# Fleet v4.59.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2024-11-12
- Version: v4.59.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.59.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.59.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — capability for fleetd to report vital errors to Fleet server, such as when Fleet Desktop is unable to start
- **added** — UI for adding a setup experience script
- **added** — UI for the install software setup experience
- **added** — software experience software title selection API
- **added** — database migrations to support Setup Experience
- **added** — support to fleetctl gitops to specify a setup experience script to run and software to install, for a team or no team
- **added** — Orbit endpoint POST /orbit/setup_experience/status for checking the status of a macOS host's setup experience steps
- **added** — service to track install status
- **added** — ability to connect a SCEP NDES proxy
- **added** — SCEP proxy for Windows NDES (Network Device Enrollment Service) AD CS server, which allows devices to request certificates
- **added** — error message on the My Device page when MDM is off for the host
- **added** — config field to the UI for custom MDM URLs
- **added** — integration to queue setup experience software installation on automatic enrollment
- **added** — validation to prevent removing a software package or a VPP app from a team if that software is selected to be installed during the setup experience
- **added** — filtering Software OS view to show only OSes from a particular platform
- **added** — created_at/updated_at timestamps on user create endpoint
- **changed** — MySQL spans outside of HTTPS transactions are now logged when OpenTelemetry is enabled
- **changed** — MySQL spans renamed to include the query, for easier tracking and debugging when OpenTelemetry is enabled
- **changed** — user permissions to allow gitops users to run MDM commands
- **changed** — FLEET_REDIS_ADDRESS to include a redis:// prefix, with allowed formats redis://host:port or host:port
- **changed** — Nudge deadline time for OS upgrades on macOS pre-14 hosts from 04:00 UTC to 20:00 UTC
- **fixed** — issue where the vulnerabilities cron failed to complete due to a large temporary table creation when calculating host issue counts
- **fixed** — Debian python package false positive vulnerabilities by removing duplicate entries for Debian python packages installed by dpkg and renaming remaining pip installed packages to match OVAL definitions
- **fixed** — ADE enrollment release device processing for hosts running an old fleetd version
- **fixed** — issue with the BYOD enrollment page where it sometimes would show a 404 page
- **fixed** — issue where macOS and Linux scripts failed to timeout on long running commands
- **fixed** — bug in ABM renewal process that caused upload of new token to fail
- **fixed** — blank install status when retrieving install details from the activity feed when the installer package has been updated or the software has since been removed from the host
- **fixed** — svg icon for Edge
- **fixed** — frontend error when trying to view install details for an install with a blank status
- **fixed** — loading state for the profile status aggregate UI
- **fixed** — incorrect character set header on manual Mac enrollment config download
- **fixed** — fleetctl gitops to support VPP apps, along with setting the VPP apps to install during the setup experience
- **fixed** — bug where PATCH /api/latest/fleet/config was incorrectly clearing VPP token-to-team associations
- **fixed** — issue when trying to download the manual enrollment profile when device token is expired by showing an error
- **fixed** — bug where DDM declarations would remain pending forever if they were deleted from Fleet before being sent to hosts
- **fixed** — bug where policy failures of a host were not being cleared in the host details page after configuring the host to not run any policies
- **fixed** — iOS and iPadOS device release during the ADE enrollment flow

##### Fleet 4.59.0 (Nov 12, 2024)

###### Endpoint operations
- Updated OpenTelemetry libraries to latest versions. This includes the following changes when OpenTelemetry is enabled:
  - MySQL spans outside of HTTPS transactions are now logged.
  - Renamed MySQL spans to include the query, for easier tracking/debugging.
- Added capability for fleetd to report vital errors to Fleet server, such as when Fleet Desktop is unable to start.
  
###### Device management (MDM)
- Added UI for adding a setup experience script.
- Added UI for the install software setup experience.
- Added software experience software title selection API.
- Added database migrations to support Setup Experience.
- Added support to `fleetctl gitops` to specify a setup experience script to run and software to install, for a team or no team.
- Added an Orbit endpoint (`POST /orbit/setup_experience/status`) for checking the status of a macOS host's setup experience steps.
- Added service to track install status.
- Added ability to connect a SCEP NDES proxy.
- Added SCEP proxy for Windows NDES (Network Device Enrollment Service) AD CS server, which allows devices to request certificates.
- Added error message on the My Device page when MDM is off for the host.
- Added a config field to the UI for custom MDM URLs.
- Added integration to queue setup experience software installation on automatic enrollment.
- Added a validation to prevent removing a software package or a VPP app from a team if that software is selected to be installed during the setup experience.
- Updated user permissions to allow gitops users to run MDM commands.
- Updated to remove a pending MDM device if it was deleted from current ABM.
- Updated to ensure details for a software installation run are available and accurate even after the corresponding installer has been edited or deleted.
  - **NOTE:** The database migration included with this update backfills installer data into installation details based on the currently uploaded installer. If you want to backfill data from activities (which will be more comprehensive and accurate than the migration default, but may take awhile as the entire activities table will be scanned), run this database query _after_ running database migrations:
```sql
UPDATE host_software_installs i
JOIN activities a ON a.activity_type = 'installed_software'
	AND i.execution_id = a.details->>"$.install_uuid"
SET i.software_title_name = COALESCE(a.details->>"$.software_title", i.software_title_name),
	i.installer_filename = COALESCE(a.details->>"$.software_package", i.installer_filename),
	i.updated_at = i.updated_at
```
  - The above query is optional, and is unnecessary if no software installers have been edited.

###### Vulnerability management
- Added filtering Software OS view to show only OSes from a particular platform (Windows, macOS, Linux, etc.)
- Fixed issue where the vulnerabilities cron failed to complete due to a large temporary table creation when calculating host issue counts.
- Fixed Debian python package false positive vulnerabilities by removing duplicate entries for Debian python packages installed by dpkg and renaming remaining pip installed packages to match OVAL definitions.

###### Bug fixes and improvements
- Fixed the ADE enrollment release device processing for hosts running an old fleetd version.
- Fixed an issue with the BYOD enrollment page where it sometimes would show a 404 page.
- Fixed issue where macOS and Linux scripts failed to timeout on long running commands.
- Fixed bug in ABM renewal process that caused upload of new token to fail.
- Fixed blank install status when retrieving install details from the activity feed when the installer package has been updated or the software has since been removed from the host.
- Fixed the svg icon for Edge.
- Fixed frontend error when trying to view install details for an install with a blank status.
- Fixed loading state for the profile status agg

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.59.0]_