Adding changes for Fleet v4.49.0 (#18496)

fleetdm · Apr 24, 2024 · 2a1c19e · 2a1c19e
1 parent 56a26f5
commit 2a1c19e
Show file tree

Hide file tree

Showing 83 changed files with 65 additions and 97 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,54 @@
+## Fleet 4.49.0 (Apr 24, 2024)
+
+### Endpoint operations
+
+- Added integration with Google Calendar for policy compliance events.
+- Added new API endpoints to add/remove manual labels to/from a host.
+- Updated the `POST /api/v1/fleet/labels` and `PATCH /api/v1/fleet/labels/{id}` endpoints to support creation and update of manual labels.
+- Implemented changes in `fleetctl gitops` for batch processing queries and policies.
+- Enabled setting host status webhook at the team level via REST API and fleetctl apply/gitops.
+
+### Device management (MDM)
+
+- Added API functionality for creating DDM declarations, both individually and as a batch.
+- Added creation or update of macOS DDM profile to enforce OS Updates settings whenever the settings are changed.
+- Updated `fleetctl run-script` to include new `--team` and `--script-name` flags.
+- Displayed disk encryption status in macOS as "verifying" while verifying the escrowed key.
+- Added the `enable_release_device_manually` configuration setting for teams and no team, which controls the automatic release of a macOS DEP-enrolled device.
+- Updated the `POST /api/v1/fleet/hosts/:id/wipe` Fleet Premium API endpoint to support remote wiping a host.
+- Added the `enable_release_device_manually` configuration, which affects macOS automatic enrollment profile settings.
+
+### Vulnerability management
+
+- Ignored Valve Corporation's Steam client's vulnerabilities on Windows and macOS due to retrieval challenges of the true version.
+- Updated the GET fleet/os_versions and GET fleet/os_versions/[id] to restrict team users from accessing os versions on hosts from other teams.
+
+### Bug fixes and improvements
+
+- Upgraded Golang version to 1.21.7.
+- Added a minimum supported node version in the `package.json`.
+- Made block_id mismatch errors more informative as 400s instead of 500s.
+- Added Windows MDM support to the `osquery-perf` host-simulation command.
+- Updated calendar events automations to not show error validation on enabling the feature.
+- Migrated MDM-related endpoints to new paths while maintaining support for old endpoints indefinitely.
+- Added a missing database index to the MDM Windows enrollments table to improve performance at scale.
+- Added cross-platform check for duplicate MDM profiles names in batch set MDM profiles API.
+- Fixed a bug where Microsoft Edge was not reporting vulnerabilities.
+- Fixed an issue with the `20240327115617_CreateTableNanoDDMRequests` database migration.
+- Fixed the error message to indicate if a conflict on uploading an Apple profile was caused by the profile's name or its identifier.
+- Fixed license checks to allow migration and restoring DEP devices during trial.
+- Fixed a 500 error in MySQL 8 and when DB user has insufficient privileges for `fleetctl debug db-locks` and `fleetctl debug db-innodb-status`.
+- Fixed a bug where values not derived from "actual" fleetd-chrome tables were not being displayed correctly.
+- Fixed a bug where values were not being rendered in host-specific query reports.
+- Fixed an issue with automatic release of the device after setup when a DDM profile is pending.
+- Fixed UI issues: alignment bugs, padding around empty states, tooltip rendering, and incorrect rendering of the global Host status expiry settings page.
+- Fixed a bug where `null` or excluded `smtp_settings` caused a UI 500 error.
+- Fixed an issue where a bad request response from a 3rd party MDM solution would result in a 500 error in Fleet during MDM migration.
+- Fixed a bug where updating policy name could result in multiple policies with the same name in a team.
+- Fixed potential server panic when events are created with calendar integration, but then global calendar integration is disabled.
+- Fixed fleetctl gitops dry-run validation issues when enabling calendar integration for the first time.
+- Fixed a bug where all Windows MDM enrollments were detected as automatic.
+
 ## Fleet 4.48.3 (Apr 16, 2024)
 
 ### Bug fixes

diff --git a/changes/12290-run-query-on-host b/changes/12290-run-query-on-host
diff --git a/changes/12292-policies-filter-by-platform b/changes/12292-policies-filter-by-platform
diff --git a/changes/15565-windows-automatic-enrollment b/changes/15565-windows-automatic-enrollment
diff --git a/changes/16120-add-windows-mdm-support-to-osquery-perf b/changes/16120-add-windows-mdm-support-to-osquery-perf
diff --git a/changes/16205-health-failing-counts b/changes/16205-health-failing-counts
diff --git a/changes/16260-recategorize-mdm-api-endpoints b/changes/16260-recategorize-mdm-api-endpoints
diff --git a/changes/16345-disabled-checkbox-tooltip b/changes/16345-disabled-checkbox-tooltip
diff --git a/changes/16500-policy-pass-fail-percentage b/changes/16500-policy-pass-fail-percentage
diff --git a/changes/16562-sql-deadlock b/changes/16562-sql-deadlock
diff --git a/changes/16562-sql-deadlock copy b/changes/16562-sql-deadlock copy
diff --git a/changes/16661-current-instance-checks b/changes/16661-current-instance-checks
diff --git a/changes/16767-updating-host-labels b/changes/16767-updating-host-labels
diff --git a/changes/16817-ms-edge-vuln b/changes/16817-ms-edge-vuln
diff --git a/changes/16951-improve-carve-request-timeout-error-code b/changes/16951-improve-carve-request-timeout-error-code
diff --git a/changes/17003-ingest-vscode_extensions b/changes/17003-ingest-vscode_extensions
diff --git a/changes/17018-reset-query-report b/changes/17018-reset-query-report
diff --git a/changes/17061-homebrew-python b/changes/17061-homebrew-python
diff --git a/changes/17065-null-smtp_settings b/changes/17065-null-smtp_settings
diff --git a/changes/17208-hover-states b/changes/17208-hover-states
diff --git a/changes/17230-fleet-in-your-calendar b/changes/17230-fleet-in-your-calendar
diff --git a/changes/17264-batch-process-gitops b/changes/17264-batch-process-gitops
diff --git a/changes/17265-filter-alignment b/changes/17265-filter-alignment
diff --git a/changes/17288-fix-sort-of-sql-results b/changes/17288-fix-sort-of-sql-results
diff --git a/changes/17308-script-content-cleanup b/changes/17308-script-content-cleanup
diff --git a/changes/17313-add-env-from-secret-capability-to-helm b/changes/17313-add-env-from-secret-capability-to-helm
diff --git a/changes/17347-team-user-os-version-restrict b/changes/17347-team-user-os-version-restrict
diff --git a/changes/17361-host-details-updates b/changes/17361-host-details-updates
diff --git a/changes/17362-orbit-and-desktop-version b/changes/17362-orbit-and-desktop-version
diff --git a/changes/17401-add-enable-release-device-manually b/changes/17401-add-enable-release-device-manually
diff --git a/changes/17404-mdm-custom-settings b/changes/17404-mdm-custom-settings
diff --git a/changes/17418-macos-14-nudge b/changes/17418-macos-14-nudge
diff --git a/changes/17420-update-ddm-profile-os-updates b/changes/17420-update-ddm-profile-os-updates
diff --git a/changes/17534-improve-error-states-org-settings b/changes/17534-improve-error-states-org-settings
diff --git a/changes/17557-ui-mdm-off-tooltip b/changes/17557-ui-mdm-off-tooltip
diff --git a/changes/17559-batch-set-duplicate-mdm b/changes/17559-batch-set-duplicate-mdm
diff --git a/changes/17562-windows-server-2019-os-details b/changes/17562-windows-server-2019-os-details
diff --git a/changes/17563-windows-add b/changes/17563-windows-add
diff --git a/changes/17621-bulk-delete-hosts-all-teams b/changes/17621-bulk-delete-hosts-all-teams
diff --git a/changes/17624-modal-flash-message-error b/changes/17624-modal-flash-message-error
diff --git a/changes/17662-render-standard-query-platforms-correctly b/changes/17662-render-standard-query-platforms-correctly
diff --git a/changes/17692-enrollment-state-3.md b/changes/17692-enrollment-state-3.md
diff --git a/changes/17733-innodb-lock-waits b/changes/17733-innodb-lock-waits
diff --git a/changes/17787-hidden-columns b/changes/17787-hidden-columns
diff --git a/changes/17897-api-resend-mdm-profile b/changes/17897-api-resend-mdm-profile
diff --git a/changes/17899-add-manual-labels-api b/changes/17899-add-manual-labels-api
diff --git a/changes/17927-fix-styling-for-live-query-disabled-warning b/changes/17927-fix-styling-for-live-query-disabled-warning
diff --git a/changes/17946-fleetd-chrome-numbers b/changes/17946-fleetd-chrome-numbers
diff --git a/changes/18060-host-activity-styling-bugs b/changes/18060-host-activity-styling-bugs
diff --git a/changes/18065-calendar-config-panic b/changes/18065-calendar-config-panic
diff --git a/changes/18081-upload-apple-profile-error-message b/changes/18081-upload-apple-profile-error-message
diff --git a/changes/18083-no-values-in-host-details-query-reports b/changes/18083-no-values-in-host-details-query-reports
diff --git a/changes/18084-hdp-empty-state-padding b/changes/18084-hdp-empty-state-padding
diff --git a/changes/18126-steam-vulns b/changes/18126-steam-vulns
diff --git a/changes/18142-fix-migration-issue-related-to-collation b/changes/18142-fix-migration-issue-related-to-collation
diff --git a/changes/18160-fix-release-device-with-pending-ddm-profiles b/changes/18160-fix-release-device-with-pending-ddm-profiles
diff --git a/changes/18256-calendar-feature-url-validation b/changes/18256-calendar-feature-url-validation
diff --git a/changes/18276-fix-schema-button-location b/changes/18276-fix-schema-button-location
diff --git a/changes/18299-gitops-calendar-validation b/changes/18299-gitops-calendar-validation
diff --git a/changes/18350-calendar-event-for-invalid-sql b/changes/18350-calendar-event-for-invalid-sql
diff --git a/changes/issue-17409-add-ddm-activities-to-ui b/changes/issue-17409-add-ddm-activities-to-ui
diff --git a/changes/issue-17416-update-ui-to-support-ddm b/changes/issue-17416-update-ui-to-support-ddm
diff --git a/changes/issue-17417-ui-os-updates-ddm b/changes/issue-17417-ui-os-updates-ddm
diff --git a/changes/issue-17476-get-bitlocker-status b/changes/issue-17476-get-bitlocker-status
diff --git a/changes/issue-17896-ui-resend-profile b/changes/issue-17896-ui-resend-profile
diff --git a/changes/issue-17898-new-manual-lables b/changes/issue-17898-new-manual-lables
diff --git a/changes/issue-18082-os-settings-stylings b/changes/issue-18082-os-settings-stylings
diff --git a/changes/issue-18483-fix-download-enroll-profile b/changes/issue-18483-fix-download-enroll-profile
diff --git a/changes/license-comparison b/changes/license-comparison
diff --git a/changes/min-node-version b/changes/min-node-version
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.0.2
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.48.3
+appVersion: v4.49.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.48.3 # Version of Fleet to deploy
+imageTag: v4.49.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.48.3"
+  default     = "fleetdm/fleet:v4.49.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.48.3"
+  default = "fleet:v4.49.0"
 }