive | ||
| 40459-wipe-host-cancels-upcoming-activities | ||
| 40623-failed-enrollment-renewal | ||
| 40702-simplif-os-modal | ||
| 40856-eula-upload-updated-to-default-max-request-body-size-and-error | ||
| 40905-update-default-automatic-enrollment-profile | ||
| 40952-fallback-team-script-execution-timeout-to-global | ||
| 41147-update-input-action-buttons | ||
| 41167-skip-bootstrap-clear-on-cert-renewal | ||
| 41381-eua-ms-installer | ||
| 41565-policy-report-new-scopes-frontend | ||
| 41568-enroll-page-enroll-button-update-to-full-width-for-larger-res-mobiles | ||
| 41592-eua-broken-with-custom-apple-mdm-url | ||
| 41676-update-APNS-cert-invalid-domain-error-message | ||
| 41753-policy-details-page | ||
| 42103-accept-89-on-profile-removal | ||
| 42240-add-gitops-stats | ||
| 42290-wipe-activity | ||
| 42405-android-onc-after-cert | ||
| 42427-cleanup-stale-mdm-profiles | ||
| 42440-renew-ab-tokens-gitopsmode-dropdown-fix | ||
| 42477-gitops-dry-run-label-platform | ||
| 42494-android-pubsub-panic-deleted-host | ||
| 42545-skip-noop-host-writes | ||
| 42545-windows-profile-delete-batching | ||
| 42545-windows-profile-reconciliation-batching | ||
| 42568-host-policy-empty-state | ||
| 42607-gitops-dry-run-empty-software | ||
| 42675-conditional-download-cache | ||
| 42741-fix-goval-dictionary-fd-leak | ||
| 42751-r2-fma | ||
| 42879-api-only-user-management-ui | ||
| 42881-api-endpoints-initial-models | ||
| 42882-42880-42884-allow-creation-of-api-only-users | ||
| 42883-api-endpoint-for-listing-rest-api-endpoints | ||
| 42885-api-only-endpoints-middleware | ||
| 42972-add-fleetctl-msi-to-release | ||
| 42979-fix-for-multi-team-user | ||
| 43070-fix-exceptions-padding | ||
| 43114-pagination-bug | ||
| 43135-fix-stale-label-hosts | ||
| 43142-script-package-icon-gitops | ||
| 43162-software-table-bookmarkable-page | ||
| 43222-support-fleet-variables-in-ddm | ||
| 43228-dont-send-account-configuration-for-non-mac | ||
| 43311-script-only-pkg-gitops | ||
| 43341-gitops-mode-wonkiness | ||
| 43342-improved-button-link-styling | ||
| 43389-patch-policy-gitops-bugs | ||
| 43484-msi-docker-on-arm64 | ||
| 43591-fix-stale-host-activities | ||
| 43659-script-only-hash-ref-preserves-install-script | ||
| 43688-fix-text-alignment-issues | ||
| 43738-duplicate-installers | ||
| 43767-delete-label-error-msg | ||
| 43769-added-charts-to-dashboard | ||
| 43910-implement-chart-module | ||
| 43928-host-by-nodekey-cache | ||
| 43955-gitops-escape-json-in-vars | ||
| 43959-duplicate-installers | ||
| 43978-fma-sync-bundle-identifier-index | ||
| 44071-team-transfer-race-with-update-host | ||
| 44084-fix-install-loop-on-deleted-installer | ||
| 44124-add-vulnerabilities-chart | ||
| 44127-remove-unused-windows_updates | ||
| 44170-list-mdm-commands-perf | ||
| 44189-host-profile-perf | ||
| 44190-mdm-queue-cleanup | ||
| 44194-team-bitlocker-windows-only | ||
| 44198-ios-refetch-defensive-decoding | ||
| 44242-fleetctl-vuln-data-stream-osv | ||
| 44252-unable-to-edit-existing-user-to-use-2fa-422-error | ||
| 44298-fix-goquery-dependency-side-effects | ||
| 44422-list-mdm-commands-host-identifier-after | ||
| 44533-request-pem-certificate | ||
| 415640-policy-reports-new-custom-option | ||
| cleanup-list-opts | ||
| docs-read-replica-config-clarity | ||
| fix-android-host-software-filter | ||
| fix-hosts-in-label-filtering | ||
| fix-mdm-commands-filtering | ||
| input-field-to-ts | ||
| issue-40809-bitlocker-loop | ||
| ts6 | ||
| turn-off-prom-in-dev-mode | ||
| update-go-1.26.2 | ||