# Fleet v4.55.0 - Product: Fleet (https://whatsnew.fyi/product/fleet) - Vendor: Fleet Device Management - Date: 2024-08-09 - Version: v4.55.0 - Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.55.0 - Permalink: https://whatsnew.fyi/product/fleet/releases/v4.55.0 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **removed** — Dropped support for MySQL 5.7 and raised minimum required to MySQL 8.0.36 - **added** — Added support for generating fleetd packages for Linux ARM64 - **added** — Added new fleetctl package --arch flag - **removed** — Updated fleetctl package command to remove the --version flag - **changed** — Updated maintenance window descriptions to update regularly to match the failing policy description/resolution - **changed** — Updated maintenance windows using Google Calendar so that calendar events are now recreated within 30 seconds if deleted or moved to the past - **added** — Integrated Escrow Buddy to add enforcement of FileVault during the MacOS Setup Assistant process for hosts enrolled into teams or no team with disk encryption turned on - **changed** — Updated fleetd to use Escrow Buddy to rotate FileVault keys - **added** — Added OS updates support to iOS and iPadOS devices - **added** — Added iOS and iPadOS device details refetch triggered with the existing POST /api/latest/fleet/hosts/:id/refetch endpoint - **added** — Added iOS and iPadOS user-installed apps to Fleet - **added** — Added iOS and iPadOS apps to be installed using Apple's VPP (Volume Purchase Program) to Fleet - **added** — Added support for VPP to GitOps - **added** — Added ability to add/remove/disable apps with VPP in the Fleet UI - **added** — Added a warning banner to the UI if the uploaded VPP token is about to expire or has expired - **added** — Added support for "No teams" on all software pages including adding software installers - **changed** — Linux lock/unlock scripts now make use of pam_nologin to keep AD users locked out - **added** — Installed software list now includes Linux .deb packages that are on hold - **changed** — Increased threshold to renew Apple SCEP certificates for MDM enrollments to 180 days - **fixed** — Fixed CVEs identified as Rejected in NVD not matching against software ##### Fleet 4.55.0 (Aug 9, 2024) **NOTE:** Beginning with v4.55.0, Fleet no longer supports MySQL 5.7 because it has reached [end of life](https://mattermost.com/blog/mysql-5-7-reached-eol-upgrade-to-mysql-8-x-today/#:~:text=In%20October%202023%2C%20MySQL%205.7,to%20upgrade%20to%20MySQL%208.). The minimum version supported is MySQL 8.0.36. **NOTE:** Changes to software field in [GitOps](https://fleetdm.com/docs/using-fleet/gitops): - `software` field is optional for TEAMs in 4.54.1 and lower - `software` field should NOT be added to NO-TEAM before 4.55.0 - `software` field is mandatory for NO-TEAM and TEAMs in 4.55.0 and up ###### Endpoint operations - Added support for generating `fleetd` packages for Linux ARM64. - Added new `fleetctl package` --arch flag. - Updated `fleetctl package` command to remove the `--version` flag. The version of the package can be controlled by `--orbit-channel` flag. - Updated maintenance window descriptions to update regularly to match the failing policy description/resolution. - Updated maintenance windows using Google Calendar so that calendar events are now recreated within 30 seconds if deleted or moved to the past. - Fleet server watches for potential changes for up to 1 week after original event time. If event is moved forward more than 1 week, then after 1 week Fleet server will check for event changes once every 30 minutes. - **NOTE:** These near real-time updates may add additional load to the Google Calendar API, so it is recommended to use API usage alerts or other monitoring methods. ###### Device management - Integrated [Escrow Buddy](https://github.com/macadmins/escrow-buddy) to add enforcement of FileVault during the MacOS Setup Assistant process for hosts that are enrolled into teams (or no team) with disk encryption turned on. Thank you [homebysix](https://github.com/homebysix) and team! - Updated `fleetd` to use [Escrow Buddy](https://github.com/macadmins/escrow-buddy) to rotate FileVault keys. Removed or modified internal API endpoints documented in the API for contributors. - Added OS updates support to iOS/iPadOS devices. - Added iOS and iPadOS device details refetch triggered with the existing `POST /api/latest/fleet/hosts/:id/refetch` endpoint. - Added iOS and iPadOS user-installed apps to Fleet. - Added iOS and iPadOS apps to be installed using Apple's VPP (Volume Purchase Program) to Fleet. - Added support for VPP to GitOps. - Added the `POST /mdm/apple/vpp_token`, `DELETE /mdm/apple/vpp_token` and `GET /vpp` endpoints and related functionality. - Added new `GET /software/app_store_apps` and `POST /software/app_store_apps` endpoints and associated functionality. - Added the associated VPP apps to the `GET /software/titles` and `GET /software/titles/:id` endpoints. - Added the associated VPP apps to the `GET /hosts/:id/software` and `GET /device/:token/software` endpoints. - Added support to delete a VPP app from a team in `DELETE /software/titles/:software_title_id/available_for_install`. - Added `exclude_software` query parameter to "Get host by identifier" API. - Added ability to add/remove/disable apps with VPP in the Fleet UI. - Added a warning banner to the UI if the uploaded VPP token is about to expire/has expired. - Added UI updates for VPP feature on host software and my device pages. - Added global activity support for VPP-related activities. - Added UI features for managing VPP apps for iPadOS and iOS hosts. - Updated profile activities to include iOS and iPadOS. - Updated Fleet UI to show OS version compliance on host details page. - Added support for "No teams" on all software pages including adding software installers. - Added DB migration to support VPP software features. - Added DB migration to migrate older team configurations to the new version that includes both installers and App Store apps. - Linux lock/unlock scripts now make use of pam_nologin to keep AD users locked out. - Installed software _[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.55.0]_