What's Changed
Bug Fixes
- Ensure we return the correct enrollment status for enrolled secretless installations by @RebeccaMahany in #2495
- watchdog attempt to recover corrupt db by @James-Pickett in #2501
- Set XDG_DATA_DIRS differently for NixOS by @RebeccaMahany in #2505
- Avoid integer underflow in nonGoMemUsage calculation by @RebeccaMahany in #2506
Performance Improvements
- Combine explorer process checks by @RebeccaMahany in #2488
- Use the QueryContext when querying the kolide_program_icons and kolide_program_icon_checksums table by @RebeccaMahany in #2491
Observability
- Add tx count to bbolt stats, and add global db stats to checkup by @RebeccaMahany in #2510
Tests, Docs, and Other No-op Changes
- Update release.yml with new changelog category for performance improvements by @RebeccaMahany in #2489
- Add documentation for secretless by @RebeccaMahany in #2493
- Update link in readme; update description of docs directory by @RebeccaMahany in #2504
Dependency Updates
- Upgrade golang/x/crypto for GO-2025-4116 by @RebeccaMahany in #2492
- Upgrade to latest version of krypto by @RebeccaMahany in #2497
- Upgrade to go v1.24.11 for govulncheck by @RebeccaMahany in #2507
General
- Complete RegistrationTracker interface by @RebeccaMahany in #2485
- Update osquery extension to use RegistrationTracker exclusively for managing registrations and node keys by @RebeccaMahany in #2487
- add dual publication for osquery log cutover by @zackattack01 in #2486
- Tuf autoupdate interval by @cesarfda in #2477
- added launcher version to launcher data in shipper by @cesarfda in #2494
- Fix govulncheck not respecting Golang version by @RebeccaMahany in #2496
- Remove flaky launcher interactive check from Osquery checkup by @RebeccaMahany in #2498
- fix order of log collection for launchd logs in flares by @zackattack01 in #2499
- Upload flare to s3 by @cesarfda in #2502
- Bucketize (or remove) the
tooktiming data so the log dedup can work better by @directionless in #2509
Full Changelog: v1.28.4...v1.29.2