kolide/launcher v2.6.0

on GitHub

What's Changed

Table Changes

• Remove obsolete launcher tables and fix Mach-O parsing by @cesarfda in #2788
• Fix string literal being sent to apt by @Micah-Kolide in #2814
• Use go-tuf/v2 for kolide_tuf_release_version table by @RebeccaMahany in #2824
• Allow @ in usernames for osquery user exec tables by @iamharlie in #2827
• Remove obsolete Spotlight and 1Password tables by @cesarfda in #2791
• Add kolide_network_time table by @iamharlie in #2839

Features and Improvements

• Add DeviceTrustRebrand feature flag by @RebeccaMahany in #2826
• Use Device Trust icons in menu bar and notifications when DeviceTrustRebrand is enabled by @cesarfda in #2840

Bug Fixes

• Only call shouldSkip on directories; stop descents early by @RebeccaMahany in #2828
• flag controller: override fixes for concurrent map use, mutex hang, and a clobber race by @brhoades in #2832

Performance Improvements

• filewalker: log walk metrics, skip expected errors on walking, tally errors by @brhoades in #2841

Observability

• Add per-table health metrics to tablewrapper by @cesarfda in #2830

Build and Package

• Install curl and other deps prior to setting up cloudsmith CLI by @RebeccaMahany in #2843
• Install more dependencies for Cloudsmith by @RebeccaMahany in #2844

Tests, Docs, and Other No-op Changes

• pkg/osquery: fix flaky secretless enrollment test by @brhoades in #2805
• Use go-tuf/v2 in tufci (tests) by @RebeccaMahany in #2811
• Remove debian 11 and add debian 13 to exec tests by @RebeccaMahany in #2816
• Update mocks after upgrading mockery version by @RebeccaMahany in #2822
• Add workflow to require Jira ticket link in PR description from @jbeker by @RebeccaMahany in #2833
• Let Jira ticket check pass in the merge queue by @jbeker in #2846

Dependency Updates

• Bump step-security/harden-runner from 2.20.0 to 2.21.0 by @dependabot[bot] in #2807
• Bump step-security/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2808
• Bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in #2809
• Bump github.com/apache/thrift from 0.23.0 to 0.24.0 by @dependabot[bot] in #2810
• Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #2815
• Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.19.0 to 1.45.0 by @dependabot[bot] in #2820
• Bump step-security/harden-runner from 2.21.0 to 2.21.1 by @dependabot[bot] in #2835
• Bump step-security/cloudsmith-cli-action from 2.0.3 to 3.1.0 by @dependabot[bot] in #2836

General

• osquery/runtime: fix osqueryinstance's WithStartFunc by @brhoades in #2806
• osquery/runtime: fix common test flake from os.Stat on Windows by @brhoades in #2812
• pkg/rungroup: fix flaky RunGroup tests by @brhoades in #2818
• Update root.json generator to use go-tuf/v2 by @RebeccaMahany in #2825
• flag controller: synctest for mock time, speeds up the suite and removes a race by @brhoades in #2831
• init ee/currentprocess, centralize current process query APIs, fix unprivileged desktop runner by @brhoades in #2804
• [Automated] October 2026 - Update TUF root.json by @github-actions[bot] in #2837
• filewalker: add walk tests, regression test for #2780 by @brhoades in #2834
• ee/agent/listener: fix <1% chance agent listen test fails by @brhoades in #2838
• ee/tuf: stub out osqueryd download to remove test flake by @brhoades in #2842

New Contributors

• @jbeker made their first contribution in #2846

Full Changelog: v2.5.0...v2.6.0