# Fleet v4.70.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2025-06-30
- Version: v4.70.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.70.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.70.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Support for Microsoft Entra ID conditional access
- **changed** — Vulnerabilities feed now falls back to non-primary CVSSv2/v3 sources when primary NVD data is not available instead of omitting scores entirely
- **changed** — Custom SCEP proxy implementation updated to include one-time challenges
- **added** — Source and username fields for host certificates, reporting 'system' or 'user' based on which keychain it was from
- **added** — Keychain column on certificates card in host details and my device page
- **added** — Android MDM support with functionality limited to turning on Android MDM and enrolling a BYOD device
- **added** — Support for filtering the hosts page for hosts with any of the 3 batch script execution statuses
- **changed** — POST /api/v1/fleet/hosts/:id/wipe endpoint extended to allow users to specify the type of remote wipe for Windows hosts
- **changed** — Improved releasing a macOS device during ADE enrollment by increasing the frequency of checks for readiness
- **added** — Audit log activity item for automatic install policy creation
- **changed** — Open Policy Agent dependency updated to v1.4.2, which drops support for YAML 1.1 in configuration files
- **changed** — Error and loading state for self-service page improved
- **added** — Searching capability implemented for teams dropdown
- **removed** — Sort column buttons removed for host software columns that do not support sorting
- **changed** — Migrations updated to use utf8mb4_unicode_ci collation across all tables
- **added** — New optional parameter --outfile added to fleetctl package to override the filename being generated
- **changed** — Software detection updated so that a new installer uploaded over an FMA app does not report as an FMA app
- **changed** — Added macOS redis cluster support
- **fixed** — Result count shown when running a policy

##### Fleet 4.70.0 (June 30, 2025)

###### Security Engineers
- Added support for Microsoft Entra ID conditional access. 
- Updated vulnerabilities feed to fall back to non-primary CVSSv2/v3 sources when primary (NVD) data is not available, instead of omitting scores entirely.
- Updated custom SCEP proxy implementation to include one-time challenges.
- Added the `source` and `username` fields for host certificates, reporting 'system' or 'user' based on which keychain it was from (for `macOS`, it will be 'user' if coming from the "login" keychain), and the corresponding `username` if the source is 'user'.
- Updated certificates card on the host details and my device page to show a new keychain column.

###### IT Admins
- Added support for Microsoft Entra ID conditional access. 
- Enabled Android MDM support. The functionality is limited to turning on Android MDM and enrolling a BYOD device. 
> **NOTE:** If your server was already using Android via the experimental DEV_ANDROID_ENABLED=1 flag, please turn off Android MDM before updating your Fleet server.
- Added support for filtering the hosts page for hosts with any of the 3 batch script execution statuses.
- Extended `POST /api/v1/fleet/hosts/:id/wipe` endpoint to allow users to specify the type of remote wipe for windows hosts.
- Improved releasing a macOS device during ADE enrollment, by increasing the frequency of checks for readiness.
- Added an audit log activity item for automatic install policy creation.

###### Other improvements and bug fixes
- Updated the Open Policy Agent (OPA) dependency to v1.4.2. 
> **NOTE**: This upgrade drops support for YAML 1.1 in configuration files. If you use the `-c` option to specify a configuration file when starting the Fleet server, you will need to update any `yes` or `on` values in the file to `true`, and any `no` or `off` values to `false`.
- Improved error and loading state for self-service page.
* Implemented searching the teams dropdown.
- Removed sort column buttons for host software columns that do not support sorting.
- Updated migrations to use the `utf8mb4_unicode_ci` collation across all tables and added a test to validate that new migrations use this collation.
- Added new optional parameter `--outfile` to fleetctl package to override the filename being generated.
- Updated software detection so that a new installer uploaded over an FMA app does not report as an FMA app. 
- Improved error when trying to apply builtin labels.
- Updated copy and remove platform callout in manage automations modal.
- Update UI references to "Frequency" to now say "Interval".
- Prevented editing the UI MDM > End user migration section when GitOps mode is enabled, since this is GitOps-configurable.
- Made the gap between characters in password fields consistent.
- Updated to consistent 14px font size across all input and dropdown fields.
- Removed username requirements for certain MDM CIS policies.
- Added macOS redis cluster support.
- Changed to using DeleteObject S3 api for GCP interoperability.
- Updated to use the Source Code Pro font in the Disk encryption key modal for clear differentiation betweenvthe letter oh and the number zero.
- Updated go to 1.24.4
- Fixed result count shown when running a policy.
- Fixed bug with the 'Observers can run this query' tooltip due to missing styling rules.
- Fixed possible user invite race condition.
- Fixed issue where NDES SCEP admin page was parsed using wrong UTF16 endianness.
- Fixed manual labels in gitops not selecting hosts by hardware serial or uuid.
- Fixed a database bug where the `host_uuid` column was too small in some secondary tables related to ADE-enrollment and IdP accounts.
- Fixed missing CORS header check for JSON requests.
- Fixed bug when listing software titles for 'All teams' which caused duplicated entries.
- Fixed a bug that caused custom OS settings targeted using "include any" label rules to never verify on hosts that only incl

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.70.0]_