Update Fleet-maintained apps - #43380
Merged
Merged
Conversation
Generated automatically with cmd/maintained-apps.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
Contributor
Script Diff Resultsee/maintained-apps/outputs/1password/windows.json=== Install Script (no changes) ===
=== Uninstall // c2db7e31 -> 795667d8 ===
--- /tmp/old.URprsK 2026-04-09 22:14:56.206291624 +0000
+++ /tmp/new.bVrJdG 2026-04-09 22:14:56.206291624 +0000
@@ -1,7 +1,7 @@
# 1Password Uninstall Script
# Closes running processes before uninstalling to prevent hangs
-$product_code = '{9DFEF7ED-3C06-486E-AAC2-AAC02C0B3092}'
+$product_code = '{1D940C01-A867-4D52-AF26-026FD7EB6A41}'
$timeoutSeconds = 300 # 5 minute timeout
# Close any running 1Password processesee/maintained-apps/outputs/adobe-acrobat-reader/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/arc/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/brave-browser/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/claude/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/cursor/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/datagrip/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/dialpad/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/docker/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/google-chrome/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/imazing-profile-editor/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/lastpass/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-excel/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-onenote/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-outlook/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-powerpoint/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-word/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/notion/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/obs/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/postman/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/postman/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/raycast/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/rider/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/signal/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/teamviewer/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/telegram/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/webex/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/webex/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/whatsapp/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/zed/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) === |
Contributor
WalkthroughThis pull request updates maintained application package metadata across multiple applications and platforms. The changes include version number bumps, corresponding updates to version comparison thresholds in SQL queries, replacement of installer download URLs with newer release artifacts, and updated SHA256 checksums to match new installers. Most changes affect Windows and macOS versions of applications including 1Password, Chrome, Excel, Outlook, PowerPoint, Word, Notion, and others. One change (Adobe Acrobat Reader) modifies only the installer URL endpoint domain without altering the version. 🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@ee/maintained-apps/outputs/postman/windows.json`:
- Around line 6-7: The SQL checks named "exists" and "patched" currently
hardcode the DisplayName 'Postman x64 11.75.4'; update those two SQL strings to
either use the current versioned DisplayName 'Postman x64 12.5.5' or generalize
with LIKE 'Postman x64%' so installed Postman 12.5.5 is detected and considered
patched (adjust the version_compare logic accordingly in "patched"); also update
the corresponding unique_identifier field in the Postman input JSON
(unique_identifier: "Postman x64 12.5.5" or a version-agnostic value) so the
config and SQL queries remain consistent.
In `@ee/maintained-apps/outputs/teamviewer/windows.json`:
- Line 9: Replace the "no_check" placeholder in the sha256 field with the real
SHA256 for the TeamViewer installer referenced by installer_url
(TeamViewer_Setup_x64_15.76.5.exe); download the exact file, compute its SHA256
(e.g., using sha256sum or shasum -a 256), and update the "sha256" property in
the windows.json entry to that computed hash so the installer is
integrity-verified.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 9e585863-1c77-4894-aecc-e81428b60309
📒 Files selected for processing (30)
ee/maintained-apps/outputs/1password/windows.jsonee/maintained-apps/outputs/adobe-acrobat-reader/windows.jsonee/maintained-apps/outputs/arc/darwin.jsonee/maintained-apps/outputs/brave-browser/darwin.jsonee/maintained-apps/outputs/claude/darwin.jsonee/maintained-apps/outputs/cursor/windows.jsonee/maintained-apps/outputs/datagrip/darwin.jsonee/maintained-apps/outputs/dialpad/darwin.jsonee/maintained-apps/outputs/docker/windows.jsonee/maintained-apps/outputs/google-chrome/windows.jsonee/maintained-apps/outputs/imazing-profile-editor/darwin.jsonee/maintained-apps/outputs/lastpass/windows.jsonee/maintained-apps/outputs/microsoft-excel/darwin.jsonee/maintained-apps/outputs/microsoft-onenote/darwin.jsonee/maintained-apps/outputs/microsoft-outlook/darwin.jsonee/maintained-apps/outputs/microsoft-powerpoint/darwin.jsonee/maintained-apps/outputs/microsoft-word/darwin.jsonee/maintained-apps/outputs/notion/windows.jsonee/maintained-apps/outputs/obs/windows.jsonee/maintained-apps/outputs/postman/darwin.jsonee/maintained-apps/outputs/postman/windows.jsonee/maintained-apps/outputs/raycast/darwin.jsonee/maintained-apps/outputs/rider/darwin.jsonee/maintained-apps/outputs/signal/darwin.jsonee/maintained-apps/outputs/teamviewer/windows.jsonee/maintained-apps/outputs/telegram/windows.jsonee/maintained-apps/outputs/webex/darwin.jsonee/maintained-apps/outputs/webex/windows.jsonee/maintained-apps/outputs/whatsapp/darwin.jsonee/maintained-apps/outputs/zed/darwin.json
Comment on lines
6
to
+7
| "exists": "SELECT 1 FROM programs WHERE name = 'Postman x64 11.75.4' AND publisher = 'Postman';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Postman x64 11.75.4' AND publisher = 'Postman' AND version_compare(version, '12.5.2') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Postman x64 11.75.4' AND publisher = 'Postman' AND version_compare(version, '12.5.5') < 0);" |
Contributor
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Verify whether this exact DisplayName pattern is intentional across maintained apps.
# Expected:
# - If this app's DisplayName is static, exact match is fine.
# - If DisplayName changes by version, this should be generalized (e.g., LIKE 'Postman x64%').
rg -n -C2 "Postman x64 11\.75\.4|name = 'Postman x64" ee/maintained-apps/outputs/postman/windows.json
rg -n -C2 "Postman x64" ee/maintained-apps/outputs --type jsonRepository: fleetdm/fleet
Length of output: 1670
🏁 Script executed:
# Check if there are other Postman entries with different versions
fd -t f "postman" ee/maintained-apps/outputs/ -type f
# Search for all Postman references to understand the version history
rg -n "Postman" ee/maintained-apps/outputs/apps.json -B2 -A2
# Check if the 11.75.4 version is used elsewhere or if it's unique to this entry
rg -r "11\.75\.4" ee/maintained-apps/Repository: fleetdm/fleet
Length of output: 18867
🏁 Script executed:
# Check the Postman input file to understand how the DisplayName is generated
cat -n ee/maintained-apps/inputs/winget/postman.json
# Look for any documentation or comments about DisplayName versioning
rg -n "unique_identifier|DisplayName" ee/maintained-apps/README.md -B2 -A2
# Check if other apps have versioned unique_identifiers
rg -n "unique_identifier.*[0-9]+\.[0-9]+" ee/maintained-apps/outputs/apps.json | head -20Repository: fleetdm/fleet
Length of output: 7501
🏁 Script executed:
# Verify Postman DisplayName versioning by checking WinGet manifest for recent versions
# This will show if DisplayName changes per version
curl -s "https://api.github.com/repos/microsoft/winget-pkgs/contents/manifests/p/Postman/Postman/12.5.5" 2>/dev/null | jq -r '.download_url' | head -1 | xargs -I {} curl -s {} 2>/dev/null | grep -i "displayname" | head -5Repository: fleetdm/fleet
Length of output: 129
Update SQL queries to match current version's DisplayName.
The exists and patched queries hardcode name = 'Postman x64 11.75.4', but the input configuration (ee/maintained-apps/inputs/winget/postman.json) specifies unique_identifier: "Postman x64 11.75.4" while the current package version is 12.5.5. Since unique_identifier is the Windows DisplayName and other apps show versioned DisplayNames (e.g., "010 Editor 16.0.2", "7-Zip 25.01", "Notion 6.1.0"), Postman 12.5.5 will install with DisplayName Postman x64 12.5.5. The current queries will fail to detect or patch this version.
Update both queries on lines 6–7 to use 'Postman x64 12.5.5' or generalize to LIKE 'Postman x64%' if compatibility with multiple versions is needed. Also update ee/maintained-apps/inputs/winget/postman.json to reflect the versioned DisplayName.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@ee/maintained-apps/outputs/postman/windows.json` around lines 6 - 7, The SQL
checks named "exists" and "patched" currently hardcode the DisplayName 'Postman
x64 11.75.4'; update those two SQL strings to either use the current versioned
DisplayName 'Postman x64 12.5.5' or generalize with LIKE 'Postman x64%' so
installed Postman 12.5.5 is detected and considered patched (adjust the
version_compare logic accordingly in "patched"); also update the corresponding
unique_identifier field in the Postman input JSON (unique_identifier: "Postman
x64 12.5.5" or a version-agnostic value) so the config and SQL queries remain
consistent.
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'TeamViewer' AND publisher = 'TeamViewer' AND version_compare(version, '15.76.5') < 0);" | ||
| }, | ||
| "installer_url": "https://download.teamviewer.com/download/version_15x/TeamViewer_Setup_x64.exe", | ||
| "installer_url": "https://download.teamviewer.com/download/version_15x/TeamViewer_Setup_x64_15.76.5.exe", |
Contributor
There was a problem hiding this comment.
❓ Verification inconclusive
Script executed:
#!/bin/bash
# Description: Verify TeamViewer installer URL accessibility and compute SHA256
# Test if URL is accessible
echo "Testing URL accessibility..."
curl -I -L -s -o /dev/null -w "%{http_code}" "https://download.teamviewer.com/download/version_15x/TeamViewer_Setup_x64_15.76.5.exe"
echo -e "\n\nDownloading installer to compute SHA256 (this may take a moment)..."
# Download and compute SHA256
curl -L -s "https://download.teamviewer.com/download/version_15x/TeamViewer_Setup_x64_15.76.5.exe" | sha256sum
echo -e "\nIf the URL returns 200 and SHA256 is computed successfully, consider updating the sha256 field with the actual hash instead of 'no_check'."Repository: fleetdm/fleet
Repository: fleetdm/fleet
Exit code: 0
stdout:
Testing URL accessibility...
200
Downloading installer to compute SHA256 (this may take a moment)...
If the URL returns 200 and SHA256 is computed successfully, consider updating the sha256 field with the actual hash instead of 'no_check'.
stderr:
/bin/bash: line 10: sha256sum: command not found
The installer URL is accessible, but add SHA256 verification for security.
The URL returns HTTP 200 and is accessible. However, with sha256 set to "no_check", the installer downloads without integrity verification. For remote access software like TeamViewer, this creates a security risk if the download is intercepted or the hosting server is compromised. Compute the actual SHA256 hash for this installer version and update the sha256 field rather than using "no_check".
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@ee/maintained-apps/outputs/teamviewer/windows.json` at line 9, Replace the
"no_check" placeholder in the sha256 field with the real SHA256 for the
TeamViewer installer referenced by installer_url
(TeamViewer_Setup_x64_15.76.5.exe); download the exact file, compute its SHA256
(e.g., using sha256sum or shasum -a 256), and update the "sha256" property in
the windows.json entry to that computed hash so the installer is
integrity-verified.
allenhouchins
approved these changes
Apr 9, 2026
This was referenced Apr 10, 2026
This was referenced Apr 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit