# Fleet v4.74.0 - Product: Fleet (https://whatsnew.fyi/product/fleet) - Vendor: Fleet Device Management - Date: 2025-10-06 - Version: v4.74.0 - Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.74.0 - Permalink: https://whatsnew.fyi/product/fleet/releases/v4.74.0 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — Support for Hydrant as a Certificate Authority with an experimental API to request certificates from Hydrant - **security** — Added check to disallow FLEET_SECRET variables in Apple configuration profile PayloadDisplayName fields - **added** — API endpoint /batch/{batch_execution_id}/host-results to list hosts targeted in batch - **added** — POST /api/v1/fleet/configuration_profiles/batch API endpoint to batch modify MDM configuration profiles - **added** — New page in UI for batch script run details - **added** — Support for AWS RDS (MySQL) IAM authentication - **added** — Support for AWS ElastiCache (Redis) IAM authentication - **added** — Support for hosts enrolled with Company Portal using legacy SSO extension for Entra's conditional access - **added** — Setup experience software items for Linux devices - **added** — Ability to upload custom software icons - **added** — API endpoints for Linux setup experience including POST /api/fleet/orbit/setup_experience/init and POST /api/v1/fleet/device/{token}/setup_experience/status - **added** — IdP fullname attribute as valid Fleet variable for Apple configuration profiles - **added** — Username of managed user account for user-scoped profiles delivered to macOS hosts - **added** — Ability to configure webhook and ticket policy automations for No team - **added** — Support for writing multiple packages in single GitOps YAML file under software.packages - **changed** — Moved self_service, labels_include_any, labels_exclude_any, categories, and setup_experience declarations to team level for software in GitOps - **changed** — GET /host/:id now returns empty array for software field when exclude_software=true - **added** — Fleet-maintained app for macOS: Omnissa Horizon Client - **added** — Opening instructions to self-service macOS apps and Windows programs - **fixed** — Fixed deduplicating bug to only count unique vulnerabilities when counting software title vulnerabilities across versions ##### Fleet 4.74.0 (Oct 6, 2025) This release includes breaking changes in the software YAML. For migration instructions and more information, please see [this public document](https://docs.google.com/document/d/1tcRkImYaufjSUoVYKEFukLgFUaCD64pjH7EGIMCy1cA/edit?usp=sharing). ###### Security Engineers - Added support for Hydrant as a Certificate Authority and added an experimental API that can be used to have Fleet request a certificate from a Hydrant. - Added a check to disallow FLEET_SECRET variables in Apple configuration profile `` fields for security. - Added `/batch/{batch_execution_id:[a-zA-Z0-9-]+}/host-results` API endpoint to list hosts targeted in batch. - Added `POST /api/v1/fleet/configuration_profiles/batch` API endpoint to batch modify MDM configuration profiles. - Added a new page in the UI for batch script run details. - Added support for AWS RDS (MySQL) IAM authentication. - Added support for AWS ElastiCache (Redis) IAM authentication. - Added support for hosts enrolled with Company Portal using the legacy SSO extension for Entra's conditional access. ###### IT Admins - Added setup experience software items for Linux devices. - Added ability to upload custom software icons. - Added API endpoints for Linux setup experience. - Device API endpoints for fleetd: `POST /api/fleet/orbit/setup_experience/init` and `POST /api/v1/fleet/device/{token}/setup_experience/status`. - `PUT /api/v1/fleet/setup_experience/software` and `GET /api/v1/fleet/setup_experience/software` now have a `platform` argument (`linux` or `macos`, defaults to `macos`). - Added IdP `fullname` attribute as a valid Fleet variable for Apple configuration profiles. - Added the username of the managed user account user-scoped profiles are delivered to for macOS hosts. - Enabled configuring webhook and ticket policy (Jira/Zendesk) automations for "No team". - Added support for writing multiple packages in a single GitOps YAML file included under `software.packages`. - Moved `self_service`, `labels_include_any`, `labels_exclude_any`, `categories`, and `setup_experience` declarations to team level for software in GitOps; `setup_experience` can now be set on a software package, Fleet Maintained App, or App Store app. - Changed `GET /host/:id` to return an empty array for `software` field when `exclude_software=true`. - Updated `generate-gitops` command to output filenames with emojis and other special characters where applicable. - Added a Fleet-maintained app for macOS: Omnissa Horizon Client. - Added opening instructions to self-service macOS apps and Windows programs. ###### Other improvements and bug fixes - Added index to `distributed_query_campaign_targets` table to speed up DB performance for live queries. > **WARNING:** For deployments with millions of rows in `distributed_query_campaign_targets`, the database migration to add the index may take significant time. We recommend testing migration duration in a staging environment first. The initial cleanup of old campaign targets will occur progressively over multiple hours to avoid database overload. - Added clean up of live query campaign targets 24 hours after campaign completion. This keeps the DB size in check for performance of large and frequent live query campaigns. - Improved OpenTelemetry integration to add tracing to async tasks (host seen, labels, policies, query stats) and improve HTTP span naming, enabled gzip compression, reduced batch size to prevent gRPC errors. - Updated output from `packages_only=true` so that it only returns software with available installers. - Added tarballs summary card back into UI. - Improved the sorting of batch scripts in the Batch Progress UI. Batches in the "started" state now sort by started date, and batches in the "finished" state now sort by the finished date. - Removed inaccurate host count timestamp on the software version details page. - Downgraded "distributed query is denylisted _[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.74.0]_