Update Fleet-maintained apps - #44962
Conversation
Generated automatically with cmd/maintained-apps.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
WalkthroughThis PR updates macOS installer metadata for eight maintained applications. Each update follows a consistent pattern: the version field is bumped to a newer release, the SQL patch-detection query ( Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/signal/darwin.json`:
- Around line 4-12: The manifest declares Signal version "8.9.0" and points
installer_url/sha256/install_script_ref to that build, but GitHub only shows
v8.9.0 as beta; verify that Signal Desktop v8.9.0 is a promoted stable release
before merging by checking the official GitHub releases/tags for a
non-pre-release v8.9.0; if it is not stable, revert the manifest
version/installer_url/sha256/install_script_ref/uninstall_script_ref back to the
last known stable (e.g., "8.8.0") or mark this entry as a beta and prevent
automatic deployment, and update the SQL `patched`/`exists` queries if you
change the version string so they match the chosen stable tag.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: d5d82018-64c6-4043-b7bf-78ac5cfcb6d2
📒 Files selected for processing (8)
ee/maintained-apps/outputs/arc/darwin.jsonee/maintained-apps/outputs/brave-browser/darwin.jsonee/maintained-apps/outputs/cursor/darwin.jsonee/maintained-apps/outputs/firefox/darwin.jsonee/maintained-apps/outputs/firefox@esr/darwin.jsonee/maintained-apps/outputs/gitkraken/darwin.jsonee/maintained-apps/outputs/signal/darwin.jsonee/maintained-apps/outputs/tor-browser/darwin.json
| "version": "8.9.0", | ||
| "queries": { | ||
| "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'org.whispersystems.signal-desktop';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'org.whispersystems.signal-desktop' AND version_compare(bundle_short_version, '8.8.0') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'org.whispersystems.signal-desktop' AND version_compare(bundle_short_version, '8.9.0') < 0);" | ||
| }, | ||
| "installer_url": "https://updates.signal.org/desktop/signal-desktop-mac-arm64-8.8.0.zip", | ||
| "installer_url": "https://updates.signal.org/desktop/signal-desktop-mac-arm64-8.9.0.zip", | ||
| "install_script_ref": "fac7f399", | ||
| "uninstall_script_ref": "a39bd40e", | ||
| "sha256": "8ffa773d8275230c0a64ffa1ff20ebd8872b27adfb1c747f013b0fd2d5b316e5", | ||
| "sha256": "812db6a58590f912beb53bf6f4fffe8508155455d92676ab39a11df01f50e8ee", |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Confirm the Signal 8.9.0 installer URL resolves and is a stable artifact.
# Expected: HTTP 200 with a non-empty body.
curl -sI "https://updates.signal.org/desktop/signal-desktop-mac-arm64-8.9.0.zip" | head -5Repository: fleetdm/fleet
Length of output: 211
🌐 Web query:
Signal v8.9.0 stable release GitHub
💡 Result:
Signal v8.9.0 stable GitHub release (as of 2026-05-07) appears to exist for Signal Android, but I cannot confirm any “stable” v8.9.0 release tag for Signal Desktop or iOS from the sources found. 1) Signal Android (GitHub) — v8.9.0 - GitHub tag: https://github.com/signalapp/Signal-Android/releases/tag/v8.9.0 [1] - Published date shown on the release page: 2026-04-22 [1] Related: the next patch release exists - v8.9.1: https://github.com/signalapp/Signal-Android/releases/tag/v8.9.1 (published 2026-04-27) [2] 2) Signal Desktop (GitHub) - I found a v8.9.0-beta.1 tag, not a v8.9.0 stable release tag in the results: - v8.9.0-beta.1: https://github.com/signalapp/signal-desktop/releases/tag/v8.9.0-beta.1 (published 2026-04-26) [3] 3) Signal iOS (GitHub) - In the results retrieved, I did not find a “v8.9.0” release tag/page for Signal-iOS. If you tell me which platform you mean by “Signal v8.9.0” (Android vs Desktop vs iOS), I can narrow to the exact stable-tag page for that platform.
Citations:
- 1: https://github.com/signalapp/Signal-Android/releases/tag/v8.9.0
- 2: https://github.com/signalapp/Signal-Android/releases/tag/v8.9.1
- 3: https://github.com/signalapp/signal-desktop/releases/tag/v8.9.0-beta.1
Signal 8.9.0 cannot be confirmed as a stable release for Signal Desktop.
The installer URL resolves (HTTP 200), but Signal Desktop releases on GitHub show only v8.9.0-beta.1 (Apr 26, 2026) and v8.9.0-beta.2 (Apr 30, 2026) as pre-releases, with v8.8.0 as the latest stable tag. No stable v8.9.0 tag exists for Signal Desktop. While the CDN artifact exists, installing an unconfirmed version could deploy a beta build to managed machines.
Confirm that v8.9.0 has been promoted to a stable Signal Desktop release before merging.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/signal/darwin.json` around lines 4 - 12, The
manifest declares Signal version "8.9.0" and points
installer_url/sha256/install_script_ref to that build, but GitHub only shows
v8.9.0 as beta; verify that Signal Desktop v8.9.0 is a promoted stable release
before merging by checking the official GitHub releases/tags for a
non-pre-release v8.9.0; if it is not stable, revert the manifest
version/installer_url/sha256/install_script_ref/uninstall_script_ref back to the
last known stable (e.g., "8.8.0") or mark this entry as a beta and prevent
automatic deployment, and update the SQL `patched`/`exists` queries if you
change the version string so they match the chosen stable tag.
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit