diff --git a/CHANGELOG.md b/CHANGELOG.md
index ee4fb269e861..08c61f7bc8b9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,58 @@
+## Fleet 4.43.0 (Jan 9, 2024)
+
+### Changes
+
+* **Endpoint operations**:
+  - Added new `POST /api/v1/fleet/queries/:id/run` endpoint for synchronous live queries.
+  - Added `PUT /api/fleet/orbit/device_mapping` and `PUT /api/v1/fleet/hosts/{id}/device_mapping` endpoints for setting or replacing custom email addresses.
+  - Added experimental `--end-user-email` flag to `fleetctl package` for `.msi` installer bundling.
+  - Added `host_count_updated_at` to policy API responses.
+  - Added ability to query by host display name via list hosts endpoint.
+  - Added `gigs_total_disk_space` to host endpoint responses.
+  - Added ability to remotely configure `fleetd` update channels in agent options (Fleet Premium only, requires `fleetd` >= 1.20.0).
+  - Improved error message for osquery log write failures.
+  - Protect live query performance by limiting results per live query.
+  - Improved error handling and validation for `/api/fleet/orbit/device_token` and other endpoints.
+
+* **Device management (MDM)**:
+  - Added check for custom end user email fields in enrollment profiles.
+  - Modified hosts and labels endpoints to include only user-defined Windows MDM profiles.
+  - Improved profile verification logic for 'pending' profiles.
+  - Updated enrollment process so that `fleetd` auto-installs on Apple hosts enabling MDM features manually.
+  - Extended script execution timeout to 5 minutes.
+  - Extended Script disabling functionality to various script endpoints and `fleetctl`.
+
+### Bug fixes and improvements
+  - Fix profiles incorrectly being marked as "Failed". 
+    - **NOTE**: If you are using MDM features and have already upgraded to v4.42.0, you will need to take manual steps to resolve this issue. Please [follow these instructions](https://github.com/fleetdm/fleet/issues/15725) to reset your profiles. 
+  - Added tooltip to policies page stating when policy counts were last updated.
+  - Added bold styling to profile name in custom profile activity logs.
+  - Implemented style tweaks to the nudge preview on OS updates page.
+  - Updated sort query results and reports case sensitivity and default to sorting.
+  - Added disk size indication when disk is full. 
+  - Replaced 500 error with 409 for token conflicts with another host.
+  - Fixed script output text formatting.
+  - Fixed styling issues in policy automations modal and nudge preview on OS updates page.
+  - Fixed loading spinner not appearing when running a script on a host.
+  - Fixed duplicate view all hosts link in disk encryption table.
+  - Fixed tooltip text alignment UI bug.
+  - Fixed missing 'Last restarted' values when filtering hosts by label.
+  - Fixed broken link on callout box on host details page. 
+  - Fixed bugs in searching hosts by email addresses and filtering by labels.
+  - Fixed a bug where the host details > software > munki issues section was sometimes displayed erroneously.
+  - Fixed a bug where OS compatibility was not correctly calculated for certain queries.
+  - Fixed issue where software title aggregation was not running during vulnerability scans.
+  - Fixed an error message bug for password length on new user creation.
+  - Fixed a bug causing misreporting of vulnerability scanning status in analytics.
+  - Fixed issue with query results reporting after discard data is enabled.
+  - Fixed a bug preventing label selection while the label search field was active.
+  - Fixed bug where `fleetctl` did not allow placement of `--context` and `--debug` flags following certain commands.
+  - Fixed a validation bug allowing `overrides.platform` to be set to `null`.
+  - Fixed `fleetctl` issue with creating a new query when running a query by name.
+  - Fixed a bug that caused vulnerability scanning status to be misreported in analytics.
+  - Fixed CVE tooltip bullets on the software page.
+  - Fixed a bug that didn't allow enabling team disk encryption if macOS MDM was not configured.
+
 ## Fleet 4.42.0 (Dec 21, 2023)
 
 ### Changes
diff --git a/changes/13825-remotely-configure-fleetd-update-channels b/changes/13825-remotely-configure-fleetd-update-channels
deleted file mode 100644
index 528de00d6a5f..000000000000
--- a/changes/13825-remotely-configure-fleetd-update-channels
+++ /dev/null
@@ -1 +0,0 @@
-* Remotely configure fleetd update channels in agent options (Fleet Premium only, and requires fleetd >= 1.20.0).
diff --git a/changes/14500-disable-scripts-cli-endpoints b/changes/14500-disable-scripts-cli-endpoints
deleted file mode 100644
index c8e8b7585b91..000000000000
--- a/changes/14500-disable-scripts-cli-endpoints
+++ /dev/null
@@ -1 +0,0 @@
-- Extends Script disabling functionality to `scripts/run` and `scripts/run/sync` and `fleetctl`.
\ No newline at end of file
diff --git a/changes/14500-disable-scripts-impl b/changes/14500-disable-scripts-impl
deleted file mode 100644
index d26e5e832fe6..000000000000
--- a/changes/14500-disable-scripts-impl
+++ /dev/null
@@ -1 +0,0 @@
-- Adds ability to disable Scripts feature in Fleet through a new config flag: `scripts_disabled`.
\ No newline at end of file
diff --git a/changes/14780-orphaned-query-results b/changes/14780-orphaned-query-results
deleted file mode 100644
index 69a809e5b720..000000000000
--- a/changes/14780-orphaned-query-results
+++ /dev/null
@@ -1 +0,0 @@
-- resolved issue where some query results were still reporting after Discard Data is enabled on a Query
\ No newline at end of file
diff --git a/changes/14800-new-live-query-endpoint b/changes/14800-new-live-query-endpoint
deleted file mode 100644
index 706d3c291c78..000000000000
--- a/changes/14800-new-live-query-endpoint
+++ /dev/null
@@ -1 +0,0 @@
-Added a new synchronous live query endpoint: POST /api/v1/fleet/queries/:id/run
diff --git a/changes/14874-clip-live-query-results b/changes/14874-clip-live-query-results
deleted file mode 100644
index d117992e4772..000000000000
--- a/changes/14874-clip-live-query-results
+++ /dev/null
@@ -1 +0,0 @@
-* Protect live query performance by limiting number of results per live query
diff --git a/changes/15035-sql-parsing b/changes/15035-sql-parsing
deleted file mode 100644
index 6d723c3fcd0e..000000000000
--- a/changes/15035-sql-parsing
+++ /dev/null
@@ -1 +0,0 @@
-- Fix a bug where OS compatibility was not correctly calculated for certain queries
diff --git a/changes/15058-add-gigs-total-disk-space b/changes/15058-add-gigs-total-disk-space
deleted file mode 100644
index 74e7827a35ac..000000000000
--- a/changes/15058-add-gigs-total-disk-space
+++ /dev/null
@@ -1,2 +0,0 @@
-Added `gigs_total_disk_space` to host endpoint responses.
-- Now user will know host disk size even when disk is full (percent_disk_space_available==0)
diff --git a/changes/15109-fix-scripts-spinner b/changes/15109-fix-scripts-spinner
deleted file mode 100644
index 13ab309fd0d9..000000000000
--- a/changes/15109-fix-scripts-spinner
+++ /dev/null
@@ -1 +0,0 @@
-* Fix loading spinner not appearing when running a script on a host.
diff --git a/changes/15213-vuln-enabled b/changes/15213-vuln-enabled
deleted file mode 100644
index 8b4b64b546b3..000000000000
--- a/changes/15213-vuln-enabled
+++ /dev/null
@@ -1 +0,0 @@
-- Fixes a bug that caused vulnerability scanning status to be misreported in analytics.
\ No newline at end of file
diff --git a/changes/15253-sort-results-case-insensitively b/changes/15253-sort-results-case-insensitively
deleted file mode 100644
index 3862ebbbf055..000000000000
--- a/changes/15253-sort-results-case-insensitively
+++ /dev/null
@@ -1,2 +0,0 @@
-* Sort query results and reports case insensitively, and default to sorting by the host display name
-column
diff --git a/changes/15323-add-host_count_updated_at-to-policy b/changes/15323-add-host_count_updated_at-to-policy
deleted file mode 100644
index 2c48ec1396d7..000000000000
--- a/changes/15323-add-host_count_updated_at-to-policy
+++ /dev/null
@@ -1 +0,0 @@
-Added `host_count_updated_at` to policy API responses.
diff --git a/changes/15323-add-host_count_updated_at-to-policy-frontend b/changes/15323-add-host_count_updated_at-to-policy-frontend
deleted file mode 100644
index 0e6879e1dfc3..000000000000
--- a/changes/15323-add-host_count_updated_at-to-policy-frontend
+++ /dev/null
@@ -1 +0,0 @@
-Added tooltip to Policies page stating when policy counts were last updated.
diff --git a/changes/15436-fleetctl-generate-context b/changes/15436-fleetctl-generate-context
deleted file mode 100644
index cd0271cee4d5..000000000000
--- a/changes/15436-fleetctl-generate-context
+++ /dev/null
@@ -1 +0,0 @@
-- Fixed bug where fleetctl did not allow placement of `--context` and `--debug` flages following the `generate mdm-apple` and `generate mdm-apple-bm` commands.
diff --git a/changes/15455-logging-issues b/changes/15455-logging-issues
deleted file mode 100644
index 82e60442abfc..000000000000
--- a/changes/15455-logging-issues
+++ /dev/null
@@ -1 +0,0 @@
-Improved error message when Fleet cannot write osquery log results to logging destination.
\ No newline at end of file
diff --git a/changes/15458-host-search-pending-display-name b/changes/15458-host-search-pending-display-name
deleted file mode 100644
index 1509015b204d..000000000000
--- a/changes/15458-host-search-pending-display-name
+++ /dev/null
@@ -1 +0,0 @@
-- Added ability to query by host display name via list hosts endpoint.
\ No newline at end of file
diff --git a/changes/15522-query-host-search b/changes/15522-query-host-search
deleted file mode 100644
index 88659edca9f3..000000000000
--- a/changes/15522-query-host-search
+++ /dev/null
@@ -1 +0,0 @@
-- Fixes bug in searching for hosts by email addresses.
\ No newline at end of file
diff --git a/changes/15525-email-search b/changes/15525-email-search
deleted file mode 100644
index 7eb1dec5f5fe..000000000000
--- a/changes/15525-email-search
+++ /dev/null
@@ -1 +0,0 @@
-- Fixes bug where searching hosts by email when filtering by a label returned no results.
\ No newline at end of file
diff --git a/changes/15577-conditionally-display-munki-card b/changes/15577-conditionally-display-munki-card
deleted file mode 100644
index 1557ba8ed0d8..000000000000
--- a/changes/15577-conditionally-display-munki-card
+++ /dev/null
@@ -1,2 +0,0 @@
-- Fix a bug where the host details > software > munki issues section was sometimes displayed when
-  Munki was not in use
diff --git a/changes/15625-password-error b/changes/15625-password-error
deleted file mode 100644
index a929a6c2fcf2..000000000000
--- a/changes/15625-password-error
+++ /dev/null
@@ -1 +0,0 @@
-- Fixes error message returned when a password for a new user exceeds the max password length.
\ No newline at end of file
diff --git a/changes/15631-policy-automations-modal b/changes/15631-policy-automations-modal
deleted file mode 100644
index 0304793e4ce8..000000000000
--- a/changes/15631-policy-automations-modal
+++ /dev/null
@@ -1 +0,0 @@
-- Fix a styling bug in the policy automations modal
diff --git a/changes/15714-windows-os-updates-profile-summary b/changes/15714-windows-os-updates-profile-summary
deleted file mode 100644
index 836bab37ad1e..000000000000
--- a/changes/15714-windows-os-updates-profile-summary
+++ /dev/null
@@ -1,3 +0,0 @@
-- Modified hosts and labels endpoints so that only user-defined Windows MDM profiles are included in
-  filtered results, host details, and profiles summaries API responses (more specifically,
-  "Windows OS updates" is excluded from these responses).
diff --git a/changes/15724-remove-bullets-from-CVEs b/changes/15724-remove-bullets-from-CVEs
deleted file mode 100644
index eac26eb8a728..000000000000
--- a/changes/15724-remove-bullets-from-CVEs
+++ /dev/null
@@ -1 +0,0 @@
-On Software page, CVE tooltip no longer has bullets.
diff --git a/changes/15725-fix-profile-updated-at-migration b/changes/15725-fix-profile-updated-at-migration
deleted file mode 100644
index e2fe454e9894..000000000000
--- a/changes/15725-fix-profile-updated-at-migration
+++ /dev/null
@@ -1,22 +0,0 @@
-- Fixed a database migration issue introduced in v4.42.0 that caused Fleet to consider
-  previously installed MDM profiles as outdated, which in turn can cause MDM profiles for macOS
-  hosts to become stuck in the "failed" state in some cases. Users who have not yet upgraded to
-  v4.42.0 should upgrade to v4.43.0 directly. Users who have already upgraded to v4.42.0 and find
-  one or more hosts that are affected by this issue can mitigate the issue by directly updating the
-  Fleet database with the following SQL statement, which will cause the failed profiles to be
-  redelivered to the host:
-
-  ```sql
-  UPDATE
-    host_mdm_apple_profiles
-  SET
-    status = NULL,
-    retries = 0
-  WHERE
-    status = 'failed' AND
-    (detail = 'Failed, was verifying' OR detail = 'Failed, was verified') AND
-    host_uuid = ?;
-  ```
-
-  Replace the `?` in the above statement with the UUID of the affected host, which can be found
-  by enabling the UUID column of the hosts table in the Fleet UI.
diff --git a/changes/15731-fix-double-view-all-links b/changes/15731-fix-double-view-all-links
deleted file mode 100644
index d02cde7eb0c2..000000000000
--- a/changes/15731-fix-double-view-all-links
+++ /dev/null
@@ -1 +0,0 @@
-- Fix duplicate view all hosts link in disk encryption table.
diff --git a/changes/15802-remove-not-updating-policies-callout b/changes/15802-remove-not-updating-policies-callout
deleted file mode 100644
index 5b417697d895..000000000000
--- a/changes/15802-remove-not-updating-policies-callout
+++ /dev/null
@@ -1 +0,0 @@
-On Host Details Policies page, removed callout box with a broken link.
\ No newline at end of file
diff --git a/changes/15817-disk-encryption b/changes/15817-disk-encryption
deleted file mode 100644
index 418c47a358a2..000000000000
--- a/changes/15817-disk-encryption
+++ /dev/null
@@ -1 +0,0 @@
-* Fix a bug that didn't allow to enable team disk encryption if macOS MDM was not configured.
diff --git a/changes/15822-missing-last_restarted_at b/changes/15822-missing-last_restarted_at
deleted file mode 100644
index 64b5dfc644f6..000000000000
--- a/changes/15822-missing-last_restarted_at
+++ /dev/null
@@ -1 +0,0 @@
-Fixed missing 'Last restarted' values when filtering hosts by label.
\ No newline at end of file
diff --git a/changes/15832-device_token-improvements b/changes/15832-device_token-improvements
deleted file mode 100644
index a3cbf6a10a7a..000000000000
--- a/changes/15832-device_token-improvements
+++ /dev/null
@@ -1,4 +0,0 @@
-Fixed badly formatted error message in /api/fleet/orbit/device_token endpoint and others.
-In /api/fleet/orbit/device_token:
-- Added token validation -- empty token not allowed
-- Replaced 500 error with 409 when token conflicts with another host
diff --git a/changes/15930-bugfix-vuln-cmd b/changes/15930-bugfix-vuln-cmd
deleted file mode 100644
index 344251e853bc..000000000000
--- a/changes/15930-bugfix-vuln-cmd
+++ /dev/null
@@ -1,2 +0,0 @@
-- fixed issue where software title aggregation was not running when triggering a vulnerability scan
-  via `fleet vuln_processing`
\ No newline at end of file
diff --git a/changes/feat-extend-script-timeout b/changes/feat-extend-script-timeout
deleted file mode 100644
index 328813168142..000000000000
--- a/changes/feat-extend-script-timeout
+++ /dev/null
@@ -1 +0,0 @@
-* Extended the script execution timeout to 5 minutes
diff --git a/changes/issue-15057-custom-email-device-mapping b/changes/issue-15057-custom-email-device-mapping
deleted file mode 100644
index c022b035b2de..000000000000
--- a/changes/issue-15057-custom-email-device-mapping
+++ /dev/null
@@ -1,2 +0,0 @@
-* Added the `PUT /api/fleet/orbit/device_mapping` and `PUT /api/v1/fleet/hosts/{id}/device_mapping` endpoints (orbit-authenticated and user-authenticated) to set or replace the custom email address associated with a host.
-* Added the experimental `--end-user-email` flag to `fleetctl package` so that the email address associated with the host can be bundled in the `.msi` installer for Windows.
diff --git a/changes/issue-15057-custom-email-device-mapping-orbit b/changes/issue-15057-custom-email-device-mapping-orbit
deleted file mode 100644
index 6f6e23dbda31..000000000000
--- a/changes/issue-15057-custom-email-device-mapping-orbit
+++ /dev/null
@@ -1 +0,0 @@
-- Added functionality to fleetd for macOS hosts to check for custom end user email field in Fleet MDM enrollment profile.
diff --git a/changes/issue-15435-tooltip-text-alignment-fix b/changes/issue-15435-tooltip-text-alignment-fix
deleted file mode 100644
index dec26f6b05fe..000000000000
--- a/changes/issue-15435-tooltip-text-alignment-fix
+++ /dev/null
@@ -1 +0,0 @@
-- fix tooltip text alignment ui bug.
diff --git a/changes/issue-15515-fix-script-output-formatting b/changes/issue-15515-fix-script-output-formatting
deleted file mode 100644
index 7332dc4cdd78..000000000000
--- a/changes/issue-15515-fix-script-output-formatting
+++ /dev/null
@@ -1 +0,0 @@
-- improve script output text formatting.
diff --git a/changes/issue-15733-os-update-style b/changes/issue-15733-os-update-style
deleted file mode 100644
index d3b9b4a041cc..000000000000
--- a/changes/issue-15733-os-update-style
+++ /dev/null
@@ -1 +0,0 @@
-- style tweaks to the nudge preview on OS updates page
diff --git a/changes/issue-15762-bold-activities b/changes/issue-15762-bold-activities
deleted file mode 100644
index 53002e2f7a2c..000000000000
--- a/changes/issue-15762-bold-activities
+++ /dev/null
@@ -1 +0,0 @@
-- add bold styling to profile name on adding and deleting custom profile activities
diff --git a/changes/manual-enrollment b/changes/manual-enrollment
deleted file mode 100644
index 539695db5e64..000000000000
--- a/changes/manual-enrollment
+++ /dev/null
@@ -1 +0,0 @@
-* fleetd is now automatically installed on Apple hosts turning on MDM features manually if it wasn't installed before.
diff --git a/changes/profile-verification b/changes/profile-verification
deleted file mode 100644
index ab147526377e..000000000000
--- a/changes/profile-verification
+++ /dev/null
@@ -1 +0,0 @@
-* Improve profile verification logic to verify 'pending' profiles.
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
index ce77e409385e..3bd693975b85 100644
--- a/charts/fleet/Chart.yaml
+++ b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.42.0
+appVersion: v4.43.0
 dependencies:
 - name: mysql
   condition: mysql.enabled
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index bdd5b39d743f..8cb4a968128f 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.42.0 # Version of Fleet to deploy
+imageTag: v4.43.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:
diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
index 19ec8470736b..524c33f00c07 100644
--- a/infrastructure/dogfood/terraform/aws/variables.tf
+++ b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.42.0"
+  default     = "fleetdm/fleet:v4.43.0"
 }
 
 variable "software_inventory" {
diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
index 6a58f99ec880..e7bbe8126636 100644
--- a/infrastructure/dogfood/terraform/gcp/variables.tf
+++ b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.42.0"
+  default = "fleet:v4.43.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
index 3fa971c999eb..e73f54f2e01f 100644
--- a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
+++ b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.42.0"
+  fleet_tag = "v4.43.0"
 }
 
 resource "null_resource" "standard-query-library" {
diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
index a84989d3f26e..2a3bc963fcc9 100644
--- a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
+++ b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.42.0"
+    value = "v4.43.0"
   }
 
   set {
diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
index 62967aa46f7b..239719b31807 100644
--- a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
+++ b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
index d33914febea4..6c4bf7fae8e4 100644
--- a/terraform/byo-vpc/byo-db/variables.tf
+++ b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
index be0f411b6996..a6c6a5414951 100644
--- a/terraform/byo-vpc/example/main.tf
+++ b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.42.0"
+  fleet_image = "fleetdm/fleet:v4.43.0"
   domain_name = "example.com"
 }
 
diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
index 2c0d8b49ab6b..a973ac6fbc74 100644
--- a/terraform/byo-vpc/variables.tf
+++ b/terraform/byo-vpc/variables.tf
@@ -165,7 +165,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
diff --git a/terraform/variables.tf b/terraform/variables.tf
index 6895b0e24073..3679ed9dde37 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.42.0")
+    image                        = optional(string, "fleetdm/fleet:v4.43.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])
diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
index 70f48ba370fa..2bd859426acc 100644
--- a/tools/fleetctl-npm/package.json
+++ b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.42.0",
+  "version": "v4.43.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"