fleetdm/fleet fleet-v4.78.0 on GitHub

Fleet 4.78.0 (Dec 19, 2025)

IT Admins

Added support for Android setup experience software installation.
Added support for Android self-service apps to fleetctl gitops.
Added support for Android systemUpdate profiles.
Added ability to create/view/delete Google Play Store software for Android in UI.
Added $FLEET_VAR_HOST_PLATFORM for Apple platforms (macos, ios, ipados).
Added support for installation of setup-experience VPP apps on manually-enrolled iOS/iPadOS devices.
Added ability to deploy user-scoped SCEP profiles for Windows hosts.
Added a configuration option to require Windows users turn on MDM manually via work or school account, rather than have enrollment happen automatically.
Added UI to allow Windows hosts to manually enroll into Fleet MDM.
Added support for $FLEET_VAR_HOST_HARDWARE_SERIAL and $FLEET_VAR_HOST_PLATFORM in Windows profiles.

Security Engineers

Added ability to filter the activites on the dashboard page.
Updated to regenerate FileVault profile when Apple MDM is turned on if the device's team has disk encryption enabled.
Added Okta conditional access configuration to the Fleet UI under Settings -> Integrations -> Conditional access.
Added endpoint for hosts to update certificate status.
Added detail column to host_certificate_template table and added certificate_templates property with GitOps support.
Updated fleetd/certificates/<id> and fleetd/certificates/<id>/status to authenticate using the orbit_node_key provided in the Authentication header.
Updated MDM-enrolled Android devices to receive certificate templates in managedConfigurations.

Other improvements and bug fixes

Improved performance by making the host_count property optional in the GET /labels API endpoints.
Improved performance by avoiding unneeded extra queries when fetching team information.
Improved request validation by returning an informative error when trying to filter software_titles with platform without a team_id.
Allowed users to save Fleet queries even if their SQL is deemed invalid by the Fleet UI.
Added a new error UI for file uploaders, and applied it in the Okta Conditional Access modal.
Returned pre-install query output in Install Details modal.
Translated idp to mdm_idp_accounts on API responses.
Updated last_restarted_at property for hosts to be more reliable.
Added Mosyle to the list of well-known MDM platforms.
Changed where mdm_enrolled activity is created so it occures after the inital Token Update command to allowa the webhook to fire after the host can recieve additonal commands from Fleet MDM.
Improved MDM command result endpoint response for pending Windows commands.
Switched configurations referencing Redis 5 to Redis 6. Fleet is no longer verified to work with Redis 5 or below.
Redacted API tokens in fleetctl config set to prevent accidental logging.
Updated error message when attempting to run software install script on host with scripts disabled to refer to --enable-scripts flag (instead of --scripts-enabled).
Updated queries APIs that drive the OS Settings UI to include the status of host cert templates.
Updated the layout and styling of file uploader buttons across the UI.
Updated built-in SVG icons to avoid rendering issues when certain combinations of icons are on the same page.
Added consistant spacing to UI elements on the MDM page.
Updated Go to 1.25.5.
Fixed an issue where using bitwise operators in a query incorrectly marked the query as invalid.
Fixed issue where MDM profile retry limits were interfering with Smallstep SCEP proxy renewal attempts, particularly in cases of expired SCEP challenges.
Fixed incorrect status code on failure to interpolate certificate template variables.
Fixed Android configuration profiles downloading as unusable .xml files with content [object Object]. Android profiles now download correctly as .json files with properly formatted JSON content, matching what was originally uploaded.
Fixed the tab order of elements in the login form.
Fixed UI bug where the option to resend MDM profiles for macOS hosts was incorrectly presented to non-admin and non-maintainer users.
Fixed an issue that prevented GitOps from saving multiple queries with the same label.
Fixed an issue where "Exclude Any" label scoping did work properly for iOS, iPadOS and Android hosts.
Fixed bug that prevented filtering by platform when listing hosts with failed profiles.
Fixed software action buttons to disable immediately on click to prevent multiple clicks.
Fixed an issue where newly-enrolled Windows or Linux hosts were not automatically linked with existing SCIM user account data.
Fixed UI bug in OS settings modal that caused status tooltip to flicker when refetching host details.
Fixed a race condition when resending Apple Profiles that would not truly resend the latest profile.
Fixed a missing redirect to the Fleet website.
Fixed the connect message on the controls end user auth page so that it is consistant with the other set up experience subsections.
Fixed a bug where "installed" software sometimes showed up as "uninstalled" when certain other pieces of data were not also present.

Fleet-maintained app updates and vulnerability fixes are applied, whether or not you upgrade.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

orbit-v1.50.2
fleet-desktop-v1.50.2 (included with Orbit)
osquery-5.21.0 (included with Orbit)
fleetd-chrome-v1.3.3

While newer versions of fleetd still function with older versions of Fleet, old versions of fleetd and osquery may not function with new versions of Fleet. We do not actively test these scenarios, and we recommend deploying a minimum of the agent versions above before upgrading to this version of Fleet.

Upgrading

Please visit our upgrade guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

a75667c3362b5ffa11d1c95e2839aeb4fe74cd274994aee08148fd6179527c74  fleet_v4.78.0_linux.tar.gz
5753557878a06de58c7aabdc2d55f27792ccacaed43ff9cc41ed9ef9f52bd943  fleetctl_v4.78.0_linux_amd64.tar.gz
ed9bf44b737e2285066ccf0c0f0fa328b7d6ec0033edb119183e4ded5d20f2c2  fleetctl_v4.78.0_linux_amd64.zip
1ba0a5d96566efed20a1ce96d3303e42ff2a0b7b8d3527bb35066efdb23ca5a0  fleetctl_v4.78.0_linux_arm64.tar.gz
cfd528a01f463a6b5afcc696fbaffc896b4f4a4e8a8dde6034eff9fa1082f582  fleetctl_v4.78.0_linux_arm64.zip
c6b2ad11c958f38b53168ee9396f6bded3ed5f863c253ade07eaf00921672488  fleetctl_v4.78.0_macos.tar.gz
e721bd5cf7c2fc378dc968cb24d229590bfd376226d50387d2ad1db42c17cb50  fleetctl_v4.78.0_macos.zip
a188080d9c972dc883e1a268a4d040dadf7912901a7a91c25c9e4f640396054b  fleetctl_v4.78.0_windows_amd64.tar.gz
8c41eafab9cb38e4a97b464f86e926da12c7b0531f848a3c306dc04ecfd7960c  fleetctl_v4.78.0_windows_amd64.zip
87e80393f956b137571cf6bce870c3eb0256c155d0ea76cef69fba1d6b5ca49c  fleetctl_v4.78.0_windows_arm64.tar.gz
e3aeddceada71115e53d86f74b8300566660cb44e2229c4cbd4f97d96ee668e7  fleetctl_v4.78.0_windows_arm64.zip