fleet/server/datastore/mysql
Jordan Montgomery 5679052134
Fix exclude-any label scoping on non-osquery platforms (#35353)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33132 

Changes label scoping logic to handle manual labels without needing the
host's label_updated_at at all and to update Android/iOS hosts'
label_updated_at on checkins so they update at a similar cadence to
platforms where they're actually supported and should we ever support
queries on those hosts should "just work"

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [x] Confirmed that the fix is not expected to adversely impact load
test results
- [x] Alerted the release DRI if additional load testing is needed

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2025-11-12 10:16:01 -05:00
..
common_mysql Add Read-only Transaction to fetch profiles to install and remove all at once (#32737) 2025-09-10 09:29:04 -04:00
migrations Add gitops support for in house apps (#35423) 2025-11-11 16:38:54 -05:00
testdata Ingest, store, consider in unique_identifier, and serve upgrade_codes for Windows software (#34786) 2025-11-07 15:33:31 -08:00
activities.go My device page (self-service) for iOS/iPadOS (#35238) 2025-11-07 17:30:51 -05:00
activities_test.go CP: Fix activity logs for failed script package installations (#35124) 2025-11-04 08:24:34 -05:00
aggregated_stats.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
aggregated_stats_test.go
android.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
android_device_test.go Feature branch for Android config profiles (#32976) 2025-09-22 11:29:57 -04:00
android_enterprise_test.go Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
android_enterprises.go Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
android_hosts.go Feature branch for Android config profiles (#32976) 2025-09-22 11:29:57 -04:00
android_mysql.go Merge Android datastore into main Fleet datastore (#32233) 2025-08-25 11:41:28 -04:00
android_test.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
app_configs.go Improved performance when modifying config with a large number of yara rules (#32696) 2025-09-08 10:24:22 -05:00
app_configs_test.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
apple_mdm.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
apple_mdm_ddm_test.go Updated SQL modes in tests to match production. (#31445) 2025-08-03 08:18:13 +02:00
apple_mdm_test.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
ca_config_assets.go Add custom SCEP configs (#27045) 2025-03-14 12:16:51 -05:00
ca_config_assets_test.go Add custom SCEP configs (#27045) 2025-03-14 12:16:51 -05:00
calendar_events.go Enable staticcheck Go linter. (#23487) 2024-11-05 11:16:24 -06:00
calendar_events_test.go Handle null HostID on calendar webhook endpoint (#30130) 2025-06-23 13:10:10 -04:00
campaigns.go Add CleanupCompletedCampaignTargets to cleanup old campaign targets. (#32385) 2025-08-28 11:04:05 -05:00
campaigns_test.go Add CleanupCompletedCampaignTargets to cleanup old campaign targets. (#32385) 2025-08-28 11:04:05 -05:00
carves.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
carves_test.go
certificate_authorities.go EST certificate proxy backend and configs (#34689) 2025-11-04 16:27:15 -05:00
certificate_authorities_test.go EST certificate proxy backend and configs (#34689) 2025-11-04 16:27:15 -05:00
challenges.go Update documentation for custom SCEP proxy (#29971) 2025-06-16 12:00:27 -05:00
conditional_access_microsoft.go Microsoft Compliance Partner backend changes (#29540) 2025-06-11 14:22:46 -03:00
conditional_access_microsoft_test.go Add app_sso_platform table to orbit and use table in Entra ID query ingestion (#30140) 2025-06-20 17:01:38 -03:00
conditional_access_scep.go Okta IdP factor (#35143) 2025-11-07 16:19:25 -06:00
conditional_access_scep_test.go Okta IdP factor (#35143) 2025-11-07 16:19:25 -06:00
config.go Refactoring common mysql (#26367) 2025-02-18 15:28:54 -06:00
cron_stats.go Monitor and alert on errors in cron jobs (#24347) 2024-12-19 15:55:29 -06:00
cron_stats_test.go Monitor and alert on errors in cron jobs (#24347) 2024-12-19 15:55:29 -06:00
delete.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
delete_test.go
disk_encryption.go Refactoring suggested in #31634 (#31839) 2025-08-13 10:24:32 -04:00
disk_encryption_test.go Added new global activity when disk encryption key is escrowed (#31634) 2025-08-08 12:14:48 -04:00
email_changes.go
email_changes_test.go
errors.go Extend error detection for cached statements (#33189) 2025-09-22 13:12:16 -04:00
fulltext.go Update to Go 1.24.1 (#27506) 2025-03-31 11:14:09 -05:00
fulltext_test.go
host_certificates.go Support $FLEET_VAR_SCEP_RENEWAL_ID in OU field (#34403) 2025-10-17 12:47:04 -05:00
host_certificates_test.go DCSW: Allow Windows profiles to hit SCEP Proxy (#35041) 2025-11-06 11:14:49 -03:00
host_identity_scep.go My device page (self-service) for iOS/iPadOS (#35238) 2025-11-07 17:30:51 -05:00
host_identity_scep_test.go Fleet server verifies HTTP signature (#30825) 2025-07-16 20:08:27 +02:00
hosts.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
hosts_test.go Okta SCEP endpoint (#34721) 2025-11-06 17:07:17 -06:00
in_house_apps.go Return icon in in-house app metadata (#35568) 2025-11-12 09:37:54 -05:00
in_house_apps_test.go GitOps: support categories for in-house apps gitops (#35531) 2025-11-12 09:06:16 -05:00
invites.go Allow opting in users to email verification on login (#24273) 2024-12-05 08:37:10 -06:00
invites_test.go Allow opting in users to email verification on login (#24273) 2024-12-05 08:37:10 -06:00
jobs.go Cancel batch execution API (#31757) 2025-08-11 15:17:57 -04:00
jobs_test.go Allow worker to filter queue by job type (#31556) 2025-08-06 17:22:48 -05:00
labels.go Initial support for in-house apps on iOS/iPadOS (#34802) 2025-10-28 08:33:58 -04:00
labels_test.go Add gigs_all_disk_space vital collection, storage, service, and UI rendering for Linux hosts (#34077) 2025-10-17 08:24:23 -07:00
linux_mdm.go Linux OS settings + disk encryption host filter fixes (#24200) 2024-11-26 19:26:22 -06:00
linux_mdm_test.go Added new global activity when disk encryption key is escrowed (#31634) 2025-08-08 12:14:48 -04:00
locks.go Optimize software_titles query to use indexes (#25722) 2025-01-23 15:48:21 -03:00
locks_test.go Improvements for select next Apple MDM command query. (#24128) 2024-12-05 12:02:48 -06:00
maintained_apps.go Support for fleet maintained apps in gitops (#28751) 2025-05-07 18:16:08 -05:00
maintained_apps_test.go Persist download URL when adding FMAs via non-GitOps API, fix software versions on GitOps YAML generation (#30331) 2025-06-26 14:29:23 -05:00
mdm.go DCSW: Add managed certificate entry for Windows SCEP profiles. (#34964) 2025-10-31 12:53:09 -03:00
mdm_idp_accounts_test.go Add IdP email to host vitals (#32807) 2025-09-10 13:54:42 -04:00
mdm_test.go DCSW: Add managed certificate entry for Windows SCEP profiles. (#34964) 2025-10-31 12:53:09 -03:00
microsoft_mdm.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
microsoft_mdm_test.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
migrations_test.go Revise 4.76 migrations to land after all 4.75 migrations (#34479) 2025-10-17 17:55:57 -05:00
mysql.go Okta SCEP endpoint (#34721) 2025-11-06 17:07:17 -06:00
mysql_test.go Refactoring common mysql (#26367) 2025-02-18 15:28:54 -06:00
nanomdm_storage.go Add lost mode behaviour for iOS/iPadOS (#33805) 2025-10-14 11:30:05 -03:00
nanomdm_storage_test.go Add lost mode behaviour for iOS/iPadOS (#33805) 2025-10-14 11:30:05 -03:00
operating_system_vulnerabilities.go os_versions endpoint performance improvements (#34897) 2025-11-03 13:07:44 -06:00
operating_system_vulnerabilities_batch_test.go os_versions endpoint performance improvements (#34897) 2025-11-03 13:07:44 -06:00
operating_system_vulnerabilities_test.go os_versions endpoint performance improvements (#34897) 2025-11-03 13:07:44 -06:00
operating_systems.go Android scaffold (#26274) 2025-02-13 14:32:19 -06:00
operating_systems_test.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
packs.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
packs_test.go Enable staticcheck Go linter. (#23487) 2024-11-05 11:16:24 -06:00
password_reset.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
password_reset_test.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
policies.go Prevent deadlocks by adding FOR UPDATE locks (#32173) 2025-08-22 12:36:03 -05:00
policies_test.go Add missing platform_like during orbit enrollment (#32671) 2025-09-05 16:05:19 -03:00
queries.go Refactor ApplyQueries to improve performance (#32394) 2025-09-03 12:54:02 -04:00
queries_test.go Fixing PR review comments (#31550) 2025-08-03 16:41:38 +02:00
query_results.go Added server_settings.query_report_cap (#19692) 2024-06-14 12:24:01 -03:00
query_results_test.go 30311: Fix race condition in test (#30903) 2025-07-17 10:20:49 -04:00
scep.go Add SCEP endpoint for host identity. (#30589) 2025-07-11 11:44:07 -03:00
scep_test.go Updated SQL modes in tests to match production. (#31445) 2025-08-03 08:18:13 +02:00
scheduled_queries.go Update to Go 1.24.1 (#27506) 2025-03-31 11:14:09 -05:00
scheduled_queries_test.go
schema.sql Add gitops support for in house apps (#35423) 2025-11-11 16:38:54 -05:00
scim.go Add full name IdP Fleet variable to Apple configuration profiles (#32246) 2025-08-26 17:55:58 +02:00
scim_test.go IDP user update API (#34332) 2025-10-21 12:02:25 -06:00
scripts.go Add lost mode behaviour for iOS/iPadOS (#33805) 2025-10-14 11:30:05 -03:00
scripts_test.go Fix Orbit-canceled script runs being counted as "pending" (#33300) 2025-09-23 12:22:28 -05:00
secret_variables.go Prevent IT admins from deleting a secret variable in use (#32161) 2025-08-22 11:22:37 -03:00
secret_variables_test.go Prevent IT admins from deleting a secret variable in use (#32161) 2025-08-22 11:22:37 -03:00
sessions.go Include expiration info, drop "personalized", in MFA email (#24630) 2024-12-10 18:58:40 -06:00
sessions_test.go Include expiration info, drop "personalized", in MFA email (#24630) 2024-12-10 18:58:40 -06:00
setup_experience.go Fleet UI: Show run/running for setup experience software scripts (#34938) 2025-10-30 09:41:36 -04:00
setup_experience_test.go Fleet UI: Show run/running for setup experience software scripts (#34938) 2025-10-30 09:41:36 -04:00
software.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
software_installers.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
software_installers_test.go Add gitops support for in house apps (#35423) 2025-11-11 16:38:54 -05:00
software_test.go Fix exclude-any label scoping on non-osquery platforms (#35353) 2025-11-12 10:16:01 -05:00
software_title_display_names.go software display names: DB changes (#35066) 2025-11-04 10:04:42 -05:00
software_title_icons.go Followup: fix edit IHA title icon activity (#35439) 2025-11-10 12:40:47 -05:00
software_title_icons_test.go Return icon in in-house app metadata (#35568) 2025-11-12 09:37:54 -05:00
software_titles.go Ingest, store, consider in unique_identifier, and serve upgrade_codes for Windows software (#34786) 2025-11-07 15:33:31 -08:00
software_titles_test.go Ingest, store, consider in unique_identifier, and serve upgrade_codes for Windows software (#34786) 2025-11-07 15:33:31 -08:00
statistics.go Add statistic to measure ABM pending hosts (#28226) 2025-04-15 11:30:07 -04:00
statistics_test.go Add statistic to measure ABM pending hosts (#28226) 2025-04-15 11:30:07 -04:00
targets.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
targets_test.go Add missing platform_like during orbit enrollment (#32671) 2025-09-05 16:05:19 -03:00
teams.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
teams_test.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
testing_utils.go Add gitops support for in house apps (#35423) 2025-11-11 16:38:54 -05:00
unicode_test.go Bugfix: only count hosts that user has permission to see in count field of label endpoints (#18859) 2024-05-21 12:02:08 -04:00
users.go Prevent user invite race condition (#29559) 2025-05-29 15:26:02 -04:00
users_test.go Prevent user invite race condition (#29559) 2025-05-29 15:26:02 -04:00
vpp.go Rename team DB methods to encourage lighter-weight usage (#35572) 2025-11-12 08:09:49 -06:00
vpp_test.go software display names: DB changes (#35066) 2025-11-04 10:04:42 -05:00
vulnerabilities.go Improved MySQL query performance software versions and vulnerabilities endpoints (#34262) 2025-10-17 09:57:47 -05:00
vulnerabilities_test.go Fix insufficient deduplication on vulnerabilities count query (#31021) 2025-07-17 17:40:21 -05:00
windows_updates.go
windows_updates_test.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
wstep.go Add SCEP endpoint for host identity. (#30589) 2025-07-11 11:44:07 -03:00
wstep_test.go