fleetdm/fleet fleet-v4.44.0

on GitHub

Changes

• Endpoint operations:

  • Removed rate-limiting from /api/fleet/orbit/ping and /api/fleet/device/ping endpoints.
  • For Windows hosts, fleetd now uses Windows Credential Manager for enroll secret.
  • For macOS hosts, fleetd stores and retrieves enroll secret from macOS keychain for non-MDM flow.
  • Query reports feature now supports a custom pack_delimiter in agent settings.
  • Packaged fleetctl for macOS as a universal binary (native support for both amd64 and arm64 architectures).
  • Added new flow for fleetctl package --type=msi on macOS using arm64 processor.
  • Teams can now configure their own host expiry settings.
  • Added UI for host details activity card.
  • Added host_count_updated_at to policy API responses.
  • Added "Run script" action to host details page.
  • Created the "script ran" activity linked to its host.
  • Updated host details page and GET /api/v1/fleet/hosts/:id endpoint so that failing policies are listed first.

• Device management (MDM):

  • Added new endpoints GET /api/v1/fleet/mdm/manual_enrollment_profile and scripts related endpoints (/hosts/:id/activity, /hosts/:id/activity/upcoming).
  • Added support for label-based MDM profiles reconciliation.
  • Improved MDM migration puppet module.
  • Added Windows scripts for MDM unenrollment and fleetd removal.
  • Added the profile's labels object to MDM profiles response payload.
  • Updated UI with ability to target MDM profiles by label.
  • Added ability to configure custom configuration_web_url values in DEP profile.
  • Fixed a bug causing MDM SSO to fail with certain configurations.
  • Fixed queries reporting inconsistent MDM enrollment status in Windows.

• Vulnerability management:

  • Added support for detecting operating system vulnerabilities for macOS and Windows.
  • Corrected Windows OS false negative for multiple OS build remediations.
  • Fixed issue with incorrect resolved_in_version for vulnerabilities.

Bug fixes and improvements

• Added "No report" text for query results not saved in Fleet.
• Updated forms across the UI for consistent styling.
• Improved UX for globally enabling/disabling SSO.
• Added new consistent header styling across the app.
• Clearer browser page titles and CTAs for Observer+.
• Updated logging destination failure response to return a 4xx error instead of 500.
• Addressed issues with query reports and host expiry settings.
• Resolved platform compatibility checker issues with deprecated osquery tables.
• Updated Go to version 1.21.6.
• osquery flag validation updated for osquery 5.11.
• Fixed validation and error handling for /api/fleet/orbit/device_token and other endpoints.
• Fixed UI bugs in script functionality, side navigation content headers, and premium message alignment.
• Fixed a bug in searching for hosts by email addresses.
• Fixed issues with sticky errors in fleetd-chrome after querying privacy_preferences table.
• Fixed a bug where Munki issues section was incorrectly displayed.
• Fixed OS compatibility calculation for certain queries.
• Fixed a bug where capital characters would not match labels containing them.
• Fixed bug in manage hosts UI where changing the dropdown filter did not clear OS settings filter.
• Fixed a bug in fleetctl where --context and --debug flags were not allowed after certain commands.
• Fixed a bug where the UUID for Windows updates profiles was missing the "w" prefix.
• Fixed a UI bug on the controls page in team targeting forms.
• Fixed a bug where policy automations when saved were resetting automations on other pages.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

85f0b24d9e734c48dfe285aece6b7decb23eaa976590245adf67e43b1bc222d1  fleet_v4.44.0_linux.tar.gz
6de3528cac2c68c0f14a98474db820bb8291b49ab63727e52d58d29288af3fa7  fleetctl_v4.44.0_linux.tar.gz
0cbf3ed058d43997b5b034e7c60de64b16ef94a3578358eaf0b4b4a9e6777446  fleetctl_v4.44.0_linux.zip
3f3ab39136e22d9cf714ab609d182d079a5cf2c6acf36d26ec9d88b64b209509  fleetctl_v4.44.0_macos.tar.gz
69ea24257c033294c33d7bb036d7ea550a75d00c2313c6d4ef25126b67d7a574  fleetctl_v4.44.0_macos.zip
b3f41948b9d55320be0884cdf9634a30089348e31bcb8a6675f75094167c741e  fleetctl_v4.44.0_windows.tar.gz
40c8f1e14c24fe384c4ed1845716ea52b391c9a867838f0a817e60d9eff6f941  fleetctl_v4.44.0_windows.zip