fleetdm/fleet fleet-v4.49.0 on GitHub

Changes

Endpoint operations

Added integration with Google Calendar for policy compliance events.
Added new API endpoints to add/remove manual labels to/from a host.
Updated the POST /api/v1/fleet/labels and PATCH /api/v1/fleet/labels/{id} endpoints to support creation and update of manual labels.
Implemented changes in fleetctl gitops for batch processing queries and policies.
Enabled setting host status webhook at the team level via REST API and fleetctl apply/gitops.

Device management (MDM)

Added API functionality for creating DDM declarations, both individually and as a batch.
Added creation or update of macOS DDM profile to enforce OS Updates settings whenever the settings are changed.
Updated fleetctl run-script to include new --team and --script-name flags.
Displayed disk encryption status in macOS as "verifying" while verifying the escrowed key.
Added the enable_release_device_manually configuration setting for teams and no team, which controls the automatic release of a macOS DEP-enrolled device.

Vulnerability management

Ignored Valve Corporation's Steam client's vulnerabilities on Windows and macOS due to retrieval challenges of the true version.
Updated the GET fleet/os_versions and GET fleet/os_versions/[id] to restrict team users from accessing os versions on hosts from other teams.

Bug fixes and improvements

Upgraded Golang version to 1.21.7.
Added a minimum supported node version in the package.json.
Made block_id mismatch errors more informative as 400s instead of 500s.
Added Windows MDM support to the osquery-perf host-simulation command.
Updated calendar events automations to not show error validation on enabling the feature.
Migrated MDM-related endpoints to new paths while maintaining support for old endpoints indefinitely.
Added a missing database index to the MDM Windows enrollments table to improve performance at scale.
Added cross-platform check for duplicate MDM profiles names in batch set MDM profiles API.
Fixed a bug where Microsoft Edge was not reporting vulnerabilities.
Fixed an issue with the 20240327115617_CreateTableNanoDDMRequests database migration.
Fixed the error message to indicate if a conflict on uploading an Apple profile was caused by the profile's name or its identifier.
Fixed license checks to allow migration and restoring DEP devices during trial.
Fixed a 500 error in MySQL 8 and when DB user has insufficient privileges for fleetctl debug db-locks and fleetctl debug db-innodb-status.
Fixed a bug where values not derived from "actual" fleetd-chrome tables were not being displayed correctly.
Fixed a bug where values were not being rendered in host-specific query reports.
Fixed an issue with automatic release of the device after setup when a DDM profile is pending.
Fixed UI issues: alignment bugs, padding around empty states, tooltip rendering, and incorrect rendering of the global Host status expiry settings page.
Fixed a bug where null or excluded smtp_settings caused a UI 500 error.
Fixed an issue where a bad request response from a 3rd party MDM solution would result in a 500 error in Fleet during MDM migration.
Fixed a bug where updating policy name could result in multiple policies with the same name in a team.
Fixed potential server panic when events are created with calendar integration, but then global calendar integration is disabled.
Fixed fleetctl gitops dry-run validation issues when enabling calendar integration for the first time.
Fixed a bug where all Windows MDM enrollments were detected as automatic.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

orbit-v1.24.0
fleet-desktop-v1.24.0 (included with Orbit)
fleetd-chrome-v1.2.0

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Binary Checksum

SHA256

017439a15b04aafd322811f9812262e02f5f0bdf2aa252d46a06d7d118dd24f4  fleet_v4.49.0_linux.tar.gz
92f9a5bbfd116c4e20227af72b651b95a4190b346cb391762d0d50f5245d3355  fleetctl_v4.49.0_linux.tar.gz
54d84eaf8b6d8d6d0b865c39b39a8253c079d571e066d02b50c5d0dd50d1be74  fleetctl_v4.49.0_linux.zip
5b0b491a401d5031b75aaa1bfe8ab32d55befb03d7cb627de72409fce0b5a103  fleetctl_v4.49.0_macos.tar.gz
2fc0ed12ef82482e5f7afc1fc61e25f43139421f3a999d366ac1a403b33ece3c  fleetctl_v4.49.0_macos.zip
fb998e66174bc1cee14dff001bec28d4a43ad753885a95f25015d71db8ff39fb  fleetctl_v4.49.0_windows.tar.gz
b7678c523152e65ff7b537cafde3fd5ef076ea35e59c3c9148b44a7e6aee796d  fleetctl_v4.49.0_windows.zip