1.30.0 — Sign-in administration and fleet configuration fixes

2026-09-24

Adds system Sign-in setup, fixes Apple callback session handling, and improves fleet configuration editing and the bundled settings viewer. Quoted configuration strings now decode Python escapes; review literal backslashes before upgrading.

Breaking

• Quoted configuration strings now decode Python escapes such as \n, \t, and \\. Escape literal backslashes as \\ before upgrading if your quoted values rely on the previous literal-backslash behavior.

Added

• System Sign-in administration for login appearance and Google, Apple, and GitHub credentials, enablement, and callback URLs. Changes apply without a deploy or restart.
• Fleet configuration supports adding top-level settings with --add, reading values from @file, and removing settings with config unset.

Changed

• Users with global manage_settings or admin can edit the allowlisted system sign-in configuration.

Fixed

• Apple form-post callbacks preserve the browser session when returning to a Bouncer-protected login page.
• Multiline PEM values written by the fleet tool load with their original content.
• Large settings stay compact in the bundled Admin list; opening a row shows formatted JSON.