fleetdm · lukeheath · Nov 8, 2025 · Nov 11, 2025
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,37 @@
+## Fleet 4.77.0 (Nov 07, 2025)
+
+### Bug fixes
+
+- Fleet UI: Added ability to change software display names
+- Hide software host count and version table when no hosts have the software installed.
+* Added better error messages when using build-in labels on GitOps and on the LabelSpecs endpoint.
+- Setup experience software now installs in alphanumeric order.
+* Prevent multiple false positive vulnerability matches for the VSCode golang extension
+- Add activity log entries for host deletion and expiration.
+- Updated MDM enrollment flow for BYOD macOS hosts to enable end user authentication prior to
+  downloading the MDM profile via the "My device" page.
+* Detect vulnerabilities in JetBrains IDE plugins
+Updated Go to 1.25.3.
+* Add ability to deploy certificates from Custom SCEP certificate authorities on Windows.
+- Adjusted UI section headers and layout of Settings > Integrations in Fleet Free.
+* Support Custom EST certificate authorities
+* Added status counts to batch script detail page tabs.
+* Moved End user authentication SSO settings under Integrations > SSO in global settings.
+* Fix a layout issue on the script batch details page
+* Simplified setup experience configuration UI.
+* Added self-service install support for custom IPA apps on iOS and iPadOS.
+* Added experimental FLEET_MDM_ENABLE_CUSTOM_OS_UPDATES_AND_FILEVAULT configuration to allow deploying custom OS settings including Filevault payloads and macOS and Windows update settings
+Added integration for Okta conditional access, where Fleet acts as a factor and blocks end users from logging into third-party apps, via Okta, if they are failing specific policies.
+* Fixed installer for Cisco Secure Client not showing as installed in inventory/library due to using the wrong bundle identifier. This application should show up correctly now in the software inventory.
+- Prevent false positive CVE matches for [`Logi Bolt.app`](https://support.logi.com/hc/en-us/articles/4418089333655-Logi-Bolt-App)
+- fix errors when trying to run the apple_mdm_iphone_ipad_refetcher cron job
+- Fleet UI: Fixed table styling for selecting table rows
+* Update host expiry logic to not delete macOS hosts that checkin via MDM protocol but not via orbit
+- Ingest `upgrade_code`s from Windows software, and serve to all relevant software endpoints
+- removed the premium check for host OS settings in host summary
+* Reduced android device reconciler frequency to 1 hour
+- add InstallAnywhere as a self-extracting archive for PE metadata extraction
+
 ## Fleet 4.76.0 (Nov 7, 2025)
 
 ### Security Engineers

diff --git a/changes/26912-custom-scep-windows b/changes/26912-custom-scep-windows
diff --git a/changes/30523-ui-settings-integrations-spacing b/changes/30523-ui-settings-integrations-spacing
diff --git a/changes/31082-logi-bolt-false-positive b/changes/31082-logi-bolt-false-positive
diff --git a/changes/31909-okta-conditional-access b/changes/31909-okta-conditional-access
diff --git a/changes/32084-cisco-secure-client b/changes/32084-cisco-secure-client
diff --git a/changes/32110-custom-est-certificate-authorities b/changes/32110-custom-est-certificate-authorities
diff --git a/changes/32266-jetbrains-plugin-vulns b/changes/32266-jetbrains-plugin-vulns
diff --git a/changes/32499-apple-mdm-host-expiry b/changes/32499-apple-mdm-host-expiry
diff --git a/changes/32635-hide-count-and-versions-when-no-hosts-installed b/changes/32635-hide-count-and-versions-when-no-hosts-installed
diff --git a/changes/32776-better-error-messages-when-using-build-in-labels b/changes/32776-better-error-messages-when-using-build-in-labels
diff --git a/changes/33235-vscode-golang-ext-false-positives b/changes/33235-vscode-golang-ext-false-positives
diff --git a/changes/33393-show-status-conts-on-batch-scr-detail-page-tabs b/changes/33393-show-status-conts-on-batch-scr-detail-page-tabs
diff --git a/changes/33513-host-deleted-activity b/changes/33513-host-deleted-activity
diff --git a/changes/33640-macos-manual-mdm b/changes/33640-macos-manual-mdm
diff --git a/changes/33665-custom-os-updates-and-filevault b/changes/33665-custom-os-updates-and-filevault
diff --git a/changes/33779-custom-software-display-names b/changes/33779-custom-software-display-names
diff --git a/changes/33790-setup-software-install-order b/changes/33790-setup-software-install-order
diff --git a/changes/33907-ingest-upgrade-code b/changes/33907-ingest-upgrade-code
diff --git a/changes/34525-idp-settings-ui b/changes/34525-idp-settings-ui
diff --git a/changes/34530-setup-experience-style-updates b/changes/34530-setup-experience-style-updates
diff --git a/changes/34685-header-selection-css-fixes b/changes/34685-header-selection-css-fixes
diff --git a/changes/34697-batch-script-page-copy b/changes/34697-batch-script-page-copy
diff --git a/changes/34724-enable-self-service-for-ipa b/changes/34724-enable-self-service-for-ipa
diff --git a/changes/34768-go-1.25.3 b/changes/34768-go-1.25.3
diff --git a/changes/34801-remove-premium-check-for-os-settings b/changes/34801-remove-premium-check-for-os-settings
diff --git a/changes/34827-self-extracting-exe-installers b/changes/34827-self-extracting-exe-installers
diff --git a/changes/35117-android-device-reconciler b/changes/35117-android-device-reconciler
diff --git a/changes/issue-33436-resiliant-list-ios-ipad-refecth b/changes/issue-33436-resiliant-list-ios-ipad-refecth
@@ -4,11 +4,11 @@ name: fleet
 keywords:
   - fleet
   - osquery
-version: v6.7.0
+version: v6.7.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.76.0
+appVersion: v4.77.0
 dependencies:
   - name: mysql
     condition: mysql.enabled

@@ -3,7 +3,7 @@
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
 imageRepository: fleetdm/fleet
-imageTag: v4.76.0 # Version of Fleet to deploy
+imageTag: v4.77.0 # Version of Fleet to deploy
 # imagePullSecrets is optional.
 # imagePullSecrets:
 #   - name: docker

@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.76.0"
+  default     = "fleetdm/fleet:v4.77.0"
 }
 
 variable "software_inventory" {

@@ -68,7 +68,7 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleetdm/fleet:v4.76.0"
+  default = "fleetdm/fleet:v4.77.0"
 
 variable "software_installers_bucket_name" {
   default = "fleet-software-installers"

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.76.0",
+  "version": "v4.77.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"