Update Fleet-maintained apps

[fleet-release]

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

• Chores
  • Updated Granola macOS app configuration to version 7.147.1
  • Updated Microsoft Outlook macOS installation configuration to the latest installer build

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[github-actions]

Script Diff Results

ee/maintained-apps/outputs/granola/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/microsoft-outlook/darwin.json

=== Install // ea5724c9 -> f9a6efe2 ===

--- /tmp/old.J9wBTs	2026-04-21 19:01:07.171659589 +0000
+++ /tmp/new.oyitqG	2026-04-21 19:01:07.171659589 +0000
@@ -104,6 +104,6 @@
 
 EOF
 
-sudo installer -pkg "$TMPDIR"/Microsoft_Outlook_16.108.26041219_Installer.pkg -target / -applyChoiceChangesXML "$CHOICE_XML"
+sudo installer -pkg "$TMPDIR"/Microsoft_Outlook_16.108.26041915_Installer.pkg -target / -applyChoiceChangesXML "$CHOICE_XML"
 
 relaunch_application 'com.microsoft.Outlook'

=== Uninstall Script (no changes) ===

[coderabbitai]

Walkthrough

This PR updates application metadata in two maintained-apps configuration files. The Granola macOS app entry is updated from version 7.140.1 to 7.147.1, including the version comparison threshold, installer URL, and SHA256 checksum. The Microsoft Outlook 16.108 macOS package metadata is advanced to a newer installer build (26041915 from 26041219), with corresponding updates to the install script reference and SHA256 checksum. In total, 9 lines are modified across both files.

Possibly related PRs

• Update Fleet-maintained apps #43404: Modifies the same Granola darwin.json file with version, version_compare threshold, installer_url, and sha256 updates.
• Update Fleet-maintained apps #43554: Modifies the same Microsoft Outlook darwin.json file with installer build and script reference updates.
• Update Fleet-maintained apps #43739: Updates Granola darwin.json with the same version bump sequence and versioning logic.

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too brief and lacks the required template structure. It does not include the related issue number, checklist items, or testing information that the template requires.	Fill out the required template sections including related issue reference, applicable checklist items, and testing confirmation for the automated data ingestion.
Title check	❓ Inconclusive	The title 'Update Fleet-maintained apps' is generic and does not specify which apps were updated or what the actual changes entail, making it too vague.	Consider a more specific title that identifies the affected apps or the nature of the update, such as 'Update Granola and Outlook to latest versions'.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-2604211858

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

ee/maintained-apps/outputs/microsoft-outlook/darwin.json (1)

4-12: ⚠️ Potential issue | 🟠 Major

Patched query does not check for the refreshed build.

The patched query only checks version_compare(bundle_short_version, '16.108') < 0. Devices already on Outlook 16.108 with the previous 26041219 build will be treated as patched and won't receive the updated 26041915 package.

Update the patched query to also check the build version:

Suggested fix

-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.microsoft.Outlook' AND version_compare(bundle_short_version, '16.108') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.microsoft.Outlook' AND (version_compare(bundle_short_version, '16.108') < 0 OR (bundle_short_version = '16.108' AND version_compare(bundle_version, '16.108.26041915') < 0)));"

Confirm the exact bundle_version value reported by osquery for Outlook before applying the final comparison.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@ee/maintained-apps/outputs/microsoft-outlook/darwin.json` around lines 4 -
12, The "patched" query under the "patched" key currently only checks
bundle_short_version and misses refreshed builds; update the patched SQL (the
value for "patched") to also verify bundle_version (or the exact
osquery-reported build string) so devices with bundle_short_version = '16.108'
but an older bundle_version (e.g., '26041219') are not considered patched;
adjust the WHERE clause to require both version_compare(bundle_short_version,
'16.108') < 0 OR bundle_version >= '26041915' (or the correct comparison
operator for your build semantics) after confirming the exact bundle_version
string reported by osquery for Outlook.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Outside diff comments:
In `@ee/maintained-apps/outputs/microsoft-outlook/darwin.json`:
- Around line 4-12: The "patched" query under the "patched" key currently only
checks bundle_short_version and misses refreshed builds; update the patched SQL
(the value for "patched") to also verify bundle_version (or the exact
osquery-reported build string) so devices with bundle_short_version = '16.108'
but an older bundle_version (e.g., '26041219') are not considered patched;
adjust the WHERE clause to require both version_compare(bundle_short_version,
'16.108') < 0 OR bundle_version >= '26041915' (or the correct comparison
operator for your build semantics) after confirming the exact bundle_version
string reported by osquery for Outlook.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 1507992b-7186-41c2-bc6a-73fa16cf5e8e

📥 Commits

Reviewing files that changed from the base of the PR and between 4bba50f and dd2af34.

📒 Files selected for processing (2)

• ee/maintained-apps/outputs/granola/darwin.json
• ee/maintained-apps/outputs/microsoft-outlook/darwin.json