Remove several x86 Windows apps, labels and policies

[allenhouchins]

Remove several x86-only Fleet-maintained Windows applications and their associated dynamic labels and patch policies. Changes touch:

• it-and-security/fleets/workstations.yml: removed fleet app entries for Brave, Docker Desktop, GitHub Desktop, Postman, Sublime Text, Spotify, Figma, Google Drive, and Cursor.
• it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml: removed the matching x86 dynamic labels.
• it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml: removed the corresponding patch policies for those apps.

This cleans up configuration related to x86-only Windows apps (labels previously filtered on arch NOT LIKE 'ARM%').

Summary by CodeRabbit

• Chores
  • Removed fleet-managed software support for nine Windows applications: Brave Browser, Docker Desktop, GitHub Desktop, Postman, Sublime Text, Spotify, Figma, Google Drive, and Cursor. These applications will no longer receive automatic updates, compliance monitoring, or device tracking through the fleet management system. Users should ensure these applications are maintained independently.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 26e04590-11a1-4f79-8760-341005d99ea1

📥 Commits

Reviewing files that changed from the base of the PR and between 73352f7 and 161a523.

📒 Files selected for processing (3)

• it-and-security/fleets/workstations.yml
• it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml
• it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml

---

Walkthrough

This pull request removes configuration for nine Windows x86 applications across three YAML files: fleet-maintained app entries from the workstations configuration, corresponding dynamic label definitions for detecting installed applications, and associated patch policy entries. The removed applications are Brave Browser, Docker Desktop, GitHub Desktop, Postman, Sublime Text, Spotify, Figma, Google Drive, and Cursor. Other Windows application entries and policies remain unchanged. The changes span 169 total lines removed across the three files.

Possibly related PRs

• Add fleet apps, labels, and patch policies #43473: Directly reverts the same Windows x86 fleet\_maintained\_app entries, labels, and patch policies that were originally added by that PR.
• Update Fleet-maintained apps #43603: Updates maintained-app metadata for several of the same applications (Cursor, GitHub Desktop, Postman) that this PR removes from fleet configurations.
• Update Fleet-maintained apps #43404: Updates maintained-apps outputs for the same application slugs (brave-browser/windows, postman/windows, cursor) that are being removed from fleet entries in this PR.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch allenhouchins-update-patch-policies-list

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.