Adding changes for Fleet v4.53.0 (#19964)

fleetdm · Jun 26, 2024 · 117e833 · 117e833
1 parent 8412696
commit 117e833
Show file tree

Hide file tree

Showing 71 changed files with 98 additions and 89 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,8 +1,82 @@
-## Fleet 4.51.1 (Jun 12, 2024)
+## Fleet 4.53.0 (Jun 25, 2024)
+
+### Endpoint Operations
+
+- Enabled `fleetctl gitops` to create teams with no enroll secrets, or clear enroll secrets for an existing team.
+- Added support for upgrades to `fleetd` RPMs packages.
+- Changed `activities.created_at` timestamp precision to microseconds.
+- Added character validation to /api/fleet/orbit/device_token endpoint.
+- Cleaned up count rendering fixing clientside flashing counts.
+- Improved performance by removing unnecessary database query that listed host software during
+  initial page load of the "My device" page.
+- Made the rendering of empty text cell values consistent. Also render the '0' value as a number instead of the default value.
+- Added a server setting to configure the query report max size.
+- Fixed a bug where scrollbars were always present on modal backgrounds.
+- Fixed bug in `fleetctl preview` caused by creating enroll secrets.
+
+### Device Management (MDM)
+
+- Extended the timeout for the endpoint to upload a software installer.
+- Improved the logic used by Fleet to detect if a host is currently MDM-managed.
+- Added S3 config variables with a `carves_` and `software_installers` prefix.
+- Fixed bug where MDM migration failed when attempting to renew enrollment profiles on macOS Sonoma devices.
+- Fixed issue where Windows-specific error message was displayed when failing to parse macOS configuration profiles.
+- Fixed a bug where MDM migration failed when attempting to renew enrollment profiles on macOS Sonoma devices.
+- Fixed a server panic when sending a request to `/mdm/apple/mdm` without certificate headers.
+- Fixed issue where profiles larger than 65KB were being truncated when stored on MySQL 8.
+- Fixed a bug that prevented unused script contents to be periodically cleaned up from the database.
+- Fixed UI bug where error detail was overflowing the table in "OS settings" modal in "My device"
+  page UI.
+- Fixed a bug where the software installer exists in the database but the installer does not exist
+  in the storage.
+- Added a "soft-delete" approach when deleting a host so that its script execution details are still
+  available for the activities feed.
+- Fixed UI bug where Zoom icon was displayed for ZoomInfo.
+- Fixed issue with backwards compatibility with the deprecated `FLEET_S3_*` environment variables.
+- Fixed a code linter issue where a slice was created non-empty and appended-to, instead of empty with the required capacity.
+
+### Vulnerability Management
+
+- Added vulnerabilities matching for applications that include an OS scope.
+- Added vulnerability detection in NVD for custom ubuntu kernels.
+- Removed duplicate `os_versions` results in /api/latest/fleet/vulnerabilities/:cve endpoint.
+- Removed vscode false positive vulnerabilities.
+- Clarified Fleet uses CVSS base score version 3.x.
+
+## Fleet 4.52.0 (Jun 20, 2024)
+
+### Bug fixes
+
+* Fixed an issue where profiles larger than 65KB were being truncated when stored on MySQL 8.
+* Fixed activity without public IP to be human readable.
+* Made the rendering of empty text cell values consistent. Also rendered the '0' value as a number instead of the default value `---`.
+* Fixed bug in `fleetctl preview` caused by creating enroll secrets.
+* Disabled AI features on non-new installations upgrading from < 4.50.X to >= 4.51.X.
+* Fixed various icon misalignments on the dashboard page.
+* Used a "soft-delete" approach when deleting a host so that its script execution details are still available for the activities feed.
+* Fixed UI bug where error detail was overflowing the table in "OS settings" modal in "My device" page UI.
+* Fixed bug where MDM migration failed when attempting to renew enrollment profiles on macOS Sonoma devices.
+* Fixed queries with dot notation in the column name to show results.
+* `/api/latest/fleet/hosts/:id/lock` returns `unlock_pin` for Apple hosts when query parameter `view_pin=true` is set. UI no longer uses unlock pending state for Apple hosts.
+* Improved the logic used by Fleet to detect if a host is currently MDM-managed.
+* Fixed issue where the MDM ingestion flow would fail if an invalid enrollment reference was passed.
+* Removed vscode false positive vulnerabilities.
+* Fixed a code linter issue where a slice was created non-empty and appended-to, instead of empty with the required capacity.
+* Fixed UI bug where Zoom icon was displayed for ZoomInfo.
+* Error with 404 when the user attempts to delete team policies for a non-existent team.
+* Fixed the Linux unlock script to support passwordless users.
+* Fixed an issue with the Windows-specific `windows-remove-fleetd.ps1` script provided in the Fleet repository where running the script did remove `fleetd` but made it impossible to reinstall the agent.
+* Fixed host details page and device details page not showing the latest software. Added `exclude_software` query parameter to the `/api/latest/fleet/hosts/:id` endpoint to exclude software from the response.
+* Fixed the `/mdm/apple/mdm` endpoint so that it returns status code 408 (request timeout) instead of 500 (internal server error) when encountering a timeout reading the request body.
+* Extended the timeout for the endpoint to upload a software installer (`POST /fleet/software/package`), and improved handling of the maximum size.
+* Fixed issue where Windows-specific error message was displayed when failing to parse macOS configuration profiles.
+* Fixed a panic (API returning code 500) when the software installer exists in the database but the installer does not exist in the storage.
+
+## Fleet 4.51.1 (Jun 11, 2024)
 
 ### Bug fixes
 
-* Added S3 config variables with a `carves` and `software_installers` prefix, which were used to configure buckets for those features. The existing non-prefixed variables were kept for backwards compatibility.
+* Added S3 config variables with a `carves_` and `software_installers` prefix, which were used to configure buckets for those features. The existing non-prefixed variables were kept for backwards compatibility.
 * Fixed a bug that prevented unused script contents to be periodically cleaned up from the database.
 
 ## Fleet 4.51.0 (Jun 10, 2024)

diff --git a/changes/148940-app-os-vuln-matching b/changes/148940-app-os-vuln-matching
diff --git a/changes/16393-add-warning-log-duplicate-uuid b/changes/16393-add-warning-log-duplicate-uuid
diff --git a/changes/16961-return-api-token-for-api-only-users b/changes/16961-return-api-token-for-api-only-users
diff --git a/changes/17316-parse-config-profile-error b/changes/17316-parse-config-profile-error
diff --git a/changes/17365-update-osquery-flags b/changes/17365-update-osquery-flags
diff --git a/changes/17387-soft-delete-host-script-and-software-install-results b/changes/17387-soft-delete-host-script-and-software-install-results
diff --git a/changes/17528-automatic-install-enable-scripts b/changes/17528-automatic-install-enable-scripts
diff --git a/changes/17728-send-408-instead-of-500-for-apple-mdm-timeout b/changes/17728-send-408-instead-of-500-for-apple-mdm-timeout
diff --git a/changes/18115-host_issues b/changes/18115-host_issues
diff --git a/changes/18130-fleetd-linux-end-user-email b/changes/18130-fleetd-linux-end-user-email
diff --git a/changes/18427-cert-names b/changes/18427-cert-names
diff --git a/changes/18534-support-rpm-upgrade b/changes/18534-support-rpm-upgrade
diff --git a/changes/18733-vscode-false-pos b/changes/18733-vscode-false-pos
diff --git a/changes/18993-404-when-no-team-on-delete-team-policies b/changes/18993-404-when-no-team-on-delete-team-policies
diff --git a/changes/19000-zoominfo-icon b/changes/19000-zoominfo-icon
diff --git a/changes/19090-flashing-count b/changes/19090-flashing-count
diff --git a/changes/19103-my-device-os-settings b/changes/19103-my-device-os-settings
diff --git a/changes/19129-fleetctl-preview-enroll-secrets b/changes/19129-fleetctl-preview-enroll-secrets
diff --git a/changes/19181-software-empty-states b/changes/19181-software-empty-states
diff --git a/changes/19184-activity-human-readable b/changes/19184-activity-human-readable
diff --git a/changes/19197-fix-windows-remove-fleetd-script b/changes/19197-fix-windows-remove-fleetd-script
diff --git a/changes/19284-modal-background-scrollbars b/changes/19284-modal-background-scrollbars
diff --git a/changes/19290-fix-make-slice-with-capacity b/changes/19290-fix-make-slice-with-capacity
diff --git a/changes/19300-sticky-tooltips b/changes/19300-sticky-tooltips
diff --git a/changes/19324-fix-panic-in-download-software b/changes/19324-fix-panic-in-download-software
diff --git a/changes/19332-clear-secrets-with-gitops b/changes/19332-clear-secrets-with-gitops
diff --git a/changes/19347-custom-kernel-vuln-detection b/changes/19347-custom-kernel-vuln-detection
diff --git a/changes/19348-software-host-details-page b/changes/19348-software-host-details-page
diff --git a/changes/19365-disable-ai-migration b/changes/19365-disable-ai-migration
diff --git a/changes/19453-improve-software-installer-upload-endpoint b/changes/19453-improve-software-installer-upload-endpoint
diff --git a/changes/19500-scripts-cleanup b/changes/19500-scripts-cleanup
diff --git a/changes/19501-team-level-no-teams-bug b/changes/19501-team-level-no-teams-bug
diff --git a/changes/19512-mdm-migration-sonoma b/changes/19512-mdm-migration-sonoma
diff --git a/changes/19526-installers-bucket b/changes/19526-installers-bucket
diff --git a/changes/19528-dot-notation-bug-on-queries b/changes/19528-dot-notation-bug-on-queries
diff --git a/changes/19545-unlock-pin b/changes/19545-unlock-pin
diff --git a/changes/19580-fix-linux-unlock-script-for-user-without-password b/changes/19580-fix-linux-unlock-script-for-user-without-password
diff --git a/changes/19600-add-config-to-set-query-report-cap b/changes/19600-add-config-to-set-query-report-cap
diff --git a/changes/19612-idp-ingest b/changes/19612-idp-ingest
diff --git a/changes/19618-device-user-pageload b/changes/19618-device-user-pageload
diff --git a/changes/19688-fleet-mdm-detection b/changes/19688-fleet-mdm-detection
diff --git a/changes/19771-prof-size b/changes/19771-prof-size
diff --git a/changes/19775-clarify-cvss-score b/changes/19775-clarify-cvss-score
diff --git a/changes/19819-duplicate-os-versions b/changes/19819-duplicate-os-versions
diff --git a/changes/19845-activities-created_at b/changes/19845-activities-created_at
diff --git a/changes/19928-empty-certs b/changes/19928-empty-certs
diff --git a/changes/6978-device-token-validation b/changes/6978-device-token-validation
diff --git a/changes/conf-6385-host-policy-table-fixes b/changes/conf-6385-host-policy-table-fixes
diff --git a/changes/feature_19010-ipad-ios-wipe b/changes/feature_19010-ipad-ios-wipe
diff --git a/changes/fix-s3-back-compat b/changes/fix-s3-back-compat
diff --git a/changes/issue-15197-dont-send-500-debug-error b/changes/issue-15197-dont-send-500-debug-error
diff --git a/changes/issue-19433-render-0-value-as-number b/changes/issue-19433-render-0-value-as-number
diff --git a/changes/issue-19555-dashboard-icon-fixes b/changes/issue-19555-dashboard-icon-fixes
diff --git a/changes/part-of-19072-use-reader-db-for-stats b/changes/part-of-19072-use-reader-db-for-stats
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.1.0
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.51.1
+appVersion: v4.53.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.51.1 # Version of Fleet to deploy
+imageTag: v4.53.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.51.1"
+  default     = "fleetdm/fleet:v4.53.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.51.1"
+  default = "fleet:v4.53.0"
 }