fleetdm/fleet fleet-v4.60.0 on GitHub

Fleet 4.60.0 (Nov 27, 2024)

Endpoint operations

Added support for labels_include_any to gitops.
Added major improvements to keyboard accessibility throughout app (e.g. checkboxes, dropdowns, table navigation).
Added activity item for fleetd enrollment with host serial and display name.
Added capability for Fleet to serve YARA rules to agents over HTTPS authenticated via node key (requires osquery 5.14+).
Added a query to allow users to turn on/off automations while being transparent of the current log destination.
Updated UI to allow users to view scripts (from both the scripts page and host details page) without downloading them.
Updated activity feed to generate an activity when activity automations are enabled, edited, or disabled.
Cancelled pending script executions when a script is edited or deleted.

Device management (MDM)

Added better handling of timeout and insufficient permissions errors in NDES SCEP proxy.
Added info banner for cloud customers to help with their windows autoenrollment setup.
Added DB support for "include any" label profile deployment.
Added support for "include any" label/profile relationships to the profile reconciliation machinery.
Added team_identifier signature information to Apple macOS applications to the /api/latest/fleet/hosts/:id/software API endpoint.
Added indicator of how fresh a software title's host and version counts are on the title's details page.
Added UI for allowing users to install custom profiles on hosts that include any of the defined labels.
Added UI features supporting disk encryption for Ubuntu and Fedora Linux.
Added support for deb packages compressed with zstd.

Vulnerability management

Allowed skipping computationally heavy population of vulnerability details when populating host software on hosts list endpoint (GET /api/latest/fleet/hosts) when using Fleet Premium (populate_software=without_vulnerability_descriptions).

Bug fixes and improvements

Improved memory usage of the Fleet server when uploading a large software installer file. Note that the installer will now use (temporary) disk space and sufficient storage space is required.
Improved performance of adding and removing profiles to large teams by an order of magnitude.
Disabled accessibility via keyboard for forms that are disabled via a slider.
Updated software batch endpoint status code from 200 (OK) to 202 (Accepted).
Updated a package used for testing (msw) to improve security.
Updated to reboot linux machine on unlock to work around GDM bug on Ubuntu 24.04.
Updated GitOps to return an error if the deprecated apple_bm_default_team key is used and there are more than 1 ABM tokens in Fleet.
Dismissed error flash on the my device page when navigating to another URL.
Modified the Fleet setup experience feature to not run if there is no software or script configured for the setup experience.
Set a more accurate minimum height for the Add hosts > ChromeOS > Policy for extension field, avoiding a scrollbar.
Added UI prompt for user to reenter the password if SCEP/NDES url or username has changed.
Updated ABM public key to download as as PEM format instead of CRT.
Fixed issue with uploading macOS software packages that do not have a top level Distribution.xml, but do have a top level PackageInfo.xml. For example, Okta Verify.app.
Fixed some cases where Fleet Maintained Apps generated incorrect uninstall scripts.
Fixed a bug where a device that was removed from ABM and then added back wouldn't properly re-enroll in Fleet MDM.
Fixed name/version parsing issue with PE (EXE) installer self-extracting archives such as Opera.
Fixed a bug where the create and update label endpoints could return outdated information in a deployment using a mysql replica.
Fixed the MDM configuration profiles deployment when based on excluded labels.
Fixed gitops path resolution for installer queries and scripts to always be relative to where the query file or script is referenced. This change breaks existing YAML files that had to account for previous inconsistent behavior (e.g. installers in a subdirectory referencing scripts elsewhere).
Fixed issue where minimum OS version enforcement was not being applied during Apple ADE if MDM IdP integration was enabled.
Fixed a bug where users would be allowed to attempt an install of an App Store app on a host that was not MDM enrolled.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

orbit-v1.36.0
fleet-desktop-v1.36.0 (included with Orbit)
fleetd-chrome-v1.3.1

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

ae0ab2cbd84b0b4db7cf8f0a700a59018a5ac8587216d0af361824096f0c789f  fleet_v4.60.0_linux.tar.gz
89ecf2ac3a2cd9c30bd3ccf975a1d325e04d04762dfc8e2da99f13b28fd06885  fleetctl_v4.60.0_linux.tar.gz
75e95310fdbd9ddd32f0ebc2d609be1961791ba91c73b4016cd19f8264f3441b  fleetctl_v4.60.0_linux.zip
31c40735cb8a1cdd4aaa8b543d175de5be0e9c8f284a844ced4a1749fc77890b  fleetctl_v4.60.0_macos.tar.gz
5c4a07f6baddbfe7e7420244d4e128617382fac910b77891b8552ac1c114bdd7  fleetctl_v4.60.0_macos.zip
8a02fe28ca9cac37ea7106cef3be7055b09893c6c38080d452579ae9aa3c693f  fleetctl_v4.60.0_windows.tar.gz
0380415b15075d63977abe88ef43c3236c25be2cb87b2cf877b2f648b792eae7  fleetctl_v4.60.0_windows.zip