mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
cc6b995e22
This pull request introduces automation for keeping the Fleet macOS Safari update policy current, along with a new script for updating Safari on endpoints. The main changes include a new GitHub Actions workflow step to run an automated script that checks for the latest Safari versions, updates the policy YAML if needed, and creates a pull request with the changes. Additionally, a new endpoint script is added to perform Safari updates via `softwareupdate`. **Automation for Safari Policy Updates:** * Added `.github/scripts/dogfood-policy-updater-latest-safari.sh`, a script that fetches the latest Safari versions from the SOFA feed, compares them to the versions in `update-safari.yml`, updates the YAML if necessary, and automatically creates a pull request with reviewers assigned. * Updated `.github/workflows/dogfood-automated-policy-updates.yml` to add a step that runs the new Safari version update script as part of the workflow, using the required automation secrets. **Policy and Endpoint Script Enhancements:** * Added a new policy to `it-and-security/lib/macos/policies/update-safari.yml` that checks if the installed Safari version matches the latest for macOS 15 (Safari 18.6) and macOS 26 (Safari 26.1). * Introduced `it-and-security/lib/macos/scripts/update-safari.sh`, a script for endpoints that runs `softwareupdate` with the `--safari-only` flag, logging the outcome and requiring root privileges. |
||
|---|---|---|
| .. | ||
| collect-fleetd-logs.sh | ||
| create-conditional-access-allow-file.sh | ||
| execute-disable-fleet-desktop.sh | ||
| install-macos-compatibility-extension.sh | ||
| install-nudge.sh | ||
| install-santa-extension.sh | ||
| install-update-homebrew.sh | ||
| install-wine.sh | ||
| mdm-migration.sh | ||
| migrate-slack-preferences.sh | ||
| nudge-postinstall.sh | ||
| refetch-host.sh | ||
| remove-old-nudge.sh | ||
| santa-block-script.sh | ||
| see-automatic-enrollment-profile.sh | ||
| set-lock-screen-message.sh | ||
| system-maintenance.sh | ||
| uninstall-fleetd-macos.sh | ||
| uninstall-santa-extension.sh | ||
| update-safari.sh | ||
| user-enroll-entra-company-portal.sh | ||