# Fleet v4.91.0

- Product: Fleet (https://whatsnew.fyi/product/fleet)
- Vendor: Fleet Device Management
- Date: 2026-09-02
- Version: v4.91.0
- Original notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.91.0
- Permalink: https://whatsnew.fyi/product/fleet/releases/v4.91.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Create a managed local admin account on Windows hosts (requires fleetd 1.60.0 or higher)
- **added** — Default fleet assignment for new Windows MDM enrollments via user-driven enrollment (Windows Autopilot, Entra join) with software, scripts, and configuration profiles applied during out-of-box setup (Fleet Premium)
- **added** — Option to keep macOS, iOS, and iPadOS hosts on the latest OS version by setting minimum_version to latest with deadline_days (Fleet Premium)
- **added** — Activity automations for fleets with per-fleet webhooks that send requests when activities linked to fleet hosts are created (Fleet Premium)
- **added** — Patch when closed option for patch policies that only patches an app if the app is not running
- **added** — Support for Fleet's built-in variables in scripts including software install, post-install, and uninstall scripts, resolved per host at execution time (Fleet Premium)
- **added** — Adobe plugins detection in software inventory for macOS and Windows hosts, listed with software type Plugin (Adobe)
- **added** — 29 new iOS/iPadOS device vitals including battery level, accessibility settings, cellular technology, cloud backup status, organization info, MDM options, device attestation, and cellular service subscriptions
- **added** — Marketing name display for Apple devices showing human-readable hardware model names on Hosts and Host details pages
- **added** — Support for releasing devices from Apple Business inside Fleet
- **added** — s3_software_installers_signed_url configuration option to serve software installer, in-house app, and bootstrap package downloads via GCS presigned URLs
- **added** — Support for custom host vitals in Android configuration profiles and managed app configuration with per-host value expansion and automatic resend on value changes
- **added** — Support for $FLEET_HOST_VITAL_<id> custom host vital variables in host name templates with per-host resolution and automatic re-delivery on vital value changes
- **added** — Support for nested groups in Entra in IdP vitals
- **added** — linux as a label platform option targeting hosts on any Linux distribution
- **added** — Sortable Added to Fleet column in hosts table showing when each host last enrolled
- **added** — Support for enabling/disabling software inventory per-fleet via PATCH /api/v1/fleet/fleets/{id}
- **added** — --bypass-end-user-auth flag to fleetctl package to skip end-user authentication prompt during enrollment on Linux and Windows hosts (requires fleetd v1.60.0 or higher)
- **added** — host_id and host_serial to mdm_enrolled activity for Apple enrollments, with activity now appearing on host's activity timeline
- **added** — token_invalid to ABM token API responses and dep_device_error to GET /hosts/:id/dep_assignment to identify why a host's Apple Business Manager device lookup or ABM token isn't returning expected data
- **changed** — Orbit enrollment to determine end user authentication requirements from server policy rather than client-advertised capabilities via mdm.allow_orbit_end_user_auth_bypass setting
- **added** — user_mfa_requested activity recorded when valid credentials are submitted for an MFA-enabled account and verification email is sent
- **added** — created_setup_experience_script and deleted_setup_experience_script activities to record setup experience script changes in audit log
- **changed** — Updated macOS CIS benchmark policies to latest CIS releases: macOS 14 Sonoma v3.1.0, macOS 15 Sequoia v2.1.0, and macOS 26 Tahoe v1.1.0
- **changed** — Excluded Adobe plugins from vulnerability scanning to avoid reporting vulnerabilities for Adobe CEP or UXP extensions

##### Fleet 4.91.0 (Sep 2, 2026)

###### IT Admins
- Added the ability to create a managed local admin account on Windows hosts. Requires `fleetd` 1.60.0 or higher.
- Added a default fleet for new Windows MDM enrollments (Fleet Premium). IT admins can pick the fleet that hosts enrolling through user-driven Windows MDM enrollment (Windows Autopilot, Entra join) are automatically assigned to. The fleet is assigned before the Autopilot Enrollment Status Page runs, so the default fleet's software, scripts, and configuration profiles apply during out-of-box setup.
- Added the option to keep macOS, iOS, and iPadOS hosts on the latest OS version (Fleet Premium). Setting `minimum_version` to `latest` along with `deadline_days` tells Fleet to automatically track the newest version Apple publishes for each host's hardware and to set the update deadline that many days after the version has been released.
- Added activity automations for fleets (Fleet Premium): a per-fleet webhook, configured from the Hosts page, that sends a request to a destination URL whenever an activity linked to one of the fleet's hosts is created.
- Added a "Patch when closed" option for patch policies that only patches an app on a host if the app is not running.
- Added support for Fleet's built-in variables (e.g. `$FLEET_VAR_HOST_END_USER_IDP_USERNAME`) in scripts, including software install, post-install, and uninstall scripts. Variables are resolved per host at execution time and require a Fleet Premium license.
- Added Adobe plugins to software inventory: Fleet now detects Adobe Creative Cloud plugins (CEP and UXP extensions) on macOS and Windows hosts and lists them on the Software page and host details with the software type "Plugin (Adobe)", including version and host count.
- Added 29 new iOS/iPadOS device vitals, such as battery level, accessibility settings, cellular technology, cloud backup status, organization info, MDM options, device attestation, and cellular service subscriptions, collected via the existing `DeviceInformation` MDM refetch and shown in the host API response and a new "View all" vitals modal on the host details page. Personal (BYOD) enrollments don't receive these new fields, to avoid exposing information about a device the organization doesn't own.
- Added marketing name display for Apple devices (macOS, iOS, iPadOS) on the Hosts and Host details pages. The "Hardware model" field now shows human-readable names (e.g. "MacBook Pro (16-inch, 2021)") instead of raw identifiers (e.g. "MacBookPro18,1").
- Added support for releasing devices from Apple Business inside Fleet.
- Added the `s3_software_installers_signed_url` configuration option to serve software installer, in-house app, and bootstrap package downloads via GCS presigned URLs (the GCS counterpart to CloudFront URL signing), so clients download directly from object storage instead of streaming through the Fleet server.
- Added support for custom host vitals (`$FLEET_HOST_VITAL_<id>`) in Android configuration profiles and managed app configuration, including per-host value expansion at delivery and automatic resend when a host's value changes.
- Added support for `$FLEET_HOST_VITAL_<id>` custom host vital variables in host name templates, including per-host resolution, validation of referenced vital IDs, and automatic re-delivery when a host's vital value changes.
- Added support for nested groups in Entra in IdP vitals.
- Added `linux` as a label platform option, which targets hosts on any Linux distribution.
- Added a sortable "Added to Fleet" column to the hosts table, showing when each host last enrolled with Fleet.
- Added support for enabling/disabling software inventory per-fleet via `PATCH /api/v1/fleet/fleets/{id}` with `{"features": {"enable_software_inventory": <bool>}}`. The key follows PATCH-merge semantics: when omitted, the stored value is unchanged.
- Added a `--bypass-end-user-auth` flag to `fleetctl package` that configures the generated fleetd installer to skip

_[Truncated at 4000 characters — full notes: https://github.com/fleetdm/fleet/releases/tag/fleet-v4.91.0]_