fleetdm/fleet fleet-v4.67.0 on GitHub

Fleet 4.67.0 (Apr 24, 2025)

WARNING: A critical bug has been identified in Fleet v4.67.0 causing significant database load when software inventory is enabled. Skip this version and upgrade directly to fleet-v4.67.2.

Security Engineers

Added ability to set labels on policies via GitOps.
Added backend support for labels on policies.
Added ability to cancel upcoming host activities in the UI.
Added the DELETE /api/latest/fleet/hosts/:id/activities/upcoming/:activity_id endpoint to cancel an upcoming activity for a host.
Added support for native Windows ARM64 in fleetd (fleetctl package --arch=arm64 --type=msi).

IT Admins

Added SCIM integration, which allows IdP email, full name, and groups to be visible in host vitals. SCIM data is also used for getting the end user's full name during end user authentication of macOS setup flow, if needed. Currently, only Okta IdP is supported.
Added a new IDP section to the integrations page where users can see their SCIM connection status.
Added new users card on host details and my device page that shows host end user and IDP information.
Added ability to set labels on policies via GitOps.
Added backend support for labels on policies.
Added ability to cancel upcoming host activities in the UI.
Added the DELETE /api/latest/fleet/hosts/:id/activities/upcoming/:activity_id endpoint to cancel an upcoming activity for a host.
Added support for native Windows ARM64 in fleetd (fleetctl package --arch=arm64 --type=msi).
Added logging for invalid Windows MDM SOAP message and return 400 instead of 5XX to help debug Windows MDM issues.
Removed Apple MDM profile validation checks for com.apple.MCX keys (dontAllowFDEDisable and dontAllowFDEEnable) due to customer feedback.
Fixed a bug where BYOD iDevices deleted in Fleet but still enrolled in MDM were not re-created on the next MDM checkin.
Fixed an issue with how names for macOS software titles were calculated and prevents duplicate entries being created if the software is renamed by end users.

Other improvements and bug fixes

Added support for vmodule hidden osquery flag to assist with debugging.
Added an additional statistic item to count ABM pending hosts.
Added a timeout so the desktop app retries if not displayed after 1 minute.
Updated UI to allow adding labels when saving or editing polices.
Included newly created host ids in activities generated when hosts enroll in fleet.
Moved view all host link onto host count of software, OS, and vulnerability details pages
Updated Go to v1.24.1.
Updated UI tables to truncate with tooltips for software, query, and policy names and improved keyboard accessibility to those clickable elements.
Updated to accept any "http://" or "https://" prefixed URL to allow for easier testing.
Updated apmhttp package to fix upload of medium/big sized software packages in environments where APM tracing is enabled.
Fixed UI Gitops Mode getting cleared when other settings are modified.
Fixed invalid default serial numbers being displayed for some hosts.
Fixed pagination resetting the platform filter on the operating system UI table.
Fixed issue where fleetctl gitops --dry-run would sometimes fail when creating and using labels in the same run.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

orbit-v1.40.1
fleet-desktop-v1.41.0 (included with Orbit)
fleetd-chrome-v1.3.1

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

91b5812b96b4d60318a5bae955028c45589c978c473d3e57d4aca10a1aaea2da  fleet_v4.67.0_linux.tar.gz
f2831ac0d75d9a67e6970be11b5ed6f6ef71769cba77eb126c20be2381bfb357  fleetctl_v4.67.0_linux_amd64.tar.gz
5e7ccf307dbf8de77a2cd5a2a761bc272aa56ea60ef57813f942ea1edd1e0f9f  fleetctl_v4.67.0_linux_amd64.zip
fc5c6a87dbdf9aeaaf5cc01cf760127684738a3e3cee1cd60a533f8aa00b96ee  fleetctl_v4.67.0_linux_arm64.tar.gz
a86c3727e88fa111ef7b9897e1fdd8e2682e5cc893d6a2c5ad2d10a21fbcb79c  fleetctl_v4.67.0_linux_arm64.zip
3f728b59356247a48bf36baf99a2015eeb621b5a173c420c7edcc9c499a7e09d  fleetctl_v4.67.0_macos.tar.gz
4a4c29707a7f5d8f87c60746a6646a458aa04c3fcf5eee28cfea56c5d907fa8b  fleetctl_v4.67.0_macos.zip
d549ce668d86019fb72ca359a9fbda63299671988a9f42214cc8c5f5378319d5  fleetctl_v4.67.0_windows_amd64.tar.gz
0122a44d7f09d4da5aff0ed4931f754ed3c9dbcc7e0d0cbb9929ca214e2640bd  fleetctl_v4.67.0_windows_amd64.zip
1f723d44b39d567565871bf3cb9b55b9af7eadd298eb428f5239f6dfb137a6f7  fleetctl_v4.67.0_windows_arm64.tar.gz
ad369b0e7607116db5a9de48682c07acaeb0eed8dc4d25d27efe252be671330d  fleetctl_v4.67.0_windows_arm64.zip