# Fleet v4.90.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2026-08-06
- Version: v4.90.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.90.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.90.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added ability to upload multiple custom packages (up to 10) for the same software title on a team, with first-added package installed when a host matches more than one
- **added** — Added support for editing existing configuration profiles via PATCH /api/v1/fleet/configuration_profiles/:profile_uuid
- **added** — Added custom host vitals that admins can define and reference as $FLEET_HOST_VITAL_<id> variables in scripts and configuration profiles
- **added** — Added ability to enforce a host naming template on macOS, iOS, and iPadOS hosts under Controls > OS settings
- **added** — Added POST /api/v1/fleet/host_name_template to set or clear the naming template
- **added** — Added name_template key under controls in GitOps for fleets and included it in fleetctl generate-gitops output
- **added** — Added host name enforcement status row with enforcement status and resend action to host details OS settings modal
- **added** — Added host name enforcement statuses to Controls OS settings aggregate cards and os_settings host filter
- **added** — Added edited_host_name_template activity
- **added** — Added support for Python (.py) script-only software packages as custom packages for macOS and Linux hosts
- **added** — Added support for provisioning macOS users during setup and keeping passwords in sync with OAUTH ROPG supporting IdP via Fleet Desktop on macOS 26+ hosts
- **added** — Added UI for configuring Apple account provisioning (FPSSO) in integrations settings
- **added** — Enabled Microsoft Entra conditional access for self-hosted Fleet Premium instances
- **added** — Added native Splunk HEC log destination for osquery status, result, and audit logs
- **added** — Added support for escrowing disk encryption recovery keys from Linux hosts that use TPM-backed full-disk encryption
- **added** — Added FLEET_MDM_ENABLE_CUSTOM_DISK_ENCRYPTION as cross-platform alias for FLEET_MDM_ENABLE_CUSTOM_FILEVAULT
- **changed** — Enabled Turn off MDM button for offline macOS hosts with unenroll command queued for delivery when device comes online
- **added** — Added enrollment profile URL to macOS tab in Add hosts modal with enrollment type selection for MDM users
- **added** — Added support for targeting declarations to user channel on macOS
- **added** — Added ability to handle DDM assets and unblocked more declaration types

##### Fleet 4.90.0 (Aug 05, 2026)

###### IT Admins
- Added the ability to upload multiple custom packages (up to 10) for the same software title on a team, so IT admins can deploy different versions or architectures (for example, Arm vs. Intel builds or staged rollouts) to label-scoped hosts instead of splitting them across teams. When a host matches more than one package, the first-added package is installed.
- Added support for editing existing configuration profiles (Apple `.mobileconfig`, Apple DDM declarations, Windows, and Android) in place via `PATCH /api/v1/fleet/configuration_profiles/:profile_uuid`.
- Added custom host vitals: admins can define custom host fields, set their values per host manually or via the API, and reference them as `$FLEET_HOST_VITAL_<id>` variables in scripts and configuration profiles.
- Added the ability to enforce a host naming template on macOS, iOS, and iPadOS hosts under Controls > OS settings > Host names, for a fleet or for "No team" (Fleet Premium).
- Added `POST /api/v1/fleet/host_name_template` to set or clear the naming template (`fleet_id` omitted or `0` targets "No team"); an empty template clears it without renaming any host.
- Added a `name_template` key under `controls` in GitOps for fleets and "No team", and included it in `fleetctl generate-gitops` output.
- Added a "Host name" row with enforcement status (Enforcing, Verifying, Verified, Failed) to the host details OS settings modal, including a resend action via `POST /api/v1/fleet/hosts/{id}/name_template/resend`.
- Added host name enforcement statuses to the Controls OS settings aggregate cards and the `os_settings` host filter.
- Added the `edited_host_name_template` activity.
- Added support for Python (`.py`) script-only software packages, which can be uploaded as custom packages (the file contents become the install script) and installed on macOS and Linux hosts, via the UI, REST API, and GitOps.
- Added support for provisioning macOS users during setup and keeping passwords in sync with any OAUTH ROPG supporting IdP via the Fleet Desktop app on macOS 26+ hosts.
- Added UI for configuring Apple account provisioning (FPSSO) in the integrations settings.
- Enabled Microsoft Entra conditional access for self-hosted Fleet Premium instances (previously available only on Fleet Cloud). The `microsoft_compliance_partner.proxy_api_key` server configuration has been removed; the feature is now gated on the Fleet Premium license tier.
- Added native Splunk HEC log destination for osquery status, result, and audit logs.
- Added support for escrowing disk encryption recovery keys from Linux hosts that use TPM-backed full-disk encryption (e.g. Ubuntu 26). On these hosts, orbit escrows a dedicated Fleet-owned snapd recovery key silently, without prompting the end user for a passphrase.
- Added `FLEET_MDM_ENABLE_CUSTOM_DISK_ENCRYPTION` (`mdm.enable_custom_disk_encryption`) as a cross-platform alias for `FLEET_MDM_ENABLE_CUSTOM_FILEVAULT`. When set, it allows both custom Apple MDM profiles for FileVault and custom Windows configuration profiles for BitLocker.
- Enabled "Turn off MDM" button for offline macOS hosts. The unenroll command is now queued and delivered when the device comes back online, consistent with iOS/iPadOS behavior.
- Added enrollment profile URL to the macOS tab in the "Add hosts" modal, with enrollment type selection (company-owned or personal/BYOD) for MDM users.
- Added support for targeting declarations to the user channel on macOS.
- Added the ability to handle DDM assets, and unblocked more declaration types.
- Added the certificates list to the host details page for Windows hosts, showing each certificate's scope (System or User). This requires osquery 5.23.1 or higher on the host.
- Added a "View certificate" modal to Controls > OS settings > Certificates so admins can inspect and copy an existing certificate's details.
- Surfaced hardware-bound ACME certificates on macOS host vitals by retrieving them via th

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.90.0]_