Update Fleet-maintained apps

[fleet-release]

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

• Chores
  • Refreshed application version metadata for 11 managed applications: Adobe Acrobat Reader, Blender, Claude, Cursor, Discord, NordPass, Ollama, Postman, Spotify, Sublime Merge, and Warp. Updates include version identifiers, download URLs, and checksums to ensure accurate application state monitoring and deployment consistency across supported platforms.

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[coderabbitai]

Walkthrough

This pull request updates version metadata for 14 maintained applications across Windows and macOS platforms. Each update modifies the corresponding JSON configuration file to reflect new application versions by changing the version field, updating the patched query's version_compare threshold to the new version, replacing the installer_url to point to the new release artifact, and updating the sha256 checksum for the new installer binary. No changes were made to script references or logic flow.

Possibly related PRs

• Update Fleet-maintained apps #43404: Updates multiple overlapping maintained-app JSON files including cursor, claude, postman, ollama, and warp with version bumps and corresponding installer URL and checksum changes.
• Update Fleet-maintained apps #43439: Modifies the same adobe-acrobat-reader/windows.json file to update version metadata, installer URL, and sha256 checksum.
• Update Fleet-maintained apps #43423: Updates ollama/windows.json with version bump and corresponding installer URL and sha256 checksum changes.

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description is minimal but adequate for an automated PR; however, it lacks the structured template with testing, database, and compatibility checklist items expected by the repository.	Clarify whether the template applies to automated PRs, or consider adding template sections (e.g., testing validation, database checks) relevant to data updates.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Update Fleet-maintained apps' accurately summarizes the main change—updating multiple Fleet-maintained application version metadata files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-2604141440

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (1)

ee/maintained-apps/outputs/claude/darwin.json (1)

9-12: Add automated artifact-integrity verification for release ingestion.

Given this is supply-chain-sensitive metadata, validating that the downloaded ZIP at Line 9 hashes to Line 12 during CI ingestion (not just generation time) would catch bad upstream artifacts before they're incorporated. Currently, the SHA256 value exists in the metadata but is never validated against the actual artifact.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@ee/maintained-apps/outputs/claude/darwin.json` around lines 9 - 12, Add a
CI-time artifact integrity check that downloads the installer_url from the
darwin.json metadata and verifies its SHA256 matches the sha256 field; implement
a reusable helper (e.g., verifyArtifactIntegrity or verify_release_artifact)
invoked by the release ingestion job to fetch installer_url, compute the SHA256
(openssl/sha256sum or language runtime), and fail the ingestion on mismatch,
logging both expected (sha256) and actual digest; ensure this runs before any
metadata is accepted and similarly validate any other artifact fields like
install_script_ref/uninstall_script_ref if those point to downloadable content.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@ee/maintained-apps/outputs/claude/darwin.json`:
- Around line 9-12: Add a CI-time artifact integrity check that downloads the
installer_url from the darwin.json metadata and verifies its SHA256 matches the
sha256 field; implement a reusable helper (e.g., verifyArtifactIntegrity or
verify_release_artifact) invoked by the release ingestion job to fetch
installer_url, compute the SHA256 (openssl/sha256sum or language runtime), and
fail the ingestion on mismatch, logging both expected (sha256) and actual
digest; ensure this runs before any metadata is accepted and similarly validate
any other artifact fields like install_script_ref/uninstall_script_ref if those
point to downloadable content.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 5d75ec94-1777-408a-bf88-58e21a2f8352

📥 Commits

Reviewing files that changed from the base of the PR and between ef897e2 and 598d11a.

📒 Files selected for processing (14)

• ee/maintained-apps/outputs/adobe-acrobat-reader/windows.json
• ee/maintained-apps/outputs/blender/windows.json
• ee/maintained-apps/outputs/claude/darwin.json
• ee/maintained-apps/outputs/cursor/darwin.json
• ee/maintained-apps/outputs/discord/darwin.json
• ee/maintained-apps/outputs/discord/windows.json
• ee/maintained-apps/outputs/nordpass/darwin.json
• ee/maintained-apps/outputs/ollama/darwin.json
• ee/maintained-apps/outputs/ollama/windows.json
• ee/maintained-apps/outputs/postman/darwin.json
• ee/maintained-apps/outputs/postman/windows.json
• ee/maintained-apps/outputs/spotify/windows.json
• ee/maintained-apps/outputs/sublime-merge/darwin.json
• ee/maintained-apps/outputs/warp/darwin.json

[github-actions]

Closing in favor of #43523.