# Fleet v4.54.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2024-07-17
- Version: v4.54.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.54.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.54.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Updated fleetctl gitops to be used to rename teams
- **changed** — Updated fleetctl query --hosts to work with hostnames, host UUIDs, and/or hardware serial numbers
- **added** — Add a host's upcoming scheduled maintenance window on the host details page of the UI and in host responses from the API
- **added** — Add support to fleetctl debug connection to test TLS connection with the embedded certs.pem in the fleetctl executable
- **added** — Add host's display name to calendar event descriptions
- **added** — Add .yml and .yaml file type validation and error message to fleetctl apply
- **added** — Add a tooltip to truncated text and not to untruncated values
- **added** — Add iOS/iPadOS builtin manual labels
- **added** — Add aggregation of iOS/iPadOS OS versions
- **added** — Add change to custom profiles for iOS/iPadOS to go from 'pending' straight to 'verified' (skip 'verifying')
- **added** — Add support for renewing SCEP certificates with custom enrollment profiles
- **added** — Add automatic install of fleetd when a host turns on MDM now uses the latest released fleetd version
- **added** — Add support for END_USER_EMAIL and FLEET_DESKTOP parameters to Windows MSI install package
- **added** — Add API changes to support the labels_include_all and labels_exclude_any fields
- **added** — Add fleetctl gitops and fleetctl apply support for labels_include_all and labels_exclude_any to configure a custom setting
- **added** — Add UI for uploading custom profiles with a target of hosts that include all/exclude any selected labels
- **added** — Add the database migrations to create the new exclude column for labels associated with MDM profiles and declarations
- **changed** — Update host script timeouts to be configurable via agent options using script_execution_timeout
- **changed** — Update fleetctl to use a polling mechanism when running run-script to accommodate longer script timeout values
- **changed** — Update the profile reconciliation logic to handle the new 'exclude any' labels

##### Fleet 4.54.0 (Jul 17, 2024)

###### Endpoint Operations

- Updated `fleetctl gitops` to be used to rename teams.
  - **NOTE:** `fleetctl gitops` needs to have previously run with this Fleet/fleetctl version or later.
  - The team name is changed if the YAML config is applied from the same filename as before.
- Updated `fleetctl query --hosts` to work with hostnames, host UUIDs, and/or hardware serial numbers.
- Added a host's upcoming scheduled maintenance window, if any, on the host details page of the UI and in host responses from the API.
- Added support to `fleetctl debug connection` to test TLS connection with the embedded certs.pem in
  the fleetctl executable.
- Added host's display name to calendar event descriptions.
- Added .yml and .yaml file type validation and error message to `fleetctl apply`.
- Added a tooltip to truncated text and not to untruncated values.

###### Device Management (MDM)

- Added iOS/iPadOS builtin manual labels. 
  - **NOTE:** Before migrating to this version, make sure to delete any labels with name "iOS" or "iPadOS".
- Added aggregation of iOS/iPadOS OS versions.
- Added change to custom profiles for iOS/iPadOS to go from 'pending' straight to 'verified' (skip 'verifying').
- Added support for renewing SCEP certificates with custom enrollment profiles.
- Added automatic install of `fleetd` when a host turns on MDM now uses the latest released `fleetd` version.
- Added support for `END_USER_EMAIL` and `FLEET_DESKTOP` parameters to Windows MSI install package.
- Added API changes to support the `labels_include_all` and `labels_exclude_any` fields (and accept the deprecated `labels` field as an alias for `labels_include_all`).
- Added `fleetctl gitops` and `fleetctl apply` support for `labels_include_all` and `labels_exclude_any` to configure a custom setting.
- Added UI for uploading custom profiles with a target of hosts that include all/exclude any selected labels.
- Added the database migrations to create the new `exclude` column for labels associated with MDM profiles (and declarations).
- Updated host script timeouts to be configurable via agent options using `script_execution_timeout`. 
- `fleetctl` now uses a polling mechanism when running `run-script` to accommodate longer script timeout values.
- Updated the profile reconciliation logic to handle the new "exclude any" labels.
- Updated so that the `fleetd` cleanup script for macOS that will return completed when run from Fleet.
- Updated so that the `fleetd` uninstall script will return completed when run from Fleet.
- Updated script run permissions -- only admins and maintainers can run arbitrary or saved scripts (not observer or observer+).
- Updated `fleetctl get mdm_commands` to return 20 rows and support `--host` `--type` filters to improve response time.
- Updated the instructions for manual MDM enrollment on the "My device" page to be clearer and align with Apple updates.
- Updated UI to allow device users to reinstall self-service software.
- Updated API to not return a 500 status code if a host sends a command response with an invalid command uuid.
- Increased the timeout of the upload software installer endpoint to 4 minutes.
- Disabled credential caching and reboot on Windows lock.

###### Vulnerability Management

- Added "Vulnerable" filter to the host details software table.
- Fixed Microsoft Office June 2024 false negative vulnerabilities and added custom vulnerability matching.
- Fixed issue where some Windows applications were getting matched against Windows OS vulnerabilities.

###### Bug fixes and improvements

- Updated Go version to go1.22.4.
- Updated to render only one banner on the my device page based on priority order.
- Updated software updated timestamp tooltip.
- Removed DB error message from the UI when showing a error response.
- Updated fleetctl get queries/labels/hosts descriptions.
- Reinstated ability to sort policies by passing count.
- I

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.54.0]_