Update Fleet-maintained apps

[fleet-release]

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

Release Notes

• Chores
  • Updated version metadata for Grammarly macOS (1.168.0), Granola macOS (7.290.0), Krita Windows (5.3.2.1), and Opera macOS (132.0.5905.19) with new installer URLs and SHA-256 checksums. Patching eligibility thresholds were updated accordingly.

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[coderabbitai]

Walkthrough

This PR updates version metadata for four maintained applications across two platforms. Grammarly Desktop macOS is bumped from 1.167.2 to 1.168.0, Granola macOS from 7.277.1 to 7.290.0, Krita Windows from 5.3.2.0 to 5.3.2.1, and Opera macOS installer from build 5905.11 to 5905.19. Each update includes a new installer download URL, corresponding sha256 checksum, and adjusted version threshold in the patched query condition.

Possibly related PRs

• fleetdm/fleet#46586: Updates ee/maintained-apps/outputs/grammarly-desktop/darwin.json with version bump and corresponding installer URL and sha256 changes.
• fleetdm/fleet#45972: Updates Granola macOS metadata in ee/maintained-apps/outputs/granola/darwin.json with version bump and associated installer URL and sha256 updates.
• fleetdm/fleet#46061: Performs automated maintained-app metadata bumps across multiple app entries with version updates, installer URLs, and sha256 checksums.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is minimal and does not follow the repository's pull request template, which requires a comprehensive checklist addressing changes files, testing, database migrations, and other considerations.	Complete the pull request template by filling in relevant sections including the 'Related issue' field, confirming whether changes files were added, verifying testing procedures, and addressing any applicable database or configuration concerns.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Update Fleet-maintained apps' accurately summarizes the main change—updating version metadata for multiple Fleet-maintained applications across the codebase.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-2606021243

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ee/maintained-apps/outputs/opera/darwin.json`:
- Around line 9-12: The manifest's patch gate currently treats any
bundle_short_version >= 132.0 as already patched so hosts on 132.0.5905.11 won't
receive the new installer_url/sha256; update the patch gate rule that references
bundle_short_version (or the patch threshold field) to require a minimum of
132.0.5905.19 (or compare full build/version string) so that installs on
132.0.5905.11 will be considered out-of-date and will pick up the new
installer_url and sha256 provided in this diff.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 323809ee-ac16-47fd-8057-9b5f074e3dcf

📥 Commits

Reviewing files that changed from the base of the PR and between 923d1a2 and 9c8d5b2.

📒 Files selected for processing (4)

• ee/maintained-apps/outputs/grammarly-desktop/darwin.json
• ee/maintained-apps/outputs/granola/darwin.json
• ee/maintained-apps/outputs/krita/windows.json
• ee/maintained-apps/outputs/opera/darwin.json

[coderabbitai]

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Update the patch gate to the new Opera build.

This switches the artifact to 132.0.5905.19, but the manifest still considers any bundle_short_version >= 132.0 patched. Hosts already on 132.0.5905.11 will therefore never pick up this build, so the new installer URL/hash is effectively unreachable for existing Opera 132.0 installs.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ee/maintained-apps/outputs/opera/darwin.json` around lines 9 - 12, The
manifest's patch gate currently treats any bundle_short_version >= 132.0 as
already patched so hosts on 132.0.5905.11 won't receive the new
installer_url/sha256; update the patch gate rule that references
bundle_short_version (or the patch threshold field) to require a minimum of
132.0.5905.19 (or compare full build/version string) so that installs on
132.0.5905.11 will be considered out-of-date and will pick up the new
installer_url and sha256 provided in this diff.

[github-actions]

Closing in favor of #46629.