# Fleet v4.62.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2025-01-10
- Version: v4.62.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.62.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.62.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Updated macOS 13 and 14 support per latest CIS documents and added macOS 15 support
- **changed** — Updated queries API to support targeted platform filtering
- **changed** — Updated UI queries page to filter, sort, and paginate via query params in server calls
- **added** — Added searchable query targets and cleaner UI for users with many teams or labels
- **added** — Added ability to use secrets ($FLEET_SECRET_YOURNAME) in scripts and profiles
- **added** — Added ability to scope Fleet-maintained apps and custom packages via labels in UI, API, and CLI
- **added** — Added capability to automatically generate trigger policies for custom software packages
- **added** — Added validation to prevent label deletion if used to scope hosts targeted by a software installer
- **added** — Added ability to filter host software based on label scoping
- **added** — Updated fleetctl gitops to support scoping software installers by labels with labels_include_any or labels_exclude_any conditions
- **added** — Added /fleet/spec/secret_variables API endpoint
- **added** — Added functionality for skipping automatic installs if the software is not scoped to the host via labels
- **added** — Added the ability to click a software row on the my device page and see details of that software's installation on the host
- **changed** — Allowed software uninstalls and script-based host lock/unlock/wipe to run while global scripts are disabled
- **fixed** — Fixed MSI parsing for packages including long interned strings (e.g. licenses for the OpenVPN Connect installer)
- **fixed** — Fixed a panic and resulting failure to load CVE details on new installs when OS versions have not been populated yet
- **fixed** — Fixed CVE-2024-10004 false positive on Fleet-supported platforms (vuln is iOS-only)
- **changed** — Changed script upload endpoint (POST /api/v1/fleet/scripts) to automatically switch CRLF line endings to LF
- **changed** — Increased maximum length for installer URLs specified in GitOps to 4000 characters
- **fixed** — Fixed display of the correct percentage of hosts online when there are no hosts online

##### Fleet 4.62.0 (Jan 09, 2025)

##### Endpoint operations
- Updated macos 13, 14 per latest CIS documents. Added macos 15 support.
- Updated queries API to support above targeted platform filtering.
- Updated UI queries page to filter, sort, paginate, etc. via query params in call to server.
- Added searchable query targets and cleaner UI for uses with many teams or labels.

##### Device management (MDM)
- Added ability to use secrets (`$FLEET_SECRET_YOURNAME`) in scripts and profiles.
- Added ability to scope Fleet-maintained apps and custom packages via labels in UI, API, and CLI.
- Added capability to automatically generate "trigger policies" for custom software packages.
- Added UI for scoping software via labels.
- Added validation to prevent label deletion if it is used to scope the hosts targeted by a software installer.
- Added ability to filter host software based on label scoping.
- Added support for Fleet secret validation in software installer scripts.
- Updated `fleetctl gitops` to support scope software installers by labels, with the `labels_include_any` or `labels_exclude_any` conditions.
- Updated `fleetctl gitops` to identify secrets in scripts and profiles and saves them on the Fleet server.
- Updated `fleetctl gitops` so that when it updates profiles, if the secret value has changed, the profile is updated on the host.
- Added `/fleet/spec/secret_variables` API endpoint.
- Added functionality for skipping automatic installs if the software is not scoped to the host via labels.
- Added the ability to click a software row on the my device page and see the details of that software's installation on the host.
- Allowed software uninstalls and script-based host lock/unlock/wipe to run while global scripts are disabled.

##### Vulnerability management
- Added missing vulncheck data from NVD feeds.
- Fixed MSI parsing for packages including long interned strings (e.g. licenses for the OpenVPN Connect installer).
- Fixed a panic (and resulting failure to load CVE details) on new installs when OS versions have not been populated yet.
- Fixed CVE-2024-10004 false positive on Fleet-supported platforms (vuln is iOS-only and iOS vuln checking is not supported).

##### Bug fixes and improvements
- Added license key validation on `fleetctl preview` if a license key is provided; fixes cases where an invalid license key would cause `fleetctl preview` to hang.
- Increased maximum length for installer URLs specified in GitOps to 4000 characters.
- Stopped older scheduled queries from filling logs with errors.
- Changed script upload endpoint (`POST /api/v1/fleet/scripts`) to automatically switch CRLF line endings to LF.
- Fleshed out server response from `queries` endpoint to include `count` and `meta` pagination information.
- Updated platform filtering on queries page to refer to targeted platforms instead of compatible platforms.
- Included osquery pre-releases in daily UI constant update GitHub Actions job.
- Updated to send alert via SNS when a scheduled "cron" job returns errors.
- SNS topic for job error alerts can be configured separately from the existing monitor alert by adding "cron_job_failure_monitoring" to sns_topic_arns_map, otherwise defaults to the using the same topic.
- Improved validation workflow on SMTP settings page.
- Allowed team policy endpoint (`PATCH /api/latest/fleet/teams/{team_id}/policies/{policy_id}`) to receive explicit `null` as a value for `script_id` or `software_title_id` to unset a script or software installer respectively.
- Aliased EAP versions of JetBrains IDEs to "last release version plus all fixes" (e.g. 2024.3 EAP -> 2024.2.99) to avoid vulnerability false positives.
- Removed server error if no private IP was found by detail_query_network_interface.
- Updated `fleetctl` dependencies that cause warnings.
- Added service annotation field to Helm Chart.
- Updated so that on policy deletion any associated pending software installer or s

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.62.0]_