Skip to content

Update Fleet-maintained apps#48540

Merged
allenhouchins merged 2 commits into
mainfrom
fma-2607010901
Jul 1, 2026
Merged

Update Fleet-maintained apps#48540
allenhouchins merged 2 commits into
mainfrom
fma-2607010901

Conversation

@fleet-release

@fleet-release fleet-release commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

  • Bug Fixes
    • Updated app release metadata so the latest versions are correctly detected and installed across macOS and Windows.
    • Refreshed download links and checksums for several apps, including Claude, Codex, Gemini, Postman, Thunderbird, VirtualBox, Ollama, and others.
    • Improved version matching for patch detection so upgrade checks reflect the newest releases.

Generated automatically with cmd/maintained-apps.

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

Tip: disable this comment in your organization's Code Review settings.

@coderabbitai

coderabbitai Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)
  • :ai

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: d6abc86d-fa4c-46e1-96cf-b3494ace6448

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

This pull request updates 24 fleet-maintained app manifest JSON files under ee/maintained-apps/outputs, covering both macOS (darwin.json) and Windows (windows.json) targets for apps including Claude, Codex, eM Client, GDevelop, Gemini, Granola, Highlight AI, Marked, MongoDB Compass, Notesnook, Ollama, OpenAudible, Postman, Prisma Browser, Reminders Menubar, Reqable, Thunderbird, UA Connect, Unity Hub, VirtualBox, and Wins. Each affected entry updates the version field, adjusts SQL version_compare thresholds in exists/patched detection queries, updates the installer_url to point to the new release artifact, and replaces the sha256 checksum. Install/uninstall script references remain unchanged throughout.

Changes

Cohort Changes
Maintained app manifest version bumps Bumped version, patched/exists query thresholds, installer_url, and sha256 across 24 macOS/Windows manifest files for apps such as Claude, Codex, eM Client, GDevelop, Gemini, Granola, Highlight AI, Marked, MongoDB Compass, Notesnook, Ollama, OpenAudible, Postman, Prisma Browser, Reminders Menubar, Reqable, Thunderbird, UA Connect, Unity Hub, VirtualBox, Wins

Possibly related PRs

  • fleetdm/fleet#48329: Prior automated maintained-app version bump touching many of the same manifests (claude/windows.json, codex-app/darwin.json, emclient/windows.json, granola/windows.json).
  • fleetdm/fleet#48476: Prior batch update to the same set of manifests including claude/darwin.json, codex-app/darwin.json, marked-app/darwin.json, and wins/darwin.json.
  • fleetdm/fleet#48159: Prior update to codex-app/darwin.json and postman manifests with the same version/query/installer/sha256 fields.
🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description is only a one-line summary and omits the required template sections, related issue, checklist, and testing details. Expand the description to follow the repository template, including a related issue, checklist items, testing notes, and any N/A sections.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title matches the main change: a broad update to Fleet-maintained app metadata.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fma-2607010901

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
ee/maintained-apps/outputs/claude/windows.json (1)

9-12: 🗄️ Data Integrity & Integration | 🔵 Trivial

Consider automated checksum/URL integrity verification for this batch.

Version, installer_url, and sha256 are internally consistent across all 24 manifests in this PR (verified across all 8 provided files: version string, version_compare threshold, and URL path segment all match; sha256 values are valid 64-char hex). Since this is an automated ingestion, it may still be worth having the ingester (or a CI step) fetch each installer_url and confirm the computed sha256 matches before merge, to catch any upstream data corruption or MITM issues on the release CDN.

#!/bin/bash
# Description: Verify sha256 of each maintained-app windows.json installer_url matches the recorded checksum.
for f in ee/maintained-apps/outputs/claude/windows.json ee/maintained-apps/outputs/emclient/windows.json ee/maintained-apps/outputs/gdevelop/windows.json ee/maintained-apps/outputs/granola/windows.json ee/maintained-apps/outputs/mongodb-compass/windows.json ee/maintained-apps/outputs/notesnook/windows.json ee/maintained-apps/outputs/ollama/windows.json ee/maintained-apps/outputs/postman/windows.json; do
  url=$(jq -r '.versions[0].installer_url' "$f")
  expected=$(jq -r '.versions[0].sha256' "$f")
  actual=$(curl -sL "$url" | sha256sum | awk '{print $1}')
  echo "$f: expected=$expected actual=$actual match=$([ "$expected" = "$actual" ] && echo yes || echo NO)"
done
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ee/maintained-apps/outputs/claude/windows.json` around lines 9 - 12, Add an
automated integrity check for the maintained-app ingestion path so each
windows.json entry’s installer_url is downloaded and its computed sha256 is
compared against the recorded checksum before merge. Use the existing
maintained-apps manifest processing logic (for example the claude/windows.json
ingestion flow) to hook in a CI or ingester-side validation step, and fail the
batch if any URL/checksum pair mismatches.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@ee/maintained-apps/outputs/claude/windows.json`:
- Around line 9-12: Add an automated integrity check for the maintained-app
ingestion path so each windows.json entry’s installer_url is downloaded and its
computed sha256 is compared against the recorded checksum before merge. Use the
existing maintained-apps manifest processing logic (for example the
claude/windows.json ingestion flow) to hook in a CI or ingester-side validation
step, and fail the batch if any URL/checksum pair mismatches.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: e8192c8e-2423-4e3d-9c30-a34313a96a53

📥 Commits

Reviewing files that changed from the base of the PR and between e03c3a8 and 899a817.

📒 Files selected for processing (24)
  • ee/maintained-apps/outputs/claude/darwin.json
  • ee/maintained-apps/outputs/claude/windows.json
  • ee/maintained-apps/outputs/codex-app/darwin.json
  • ee/maintained-apps/outputs/emclient/windows.json
  • ee/maintained-apps/outputs/gdevelop/windows.json
  • ee/maintained-apps/outputs/google-gemini/darwin.json
  • ee/maintained-apps/outputs/granola/windows.json
  • ee/maintained-apps/outputs/highlight-ai/darwin.json
  • ee/maintained-apps/outputs/marked-app/darwin.json
  • ee/maintained-apps/outputs/mongodb-compass/windows.json
  • ee/maintained-apps/outputs/notesnook/windows.json
  • ee/maintained-apps/outputs/ollama/windows.json
  • ee/maintained-apps/outputs/openaudible/darwin.json
  • ee/maintained-apps/outputs/postman/darwin.json
  • ee/maintained-apps/outputs/postman/windows.json
  • ee/maintained-apps/outputs/prisma-browser/windows.json
  • ee/maintained-apps/outputs/reminders-menubar/darwin.json
  • ee/maintained-apps/outputs/reqable/windows.json
  • ee/maintained-apps/outputs/thunderbird/darwin.json
  • ee/maintained-apps/outputs/thunderbird/windows.json
  • ee/maintained-apps/outputs/ua-connect/darwin.json
  • ee/maintained-apps/outputs/unity-hub/darwin.json
  • ee/maintained-apps/outputs/virtualbox/windows.json
  • ee/maintained-apps/outputs/wins/darwin.json

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Closing in favor of #48546.

@github-actions github-actions Bot closed this Jul 1, 2026
Add /allusers flag to GDevelop NSIS installer to force machine-wide install and prevent 0xc0000005 crash when running as SYSTEM. Also freeze wins macOS app at version 3.3 to avoid tracking unstable upstream releases.
@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Script Diff Results

ee/maintained-apps/outputs/claude/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/claude/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/codex-app/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/emclient/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/gdevelop/windows.json

=== Install // c09723e7 -> 01cf10cc ===

--- /tmp/old.9pn1am	2026-07-01 12:57:28.051646795 +0000
+++ /tmp/new.LWZOVx	2026-07-01 12:57:28.051646795 +0000
@@ -1,7 +1,8 @@
 # Learn more about .exe install scripts:
 # http://fleetdm.com/learn-more-about/exe-install-scripts
 #
-# GDevelop ships as an NSIS (Nullsoft) installer.
+# electron-builder NSIS installer; /allusers forces a machine-wide install
+# (without it, running as SYSTEM crashes with 0xc0000005).
 
 $exeFilePath = "${env:INSTALLER_PATH}"
 
@@ -13,7 +14,7 @@
 
     $processOptions = @{
         FilePath = "$exeFilePath"
-        ArgumentList = "/S"
+        ArgumentList = "/S /allusers"
         PassThru = $true
         Wait = $true
         NoNewWindow = $true

=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/google-gemini/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/granola/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/highlight-ai/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/marked-app/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/mongodb-compass/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/notesnook/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/ollama/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/openaudible/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/postman/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/postman/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/prisma-browser/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/reminders-menubar/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/reqable/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/thunderbird/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/thunderbird/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/ua-connect/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/unity-hub/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/virtualbox/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Script Diff Results

ee/maintained-apps/outputs/claude/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/claude/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/codex-app/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/emclient/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/gdevelop/windows.json

=== Install // c09723e7 -> 01cf10cc ===

--- /tmp/old.FHaE0i	2026-07-01 12:57:39.668831559 +0000
+++ /tmp/new.gpSp9M	2026-07-01 12:57:39.668831559 +0000
@@ -1,7 +1,8 @@
 # Learn more about .exe install scripts:
 # http://fleetdm.com/learn-more-about/exe-install-scripts
 #
-# GDevelop ships as an NSIS (Nullsoft) installer.
+# electron-builder NSIS installer; /allusers forces a machine-wide install
+# (without it, running as SYSTEM crashes with 0xc0000005).
 
 $exeFilePath = "${env:INSTALLER_PATH}"
 
@@ -13,7 +14,7 @@
 
     $processOptions = @{
         FilePath = "$exeFilePath"
-        ArgumentList = "/S"
+        ArgumentList = "/S /allusers"
         PassThru = $true
         Wait = $true
         NoNewWindow = $true

=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/google-gemini/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/granola/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/highlight-ai/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/marked-app/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/mongodb-compass/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/notesnook/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/ollama/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/openaudible/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/postman/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/postman/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/prisma-browser/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/reminders-menubar/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/reqable/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/thunderbird/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/thunderbird/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/ua-connect/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/unity-hub/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/virtualbox/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

@allenhouchins allenhouchins merged commit f04ee23 into main Jul 1, 2026
18 of 21 checks passed
@allenhouchins allenhouchins deleted the fma-2607010901 branch July 1, 2026 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants