fleetdm/fleet fleet-v4.51.0 on GitHub

Endpoint Operations

Added support for environment variables in configuration profiles for GitOps.
fleetctl gitops --dry-run now errors on duplicate (or conflicting) global/team enroll secrets.
Added activities_webhook configuration option to allow for a webhook to be called when an activity is recorded. This can be used to send activity data to external services. If the webhook response is a 429 error code, the webhook retries for up to 30 minutes.
Added Tuxedo OS to the Linux distribution platform list.

Device Management (MDM)

NOTE: Added new required Fleet server config environment variable when MDM is enabled,
FLEET_SERVER_PRIVATE_KEY. This variable contains the private key used to encrypt the MDM
certificates and keys stored in Fleet. Learm more at
https://fleetdm.com/learn-more-about/fleet-server-private-key.
Added MDM support for iPhone/iPad.
Added software self-service support.
Added query parameter self_service to filter the list of software titles and the list of a host's software so that only those available to install via self-service are returned.
Added the device-authenticated endpoint POST /device/{token}/software/install/{software_title_id} to self-install software.
Added new endpoints to configure ABM keypairs and tokens.
Added GET /fleet/mdm/apple/request_csr endpoint, which returns the signed APNS CSR needed to activate Apple MDM.
Added the ability to automatically log off and lock out Administrator users on Windows hosts.
Added clearer error messages when attempting to set up Apple MDM without a server private key configured.
Added UI for the global and host activities for self-service software installation.
Updated UI to support new workflows for macOS MDM setup and credentials.
Updated UI to support software self-service features.
Updated UI controls page language and hid CTA button for users without access to turn on MDM.

Vulnerability Management

Updated the CIS policies for Windows 11 Enterprise from v2.0.0 (03-07-2023) to v3.0.0 (02-22-2024).
Fleet now detects Ubuntu kernel vulnerabilities from the Canonical OVAL feed.
Fleet now detects and reports vulnerabilities on Firefox ESR editions on macOS.

Bug fixes and improvements

Fixed a bug that might prevent enqueuing commands to renew SCEP certificates if the host was enrolled more than once.
Prevented the host_ids field from being returned from the list labels endpoint.
Improved software ingestion performance by deduplicating incoming software.
Placed all form field label tooltips on top.
Fixed a number of related issues with the filtering and sorting of the queries table.
Added various optimizations to the rendering of the queries table.
Fixed host query page styling bugs.
Fixed a UI bug where "Wipe" action was not being hidden from observers.
Fixed UI bug for builtin label names for selecting targets.
Removed references to Administrator accounts in the comments of the Windows lock script.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

orbit-v1.26.0 (pending release week of 2024-06-09)
fleet-desktop-v1.26.0 (included with Orbit)
fleetd-chrome-v1.3.1

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

a41b226ee731ac6c200b17e4367a5f57515f826896aed0a37f0595f9fe68b979  fleet_v4.51.0_linux.tar.gz
4a45903123dc54041be3142c9736129aad4a5a440d1f0388e0b8875808cc3d56  fleetctl_v4.51.0_linux.tar.gz
ed716e9d8a9382928e6a20bbac0f2245b7996125d9d86ace9c9a88fb9f8e4fde  fleetctl_v4.51.0_linux.zip
639d2a5d5cab0b60d2f2d22c835f997db1b16cf5ac4a8d88f3c91d43247d359d  fleetctl_v4.51.0_macos.tar.gz
244b58636bb8104b7b48fbb09402827ad91fd9424a1cb9dc15f8ca353718906d  fleetctl_v4.51.0_macos.zip
f99653446a9eb4dbc8bb2bcbef659f8fe2af69d5ad9319eaba68c394cb1c2b06  fleetctl_v4.51.0_windows.tar.gz
568be7e64dc6dd20516910fe1cd2db611fee2b3051b2ff81ca1ef092bf3bbd91  fleetctl_v4.51.0_windows.zip