# Fleet v4.78.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2025-12-19
- Version: v4.78.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.78.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.78.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Support for Android setup experience software installation
- **added** — Support for Android self-service apps in fleetctl gitops
- **added** — Support for Android systemUpdate profiles
- **added** — Ability to create, view, and delete Google Play Store software for Android in UI
- **added** — $FLEET_VAR_HOST_PLATFORM variable for Apple platforms (macos, ios, ipados)
- **added** — Support for installation of setup-experience VPP apps on manually-enrolled iOS/iPadOS devices
- **added** — Ability to deploy user-scoped SCEP profiles for Windows hosts
- **added** — Configuration option to require Windows users turn on MDM manually via work or school account
- **added** — UI to allow Windows hosts to manually enroll into Fleet MDM
- **added** — Support for $FLEET_VAR_HOST_HARDWARE_SERIAL and $FLEET_VAR_HOST_PLATFORM in Windows profiles
- **added** — Ability to filter activities on the dashboard page
- **added** — Okta conditional access configuration in Fleet UI under Settings -> Integrations -> Conditional access
- **added** — Endpoint for hosts to update certificate status
- **added** — Detail column to host_certificate_template table and certificate_templates property with GitOps support
- **changed** — Regenerate FileVault profile when Apple MDM is turned on if the device's team has disk encryption enabled
- **changed** — Updated fleetd/certificates/<id> and fleetd/certificates/<id>/status to authenticate using orbit_node_key in Authentication header
- **changed** — MDM-enrolled Android devices now receive certificate templates in managedConfigurations
- **changed** — Made host_count property optional in GET /labels API endpoints for performance improvement
- **changed** — Updated Go to 1.25.5
- **fixed** — Bitwise operators in queries no longer incorrectly mark queries as invalid

##### Fleet 4.78.0 (Dec 19, 2025)

###### IT Admins
- Added support for Android setup experience software installation.
- Added support for Android self-service apps to `fleetctl gitops`.
- Added support for Android `systemUpdate` profiles. 
- Added ability to create/view/delete Google Play Store software for Android in UI.
- Added `$FLEET_VAR_HOST_PLATFORM` for Apple platforms (`macos`, `ios`, `ipados`).
- Added support for installation of setup-experience VPP apps on manually-enrolled iOS/iPadOS devices.
- Added ability to deploy user-scoped SCEP profiles for Windows hosts.
- Added a configuration option to require Windows users turn on MDM manually via work or school account, rather than have enrollment happen automatically.
- Added UI to allow Windows hosts to manually enroll into Fleet MDM.
- Added support for `$FLEET_VAR_HOST_HARDWARE_SERIAL` and `$FLEET_VAR_HOST_PLATFORM` in Windows profiles.

###### Security Engineers
- Added ability to filter the activites on the dashboard page.
- Updated to regenerate FileVault profile when Apple MDM is turned on if the device's team has disk encryption enabled.
- Added Okta conditional access configuration to the Fleet UI under Settings -> Integrations -> Conditional access.
- Added endpoint for hosts to update certificate status.
- Added detail column to `host_certificate_template` table and added `certificate_templates` property with GitOps support.
- Updated `fleetd/certificates/<id>` and `fleetd/certificates/<id>/status` to authenticate using the orbit_node_key provided in the `Authentication` header.
- Updated MDM-enrolled Android devices to receive certificate templates in `managedConfigurations`.

###### Other improvements and bug fixes
- Improved performance by making the `host_count` property optional in the `GET /labels` API endpoints.
- Improved performance by avoiding unneeded extra queries when fetching team information.
- Improved request validation by returning an informative error when trying to filter `software_titles` with `platform` without a `team_id`.
- Allowed users to save Fleet queries even if their SQL is deemed invalid by the Fleet UI.
- Added a new error UI for file uploaders, and applied it in the Okta Conditional Access modal.
- Returned pre-install query output in Install Details modal.
- Translated `idp` to `mdm_idp_accounts` on API responses. 
- Updated `last_restarted_at` property for hosts to be more reliable.
- Added Mosyle to the list of well-known MDM platforms.
- Changed where `mdm_enrolled` activity is created so it occures after the inital Token Update command to allowa the webhook to fire after the host can recieve additonal commands from Fleet MDM.
- Improved MDM command result endpoint response for pending Windows commands.
- Switched configurations referencing Redis 5 to Redis 6. Fleet is no longer verified to work with Redis 5 or below.
- Redacted API tokens in `fleetctl config set` to prevent accidental logging.
- Updated error message when attempting to run software install script on host with scripts disabled to refer to `--enable-scripts` flag (instead of `--scripts-enabled`).
- Updated queries APIs that drive the OS Settings UI to include the status of host cert templates.
- Updated the layout and styling of file uploader buttons across the UI.
- Updated built-in SVG icons to avoid rendering issues when certain combinations of icons are on the same page.
- Added consistant spacing to UI elements on the MDM page.
- Updated Go to 1.25.5.
- Fixed an issue where using bitwise operators in a query incorrectly marked the query as invalid.
- Fixed issue where MDM profile retry limits were interfering with Smallstep SCEP proxy renewal attempts, particularly in cases of expired SCEP challenges.
- Fixed incorrect status code on failure to interpolate certificate template variables.
- Fixed Android configuration profiles downloading as unusable .xml files with content `[object Object]`. Android prof

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.78.0]_