Update Fleet-maintained apps - #47038
Conversation
Generated automatically with cmd/maintained-apps.
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
WalkthroughThis PR updates version metadata for three macOS applications in the Fleet maintained apps registry. Comet is pinned to version 145.2.7632.4581, Kitty is upgraded to version 0.47.2, and Stats is upgraded to version 3.0.0. Each update modifies the corresponding Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Warning Tools execution failed with the following error: Failed to run tools: 13 INTERNAL: Received RST_STREAM with code 2 (Internal server error) Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/comet/darwin.json`:
- Around line 4-7: The "version" value was changed to "145.2.7632.4581" and is
used in the "patched" query via version_compare(..., '145.2.7632.4581') < 0,
which lowers the enforced baseline; verify the intended baseline and either
revert the "version" value to the original threshold (e.g., the previous
"148.0.7778.1016") or update the "patched" predicate to use the correct baseline
consistently; specifically inspect and update the "version" key and the
"queries.patched" string (the version_compare call and bundle_identifier
'ai.perplexity.comet') so the compliance gating reflects the intended minimum
version.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 4ee60244-e455-4d23-a447-6870e1a36bc5
📒 Files selected for processing (3)
ee/maintained-apps/outputs/comet/darwin.jsonee/maintained-apps/outputs/kitty/darwin.jsonee/maintained-apps/outputs/stats/darwin.json
| "version": "145.2.7632.4581", | ||
| "queries": { | ||
| "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet' AND version_compare(bundle_short_version, '148.0.7778.1016') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet' AND version_compare(bundle_short_version, '145.2.7632.4581') < 0);" |
There was a problem hiding this comment.
❓ Verification inconclusive
🏁 Script executed:
#!/bin/bash
# Verify whether this PR lowered the Comet maintained-app threshold and by how much.
# Expected: output should clearly show old->new for version and patched query.
set -euo pipefail
FILE="ee/maintained-apps/outputs/comet/darwin.json"
echo "Current file values:"
rg -n '"version"|"patched"' "$FILE"
echo
echo "Previous commit values (if available in local clone):"
git show HEAD~1:"$FILE" | rg -n '"version"|"patched"' || {
echo "Unable to read HEAD~1 for this file; verify PR base diff in GitHub UI."
}Repository: fleetdm/fleet
Length of output: 1929
🏁 Script executed:
#!/bin/bash
set -euo pipefail
FILE="ee/maintained-apps/outputs/comet/darwin.json"
echo "Current:"
rg -n '"version"|"patched"' "$FILE"
echo
echo "Previous (requires repo history available locally):"
if git rev-parse --verify HEAD~1 >/dev/null 2>&1; then
git show HEAD~1:"$FILE" | rg -n '"version"|"patched"'
else
echo "HEAD~1 not available; compare against the PR base commit (git diff in your local clone or GitHub UI)."
fiRepository: fleetdm/fleet
Length of output: 1948
🏁 Script executed:
#!/bin/bash
set -euo pipefail
FILE="ee/maintained-apps/outputs/comet/darwin.json"
echo "Current:"
rg -n '"version"|"patched"' "$FILE"
echo
echo "Previous revision (use PR base/merge-base locally if HEAD~1 isn't the prior state):"
git show HEAD~1:"$FILE" 2>/dev/null | rg -n '"version"|"patched"' || {
echo "Unable to read HEAD~1. Compare against the PR base commit locally (git show <base>:$FILE)."
}Repository: fleetdm/fleet
Length of output: 1948
🏁 Script executed:
#!/bin/bash
set -euo pipefail
FILE="ee/maintained-apps/outputs/comet/darwin.json"
echo "Current (post-PR):"
rg -n '"version"|"patched"' "$FILE"
echo
echo "Compare against the PR base commit locally (git show <base_sha>:$FILE) and ensure the 'version' value didn't get reduced unintentionally."Repository: fleetdm/fleet
Length of output: 1948
Potential Comet patched baseline regression—confirm the enforced version threshold change
ee/maintained-apps/outputs/comet/darwin.json now sets "version": "145.2.7632.4581" and uses it in the patched predicate (version_compare(..., '145.2.7632.4581') < 0). If the PR lowered the baseline from 148.0.7778.1016 to 145.2.7632.4581, compliance gating could be weakened by classifying more “older” hosts as patched.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/comet/darwin.json` around lines 4 - 7, The
"version" value was changed to "145.2.7632.4581" and is used in the "patched"
query via version_compare(..., '145.2.7632.4581') < 0, which lowers the enforced
baseline; verify the intended baseline and either revert the "version" value to
the original threshold (e.g., the previous "148.0.7778.1016") or update the
"patched" predicate to use the correct baseline consistently; specifically
inspect and update the "version" key and the "queries.patched" string (the
version_compare call and bundle_identifier 'ai.perplexity.comet') so the
compliance gating reflects the intended minimum version.
|
Closing in favor of #47040. |
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit
Chores