## fleetdm/fleet — v4.91.2…v4.92.0

_577+ commits._

### Features
- **Cherry-pick #52268: Add MDM profile counts to usage statistics (#52392)** (30751f2)
- **Add sort indicators to controls list (#52266)** (fab0c6a)
- **Add pull request etiquette guidance (#51247)** (1ad5d3c)
- **Add VEX exclusions for SSH server vuln in fleetdm/fleet (#52251)** (abfa6ca)
- **Add `osquery.config_in_memory_cache` flag, off by default (#52209)** (4db6e72)
- **Add why-this-way entry: route taskings through team's manager (#52010)** (40db811)
- **Add Vagrant as a Windows Fleet-maintained app (#52200)** (2bfe925)
- **Add more details to oncall prs script (#52182)** (b648837)
- **Add Microsoft Defender (macOS) as a Fleet-maintained app via custom tap (#52195)** (7c839d0)
- **Add guide: set up Fleet GitOps for staging and production (#51501)** (3b2fee8)
- **Add useFormValidation hook and migrate the user forms onto it (#50435)** (160a586)
- **Add server and agent compatibility policy to handbook (#51652)** (b2606b6)
- **Add tooltip clarifying token rotation still happens with SSO** (a48c952)
- **Website: add Newsletters and Industry news article categories (#52120)** (9de7d94)
- **Support host deletion scenario (hub should disconnect such host) (#52049)** (0144084)
- **Fleet UI: Add spacing to Munki issues section on host details (#52092)** (c4ad80a)
- **Add 4.90.0 baseline and 4.89→4.90 / 4.90→4.91 migration loadtest results (#52034)** (3823c3b)
- **Add 8 Windows FMAs (#51809)** (4e619db)

### Fixes
- **CP: 4.92.0 Fix filevault messaging(#53222) (#53355)** (4ac4f61)
- **For 4.92 RC: Fix SCIM group PATCH silently deleting members** (44c7bcf)
- **Cherry-pick #52972: Fix "Hosts enrolled" chart drill-down including pending hosts (#53042)** (7c907f3)
- **For 4.92 RC: Fix vulnerability exposure chart tooltip claiming a critical default** (00ec04e)
- **For R.C. - Fleet UI: Fix white page flash and redirect loop on logout (#52786) (#52855)** (22bf013)
- **For R.C. - Patch policies: Hide skipped install from global feed, factor policy refresh into Last fetched (#52220) (#52875)** (ca4c94c)
- **Cherry-pick #52834: Fix doubled "about" in report "Collecting results..." empty state (#52837)** (d908a1e)
- **Cherry-pick #52289: Fix software install status timeouts (#52619)** (7852fa2)
- **Cherry-pick: Revert WSTEP ROBO certificate renewal fix (#51468) (#52513)** (c93e010)
- **Fix MDM command activity creation (#52219)** (871c765)
- **another attempt to fix flakiness in mock APNS (#52181)** (68372ea)
- **fix all go lints (#52203)** (82f968c)
- **Fix iOS/iPadOS refetch stuck bug (#51736)** (a659c92)
- **[Docs] Fix "Boring Solutions" hyperlink on company page (#52006)** (bee8659)
- **Fix grammar in CEO travel packing instructions (#52112)** (421c604)
- **Fix typo in README.md (#52097)** (e1928f8)
- **Fix osquery/orbit config 500 when host references deleted team (#51943)** (a21bc1d)
- **fix racy mock apns tests (#52050)** (8bef3e2)
- **Fix Firefox Dev Edition/ESR/stable FMA Default Browser Agent error on Windows first launch (#52005)** (01a6a0a)
- **Fix per-user install context for 32 Windows Fleet-maintained apps (#51940)** (a49c923)
- **Fix software rows saved without a software title errors** (33149a1)

### Backend
- **Adding changes for Fleet v4.92.0 (#52270)** (e6ccb87)
- **Catch up rc-minor-fleet-v4.92.0 with releases 4.90.2, 4.91.0, and 4.91.1 (#53545)** (85c68bd)
- **Cherry-pick dependency updates into rc-minor-fleet-v4.92.0 (#53508)** (442ed28)
- **Cherry-pick #53380: Pretty-print JSON in the MDM command details modal (#53449)** (7ee7f5a)
- **cherry-pick: Android custom command a number of fixes** (f740501)
- **Cherry-pick Android MDM command fixes into rc-minor-fleet-v4.92.0 (#53441)** (5b97688)
- **Cherry-pick #53326: Match host status and label filter dropdown heights (#53330)** (c138cf4)
- **CP: wait 5 seconds before refetching host details on apns ping (#53311) (#53324)** (8835b06)
- **CP: harden sso desktop gate (#53125) (#53323)** (d2a10f8)
- **For R.C. - Fleet UI: FMA icon falls back to default when the raster request fails (#53239) (#53256)** (c7bf72a)
- **Cherry-pick #53202: Updated copy for Windows pending hosts (#53218)** (7851ddc)
- **CP: expand env var when parsing for profile->name lookup to avoid parsing failures (#53229) (#53232)** (fa7a3a2)
- **Cherry-pick #53138: Revert "Show manual BYOD re-enroll instructions for manual BYOD hosts" (#53140)** (463a1e0)
- **For R.C. - Fleet UI: Tooltip cleanups (default position, balance-cap workaround) (#52891) (#52930)** (0ad653c)
- **Cherry-pick #52308: Exponential backoff for android certificate retries** (4bd6989)
- **For R.C. - Fleet UI: Show Install/Uninstall for script-only packages with an uninstall script (#52747) (#52854)** (c94ea92)
- **For R.C. - Fleet UI: Skipped-install cadence link + surface real failure on My device (#52420) (#52876)** (093c8aa)
- **Cherry pick: Hide QR code for company-owned Android enrollment (#52868)** (1b220f8)
- **cherry-pick: Android Custom Commands: Removing sensitive fields from raw_result** (b25cd1d)
- **Cherry-pick #51852: Restore BitLocker protection (#52664)** (0b65e80)
- **Fixing Microsoft Graph unreleased security concerns. (#52579) (#52589)** (21f770a)
- **For 4.92 RC: 52515, 52394 and 44412** (2cc7341)
- **Cherry-pick #52441: Register Ace's theme and modes from every editor (#52468)** (c1f3613)
- **Don't display refetch error for pending hosts (#52384) (#52440)** (b946006)
- **Frontend tweaks for Microsoft Graph (#52372) (#52430)** (3fadcc1)
- **CP: remove in house app and VPP backdating and only fire APNS ping after committed transaction (#52281) (#52363)** (901ae96)
- **Retry MySQL 1615 during migrations (#52067)** (b408c8e)
- **Bump x/crypto to v0.55.0 in goval-dictionary (CVE-2026-56854) (#52230)** (2196848)
- **Prevent run of orbit codesign in forks PRs and pushes to forks (#52264)** (a0076cc)
- **Write a query and its labels in a single transaction (#51845)** (650b86e)
- **Update actions/checkout to v7.0.1 in website, docs, and vulnerability dashboard workflows (#52189)** (f26eeb4)
- **Give dev's shared webpack chunks fixed names (#52257)** (206285d)
- **Update Fleet-maintained apps (#52256)** (e0d0078)
- **Implement PSSO user registration for non-setup, no prior setup flows (#52096)** (1bee8fc)
- **Load react-select's base styles from the app entry (#52243)** (e39f623)
- **Show manual BYOD re-enroll instructions for manual BYOD hosts (#52167)** (d8aa2b9)
- **Document actual policy check/automation cadence (#52183)** (2382275)
- **Remove temporary trivy-close-legacy workflow (#52202)** (e110332)
- **Update Fleet-maintained apps (#52216)** (d57e533)
- **Store and return additional Android host vitals (#52039)** (7074cba)
- **gm jarvis: issue-centric workflow, Project View, and caching (#49172)** (449b0ea)
- **Default osquery config etag flags to off (#52211)** (aa40418)
- **Update command UUID note (#51473)** (24fb1c2)
- **Update Fleet-maintained apps (#52206)** (fe3f153)
- **Fleet UI: Put unsupported-extension error reason in the toast raw-response panel (#52197)** (3f0db59)
- **Hide the toast details panel when the payload is empty (#51338)** (5af4754)
- **Hangar: crash diagnostics logging, Wails beta.8 upgrade, build versioning (#51252)** (b7131c4)
- **POC: Zero-touch enrollment for company-owned Android (research doc) (#50321)** (3948836)
- **Update actions/checkout to v7.0.1 and remove some unnecessary full checkout (#52114)** (f34296a)
- **Defer policy membership wipe (#52188)** (38d025c)
- **Unfreeze Pritunl (darwin) (#52162)** (44a02f6)
- **Upgrade upload/download-artifact actions due to node 20 removal in Sep 23rd (#52171)** (c948b08)
- **Bump echo to v4.15.3 in goval-dictionary (CVE-2026-55677) (#51996)** (7635ecd)
- **Update Fleet-maintained apps (#52180)** (13a006e)
- **Load each page's code when its route is entered (#52038)** (fa2b5ec)
- **Keep Enrollment ID on the host page after a BYOD host unenrolls (#51791)** (b0dd47b)
- **Match only the app's own executable in macOS FMA open queries (#52133)** (5ad52ed)
- **Integration tests breakdown: Extract the remaining integration_core tests** (671cb1b)
- **Update FMA scripts in auto-update job when they change in manifest without a version change (#52104)** (e312f7e)
- **Use hardcoded string for skipped install details (#52135)** (146fda3)
- **Update Windows profile name on edit (#52055)** (732604b)
- **Osquery config etags (#50288)** (301bc00)
- **Integration tests breakdown: Extract integration_core_hosts_test** (5c6d191)
- **Update Fleet-maintained apps (#52166)** (46b2e6f)
- **Update Fleet-maintained apps (#52153)** (e25238d)
- **Update Santa icon for macOS FMA (#52115)** (d479024)
- **Update Fleet-maintained apps (#52137)** (15a37f0)
- **Update instructions for managing software categories (#52130)** (62fa1fe)
- **Deprovision SCIM-deactivated users via a durable Fleet-user link** (7acbf24)
- **Remove non-existing "Update recovery lock" link (#52091)** (aa7d263)
- **Comment out Product Designer open role on website (#52124)** (51a5ed5)
- **Keep SCEP enrollment secrets out of the Android device logs (#51914)** (1a27be0)
- **Batch scheduled query name lookups when processing result logs** (d98aeb3)
- **renaming `windows_enrollment` to `windows_automatic_enrollment` (#52098)** (141e354)
- **Validate software list order keys against an allowlist** (b658805)
- **Integration tests breakdown: Extract integration_core_hosts_reports_test** (b67ff42)
- **Escape values interpolated into the conditional access Apple profile** (63dc373)
- **Use MDM on/off language in Controls card empty state (#52110)** (6645925)
- **Require a team selection when validating report run targets** (493030a)
- **Update Fleet-maintained apps (#52100)** (03decca)
- **Document content-planning label process in handbook (#52099)** (64ead26)
- **Update Fleet-maintained apps (#52088)** (34eef5c)
- **Windows managed local account rename (#52079)** (a778f16)
- **Update MDM setup instructions with automation details (#52095)** (8c85be0)
- **Use DB flags to determine if FMA scripts were edited by admins (#52057)** (3f476bb)
- **GitOps: pin policy to the exact installer resolved from the YAML (#52002)** (bb74675)
- **APNS Ping frontend (#52036)** (7d2f946)
- **APNS ping backend (#52018)** (71706c9)
- **Center homepage hero on tablet/mobile breakpoints (#52082)** (976ff3e)
- **Update api_endpoints.yml (#51608)** (f2cc17a)
- **Serve Fleet-maintained app icons as static files (#51980)** (bfd4450)
- **Set SkipUserStatusPage=true in ESP release commands (#51816)** (accd2d3)
- **UI redirect: Zero-touch enrollment for company-owned Android (#51969)** (25ec0c3)
- **Product design rituals: Stop creating issues on drafting board (#52060)** (ac7d21c)
- **Make software title details versions table sortable by version** (75b313d)
- **Clarify 'Product design kickoff' task description (#52074)** (d1e71a2)
- **GitOps: pick a package inside a multi-package YAML with hash_sha256 (#51946)** (45a02bf)
- **Use canonical EPSS feed URL (epss.empiricalsecurity.com)** (d5676bf)
- **Update Fleet-maintained apps (#52052)** (324b29c)
- **Update enroll-hosts.md (#52009)** (42b5f70)
- **51260 Derive disk encryption status from per-platform flags (#51981)** (bea7aa4)
- **Create nar-ai-forandrar-jobbet-vem-ligger-steget-fore.md (#52029)** (7af56a5)
- **Update Fleet-maintained apps (#52033)** (a1c4ed0)
- **Windows: Retry configuration profiles (#51673)** (6a0fd4c)
- **51262: custom filevault/encryption UI (#51938)** (c8a938d)
- **Bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 (#51830)** (e9d6f1c)
- **Cap failed install attempts with redis keys (#51746)** (feb5eea)
- **Software: Search matches bundle identifier and custom display name (#51722)** (8c5b766)
- **Update Fleet-maintained apps (#52011)** (374b6f4)

### Docs
- **docs: fix typo reccommend -> recommend (#52146)** (03f1f74)
- **Docs: document software_installer_id on fleet-level policy endpoints (#52058)** (40a87fa)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/fleetdm/fleet?utm_source=github-action)._