Prepare v4.41.0 (#15350)

fleetdm · Nov 29, 2023 · f6cb052 · f6cb052
1 parent 5a94618
commit f6cb052
Show file tree

Hide file tree

Showing 51 changed files with 60 additions and 86 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,49 @@
+## Fleet 4.41.0 (Nov 28, 2023)
+
+### Changes
+
+* **Endpoint operations**:
+  - Enhanced `fleetctl` and API to support PowerShell (.ps1) scripts.
+  - Updated several API endpoints to support `os_settings` filter, including Windows profiles status.
+  - Enabled `after` parameter for improved pagination in various endpoints.
+  - Improved the `fleet/queries/run` endpoint with better error handling.
+  - Increased frequency of metrics reporting from Fleet servers to daily.
+  - Added caching for policy results in MySQL for faster operations.
+
+* **Device management (MDM)**:
+  - Added database tables for Windows profiles support.
+  - Added validation for WSTEP certificate and key pair before enabling Windows MDM.
+
+* **Vulnerability management**:
+  - Fleet now uses NVD API 2.0 for CVE information download.
+  - Added support for JetBrains application vulnerability data.
+  - Tightened software matching to reduce false positives.
+  - Stopped reporting Atom editor packages in software inventory.
+  - Introduced support for Windows PowerShell scripts in the UI.
+
+* **UI improvements**:
+  - Updated activity feed for better communication around JIT-provisioned user logins.
+  - Query report now displays the host's display name instead of the hostname.
+  - Improved UI components like the manage page's label filter and edit columns modal.
+  - Enabled all sort headers in the UI to be fully clickable.
+  - Removed the creation of OS policies from a host's operating system in the UI.
+  - Ensured correct settings visibility in the Settings > Advanced section.
+
+### Bug fixes
+
+  - Fixed long result cell truncation in live query results and query reports.
+  - Fixed a Redis cluster mode detection issue for RedisLabs hosted instances.
+  - Fixed a false positive vulnerability report for Citrix Workspace.
+  - Fixed an edge case sorting bug related to the `last_restarted` value for hosts.
+  - Fixed an issue with creating .deb installers with different enrollment keys.
+  - Fixed SMTP configuration validation issues for TLS-only servers.
+  - Fixed caching of team MDM configurations to improve performance at scale.
+  - Fixed delete pending issue during orbit.exe installation.
+  - Fixed a bug causing the disk encryption key banner to not display correctly.
+  - Fixed various error code inconsistencies across endpoints.
+  - Fixed filtering hosts with invalid team_id now returns a 400 error.
+  - Fixed false positives in software matching for similar names.
+
 ## Fleet 4.40.0 (Nov 3, 2023)
 
 ### Changes

diff --git a/changes/11446-queries-run-when-forbidden b/changes/11446-queries-run-when-forbidden
diff --git a/changes/12409-allow-to-revert-deleted-munki b/changes/12409-allow-to-revert-deleted-munki
diff --git a/changes/12634-keep-user-email b/changes/12634-keep-user-email
diff --git a/changes/13160-sort-order b/changes/13160-sort-order
diff --git a/changes/13260-deb-installer b/changes/13260-deb-installer
diff --git a/changes/13574-cache-policy-results b/changes/13574-cache-policy-results
diff --git a/changes/14102-fix-label-filter-select b/changes/14102-fix-label-filter-select
diff --git a/changes/14116-citrix-false-pos b/changes/14116-citrix-false-pos
diff --git a/changes/14260-host-expiry-window b/changes/14260-host-expiry-window
diff --git a/changes/14345-JIT-provisioned-login-activities b/changes/14345-JIT-provisioned-login-activities
diff --git a/changes/14361-fleetctl-apply-changes b/changes/14361-fleetctl-apply-changes
diff --git a/changes/14362-mdm-profiles-summary-api b/changes/14362-mdm-profiles-summary-api
diff --git a/changes/14424-hosts-filter-windows-profiles-status b/changes/14424-hosts-filter-windows-profiles-status
diff --git a/changes/14493-truncate-long-results-columns b/changes/14493-truncate-long-results-columns
diff --git a/changes/14519-header-clickability b/changes/14519-header-clickability
diff --git a/changes/14571-carves-after-parameter b/changes/14571-carves-after-parameter
diff --git a/changes/14629-smtp-validation-fix b/changes/14629-smtp-validation-fix
diff --git a/changes/14752-windows-scripts b/changes/14752-windows-scripts
diff --git a/changes/14753-windows-ps1-api b/changes/14753-windows-ps1-api
diff --git a/changes/14763-show-host-display-name-in-query-report b/changes/14763-show-host-display-name-in-query-report
diff --git a/changes/14824-NVD-work b/changes/14824-NVD-work
diff --git a/changes/14888-nvd-cve-sync-conversion b/changes/14888-nvd-cve-sync-conversion
diff --git a/changes/14991-bump-minimum-osquery-versions b/changes/14991-bump-minimum-osquery-versions
diff --git a/changes/15037-hosts-invalid-team_id-filter b/changes/15037-hosts-invalid-team_id-filter
diff --git a/changes/15068-host-disk-encryption b/changes/15068-host-disk-encryption
diff --git a/changes/15135-remove-atom-packages b/changes/15135-remove-atom-packages
diff --git a/changes/15143-CPE-false-matches-on-bundle-id b/changes/15143-CPE-false-matches-on-bundle-id
diff --git a/changes/fix-redis-cluster-disabled-detection b/changes/fix-redis-cluster-disabled-detection
diff --git a/changes/issue-11665-two-column-edit-columns-modal b/changes/issue-11665-two-column-edit-columns-modal
diff --git a/changes/issue-14360-add-windows-profiles-tables b/changes/issue-14360-add-windows-profiles-tables
diff --git a/changes/issue-14363-api-windows-profiles b/changes/issue-14363-api-windows-profiles
diff --git a/changes/issue-14366-api-upload-profiles b/changes/issue-14366-api-upload-profiles
diff --git a/changes/issue-14446-validate-enable-windows-mdm b/changes/issue-14446-validate-enable-windows-mdm
diff --git a/changes/issue-14708-fix-cached-team-mdm b/changes/issue-14708-fix-cached-team-mdm
diff --git a/changes/issue-14958-installer-windows-delete-pending b/changes/issue-14958-installer-windows-delete-pending
diff --git a/changes/issue-15050-pluralize-query-deletion-activity-log b/changes/issue-15050-pluralize-query-deletion-activity-log
diff --git a/changes/issue-15111-list-profiles b/changes/issue-15111-list-profiles
diff --git a/changes/windows-custom-settings-configs b/changes/windows-custom-settings-configs
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,7 +8,7 @@ version: v6.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.40.0
+appVersion: v4.41.0
 dependencies:
 - name: mysql
   condition: mysql.enabled

diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.40.0 # Version of Fleet to deploy
+imageTag: v4.41.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.40.0"
+  default     = "fleetdm/fleet:v4.41.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.40.0"
+  default = "fleet:v4.41.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -156,8 +156,8 @@ module "jitprovisioner-lambda-warmer" {
   version       = "3.0.1"
   function_name = aws_lambda_function.jitprovisioner.function_name
   function_arn  = aws_lambda_function.jitprovisioner.arn
-# This just needs to have a request to parse.
-  input         = <<EOINPUT
+  # This just needs to have a request to parse.
+  input = <<EOINPUT
 {
     "requestContext": {
         "elb": {
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.40.0"
+  fleet_tag = "v4.41.0"
 }
 
 resource "null_resource" "standard-query-library" {

diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.40.0"
+    value = "v4.41.0"
   }
 
   set {

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.40.0")
+    image                        = optional(string, "fleetdm/fleet:v4.41.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.40.0")
+    image                        = optional(string, "fleetdm/fleet:v4.41.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.40.0"
+  fleet_image = "fleetdm/fleet:v4.41.0"
   domain_name = "example.com"
 }
 

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -165,7 +165,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.40.0")
+    image                        = optional(string, "fleetdm/fleet:v4.41.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.40.0")
+    image                        = optional(string, "fleetdm/fleet:v4.41.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.40.0",
+  "version": "v4.41.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"