# Fleet v4.61.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2024-12-17
- Version: v4.61.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.61.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.61.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Support requiring email verification (MFA) on each login when setting up a Fleet user outside SSO
- **added** — Extended Linux encryption key escrow support to Ubuntu 20.04.6
- **added** — APM instrumentation for Fleet API routes
- **changed** — Label validation when running live queries now returns an error indicating which labels were not found instead of silently ignoring non-existent labels
- **added** — Functionality for creating an automatic install policy for Fleet-maintained apps
- **changed** — Replaced Zoom Fleet-maintained app with Zoom for IT, which does not open any windows during installation
- **added** — Support for the new windows_migration_enabled setting (requires a premium license)
- **changed** — Updated to only show the follow instructions on My device banner for Linux hosts whose disks are encrypted but for which Fleet hasn't escrowed a valid key
- **added** — App Store app UI with different empty state when VPP token is not added at all vs when it's not assigned to a team
- **changed** — Allowed APNS key to be in unencrypted PKCS8 format for migration from another MDM
- **changed** — Allow calling /api/v1/fleet/software/fleet_maintained_apps with no team ID to retrieve the full global list of maintained apps
- **added** — UI changes for windows MDM page and allow for automatic migration for windows hosts
- **changed** — Bypass the setup experience UI if there is no setup experience item to process so that releasing the device is done without going through that window
- **added** — without_vulnerability_details parameter to software versions endpoint so CVE details can be truncated when on Fleet Premium
- **fixed** — Issue where the github cli software name was not matching against the cpe vulnerability name
- **changed** — Updated Go version to 1.23.4
- **fixed** — Performance of updating the nano_enrollments.last_seen_at timestamp of Apple MDM devices by an order of magnitude under load
- **changed** — Improved MDM SELECT FROM nano_enrollment_queue MySQL query performance, including calling it on DB reader much of the time
- **fixed** — Removed duplicate indexes from the database schema
- **added** — Cleanup job to delete stuck pending Apple profiles and requeue them
- **changed** — Replaced the internal use of the deprecated go.mozilla.org/pkcs7 package with the maintained fork github.com/smallstep/pkcs7

##### Fleet 4.61.0 (Dec 17, 2024)

##### Endpoint operations
- Added support to require email verification (MFA) on each login when setting up a Fleet user outside SSO.
- Extended Linux encryption key escrow support to Ubuntu 20.04.6.
- Added missing APM instrumentation for Fleet API routes.
- Improved label validation when running live queries. Previously, when passing label(s) that do not exist, the labels were ignored. Now, an error is returned indicating which labels were not found. This change affects both the API and `fleetctl query` command.

##### Device management (MDM)
- Added functionality for creating an automatic install policy for Fleet-maintained apps.
- Replaced Zoom Fleet-maintained app with Zoom for IT, which does not open any windows during installation.
- Added support for the new `windows_migration_enabled` setting (can be set via `fleetctl`, the `PATCH /api/latest/fleet/config` API endpoint and the UI). Requires a premium license.
- Updated to only show the "follow instructions on My device" banner for Linux hosts whose disks are encrypted but for which Fleet hasn't escrowed a valid key.
- Added App Store app UI: Added different empty state when VPP token is not added at all vs. when it's not assigned to a team to prevent confusion.
- Allowed APNS key to be in unencrypted PKCS8 format, which may happen when migrating from another MDM.
- Allowed calling `/api/v1/fleet/software/fleet_maintained_apps` with no team ID to retrieve the full global list of maintained apps.
- Added UI changes for windows MDM page and allow for automatic migration for windows hosts.
- Bypassed the setup experience UI if there is no setup experience item to process (no software to install, no script to execute), so that releasing the device is done without going through that window.

##### Vulnerability management
- Added `without_vulnerability_details` to software versions endpoint (/api/latest/fleet/software/versions) so CVE details can be truncated when on Fleet Premium.
- Fixed an issue where the github cli software name was not matching against the cpe vulnerability name.

##### Bug fixes and improvements
- Updated Go version to 1.23.4.
- Update help text for policy automation Install software and run script modals.
- Updated to display Windows MDM WSTEP flags in `fleet --help`.
- Added language in email templates indicating that users should not reply to the automated emails.
- Added better information on what deleting a host does.
- Added a clearer error message when users attempt to turn MDM off on a Windows host.
- Improved side nav empty state UI under `/settings`.
- Added missing loading spinner for delete modals (delete configuration profile, delete script, delete setup script and delete software).
- Improved performance of updating the `nano_enrollments.last_seen_at` timestamp of Apple MDM devices by an order of magnitude under load.
- Improved MDM `SELECT FROM nano_enrollment_queue` MySQL query performance, including calling it on DB reader much of the time.
- Updated Inter font to latest version for woff2 files.
- Added better documentation around how the --label flag works in the fleetctl query command.
- Switched Twitter logo to X logo in Fleet-initiated automated emails.
- Removed duplicate indexes from the database schema..
- Added cleanup job to delete stuck pending Apple profiles, and requeue them.
- Exclude any custom sourced "users" from the host details "used by" display if Fleet doesn't have an email for them.
- Replaced the internal use of the deprecated `go.mozilla.org/pkcs7` package with the maintained fork `github.com/smallstep/pkcs7`.
- Switched email template font to Inter to match previous changes in the rest of the UI.
- Updated resend config profile API from `hosts/[hostid}/configuration_profiles/resend/{uuid}` to `hosts/{hostid}/configuration_profiles/{uuid}/resend`.
- Update nanomdm dependency with latest bug fixes and improvements.
- Updated documentat

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.61.0]_