# Fleet v4.75.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2025-10-17
- Version: v4.75.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.75.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.75.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Support for Smallstep certificate authority
- **added** — False-positive filtering for Linux vulnerability scanning
- **added** — Support for Arch Linux hosts
- **added** — Software inventory ingestion from Arch Linux hosts
- **added** — New rate limiting implementation for Fleet Desktop API endpoints to support all/many hosts behind NAT (single IP)
- **added** — Support for reading server private_key from AWS Secrets Manager
- **added** — Support for vulnerabilities feed CPE translation JSON to override sw_edition field
- **added** — Filter for removing duplicate RPM python packages and renaming pip packages to match OVAL definitions
- **added** — Ability to specify a Fleet host ID when declaring a manual label in a Gitops YAML file
- **added** — Dedicated page, table, and logical integrations with other parts of the UI for managing labels
- **added** — Configuration profile support for Android hosts
- **added** — Activity logging for Android profile creation, modification, and deletion
- **added** — Support for software installation during Windows setup experience
- **added** — Support for fleetctl to generate fleetd installers for Arch Linux (.pkg.tar.zst)
- **added** — Software name into checksum calculation for macOS apps
- **added** — OpenTelemetry instrumentation to scheduled jobs and several API endpoints
- **added** — CRON job to reconcile Android profiles
- **added** — Retries with backoff when Apple's assets API fails with a timeout error
- **added** — Ability to unenroll personal iOS/iPadOS devices from Fleet
- **added** — Support for assigning host labels based on idP attributes for iOS and iPadOS hosts

**NOTE:** Fleet added Santa tables: `santa_allowed`, `santa_denied`, `santa_status`. If you already deploy a custom Santa extension (like [Trail of Bits](https://github.com/trailofbits/osquery-extensions/tree/master/santa)) with tables that have the same names (exactly), Fleet's agent will [crash](https://github.com/fleetdm/fleet/issues/34789). To resolve, update variables in [this script](https://github.com/fleetdm/fleet/blob/444c7b5238782c378a42b9d28c05dec8dee827d6/it-and-security/lib/macos/scripts/uninstall-santa-extension.sh) and run it on macOS hosts to uninstall your custom Santa extension.

##### Fleet 4.75.0 (Oct 17, 2025)

###### Security Engineers
- Added support for Smallstep certificate authority.
- Added false-positive filtering for Linux vulnerability scanning.
- Added support for Arch Linux hosts.
- Added software inventory ingestion from Arch Linux hosts.
- Added new rate limiting implementation for Fleet Desktop API endpoints to support all/many hosts of a deployment behind NAT (single IP).
- Added support for reading server `private_key` from AWS Secrets Manager.
- Added support for vulnerabilities feed CPE translation JSON to override `sw_edition` field.
- Added filter for removing duplicate RPM python packages and renaming pip packages to match OVAL definitions (same as Ubuntu).
- Added ability to specify a Fleet host ID when declaring a manual label in a Gitops YAML file.
- Added a dedicated page, table, and logical integrations with other parts of the UI for managing labels.

###### IT Admins
- Added configuration profile support for Android hosts.
- Added activity logging for Android profile creation, modification, and deletion.
- Added support for software installation during Windows setup experience.
- Added support for Arch Linux hosts.
- Added software inventory ingestion from Arch Linux hosts.
- Added support to `fleetctl` to generate `fleetd` installers for Arch Linux (`.pkg.tar.zst`).
- Added software name into checksum calculation for macOS apps.
- Added ability to specify a Fleet host ID when declaring a manual label in a Gitops YAML file.
- Added a dedicated page, table, and logical integrations with other parts of the UI for managing labels.
- Added OpenTelemetry instrumentation to scheduled jobs and several API endpoints.
- Added CRON job to reconcile Android profiles.
- Added retries with backoff when Apple's assets API fails with a timeout error.
- Added ability to unenroll personal iOS/iPadOS devices from Fleet.
- Added support for assigning host labels based on idP attributes for iOS and iPadOS hosts.
- Added ability to turn off MDM for iOS and iPadOS devices when refetcher returns device token is inactive.
  > Note: The package will need to be updated out-of-band once, because the pre-removal script from previously-generated packages is called upon an upgrade. The old pre-removal script stopped Orbit unconditionally.
- Added support for hosts enrolled with Company Portal using the legacy SSO extension (for Entra's conditional access).

###### Other improvements and bug fixes
- Updated DEB and RPM packages generated by `fleetctl package` to now be safe to upgrade in-band through the Software page.
- Updated to return count in list host certificates API response, and use it in the certificate table.
- Updated setup experience to try software installs up to 3 times by default in case of intermittent failures.
- Modified the Apple profile reconciliation CRON logic to query for installs and removals within a transaction to avoid race conditions around team or label changes.
- Fixed inconsistent spacing in Controls OS settings headers.
- Validated setting `manual_agent_install` option on the server.
- Ignore warning when LastOpenedAt for software is nil on macOS.
- Improved install action tooltips and modals including timestamps to VPP successful installs.
- Changed the response code for UserAuthenticate checkin messages, which are unsupported, from

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.75.0]_