fleetdm/fleet fleet-v4.31.0

on GitHub

Changes

• Added gitops user role to Fleet. GitOps users are users that can manage configuration.

• Added the fleetctl get mdm-commands command to get a list of MDM commands that were executed. Added the GET /api/latest/fleet/mdm/apple/commands API endpoint.

• Added Fleet UI flows for uploading, downloading, deleting, and viewing information about a Fleet MDM
  bootstrap package.

• Added apple_bm_enabled_and_configured to app config responses.

• Added support for the mdm.macos_setup.macos_setup_assistant key in the 'config' and 'team' YAML
  payloads supported by fleetctl apply.

• Added the endpoints to set, get and delete the macOS setup assistant associated with a team or no team (GET, POST and DELETE methods on the /api/latest/fleet/mdm/apple/enrollment_profile path).

• Added functionality to gate Apple MDM login behind SAML authentication.

• Added new "verifying" status for MDM profiles.

• Migrated MDM status values from "applied" to "verifying" and updated associated endpoints.

• Updated macOS settings status filters and aggregate counts to more accurately reflect the status of
  FileVault settings.

• Filter out non-observer_can_run queries for observers in fleetctl get queries to match the UI behavior.

• Fall back to a previous NVD release if the asset we want is not in the latest release.

• Users can now click back to software to return to the filtered host details software tab or filtered manage software page.

• Users can now bookmark software table filters.

• Added a maximum height to the teams dropdown, allowing the user to scroll through a large number of
  teams.

• Present the 403 error page when a user with no access logs in.

• Back to hosts and back to software in host details and software details return to previous table
  state.

• Bookmarkable URLs are now the source of truth for Manage Host and Manage Software table states.

• Removed old Okta configuration that was only documented for internal usage. These configs are being replaced for a general approach to gate profiles behind SSO.

• Removed any host's packs information for observers and observer plus in UI.

• Added changed_macos_setup_assistant and deleted_macos_setup_assistant activities for the macOS setup assistant setting.

• Hide reset sessions in user dropdown for current user.

• Added a suite of UI logic for premium features in the Sandbox environment.

• In Sandbox, added "Premium Feature" icons for premium-only option to designate a policy as "Critical," as well
  as copy to the tooltip above the icon next to policies designated "Critical" in the Manage policies table.

• Added a star to let a sandbox user know that the "Probability of exploit" column of the Manage
  Software page is a premium feature.

• Added "Premium Feature" icons for premium-only columns of the Vulnerabilities table when in
  Sandbox mode.

• Inform prospective customers that Teams is a Premium feature.

• Fixed animation for opening edit user modal.

• Fixed nav bar buttons not responsively resizing when small screen widths cannot fit default size nav bar.

• Fixed a bug with and improved the overall experience of tabbed navigation through the setup flow.

• Fixed /api/_version/fleet/logout to return HTTP 401 if unauthorized.

• Fixed endpoint to return proper status code (401) on /api/fleet/orbit/enroll if secret is invalid.

• Fixed a bug where a white bar appears at the top of the login page before the app renders.

• Fixed bug in manage hosts table where UI elements related to row selection were displayed to a team
  observer user when that user was also a team and maintainer or admin on another team.

• Fixed bug in add policy UI where a user that is team maintainer or team admin cannot access the UI
  to save a new policy if that user is also an observer on another team.

• Fixed UI bug where dashboard links to hosts filtered by platform did not carry over the selected
  team filter.

• Fixed not showing software card on dashboard when clicking on vulnerabilities.

• Fixed a UI bug where fields on the "My account" page were cut off at smaller viewport widths.

• Fixed software table to match UI spec (responsively hidden vulnerabilities/probability of export column under 990px width).

• Fixed a bug where bundle information displayed in tooltips over a software's name was mistakenly
  hidden.

• Fixed an HTTP 500 on GET /api/_version_/fleet/hosts returned when mdm_enrollment_status is invalid.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

04d71e1cec50e3a16d85fc594b7f9468af7ffebcfff65c1da6bed261319b565c  fleetctl_v4.31.0_windows.zip
0f3a679b98f958468071a3e71e32a10da7de19c06e5482554464d5ae7e1ae8b9  fleetctl_v4.31.0_macos.tar.gz
11b138fad776e0aa5fd3cd117e9ecd3651efbda8dac2af44eb9b37d23bba8ddd  fleetctl_v4.31.0_windows.tar.gz
6c8660cd0a4926998ee628e21e8de8e845d88f0fd4996b8c5ede8843b4652688  fleetctl_v4.31.0_linux.tar.gz
84a958f6d8633942d99fa9481bb11d70102711807d2425423e290138a77cb0f2  fleetctl_v4.31.0_linux.zip
86cba920fcd8c6bf22bbcb217a1a95fe14a8c9dbde679810d7acd0cbfbfe5302  fleet_v4.31.0_linux.tar.gz
c54fc51fba7dd284ab008b77727ea435f19b561091181c2d4d46e63c968e5ee5  fleetctl_v4.31.0_macos.zip