Update Fleet-maintained apps - #47042
Conversation
Generated automatically with cmd/maintained-apps.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
Script Diff Resultsee/maintained-apps/outputs/affinity/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/comet/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/kitty/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/slack/windows.json=== Install Script (no changes) ===
=== Uninstall // 1be2e38e -> 034eae14 ===
--- /tmp/old.stSGS1 2026-06-07 17:31:19.581972719 +0000
+++ /tmp/new.nftTqB 2026-06-07 17:31:19.581972719 +0000
@@ -1,7 +1,7 @@
$timeoutSeconds = 300 # 5 minute timeout
# Match only Slack (published by Slack Technologies). We deliberately do NOT rely
-# on $PACKAGE_ID or on a PackageFamilyName property: Get-AppxProvisionedPackage
+# on 'com.tinyspeck.slackdesktop_8yrtsj140pw4g' or on a PackageFamilyName property: Get-AppxProvisionedPackage
# objects don't expose PackageFamilyName, so an "-eq" match against it is $null on
# every package and would select unrelated packages (e.g. DesktopAppInstaller).
function ShouldRemoveSlackPackage {ee/maintained-apps/outputs/stats/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) === |
WalkthroughThis PR updates maintained-app metadata across five application configurations. Version numbers are bumped for Comet, Kitty, and Stats with corresponding installer URLs, SHA256 checksums, and version-comparison SQL queries updated to match the new releases. Script references and configurations are adjusted for Affinity (refs reordering) and Slack (uninstall script reference change with updated PowerShell comment text). All changes are configuration updates with no code or API changes. Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/comet/darwin.json`:
- Around line 4-7: The patched query using version_compare(bundle_short_version,
'145.2.7632.4581') is intended to treat hosts with newer bundle_short_version as
already patched, so don’t change the query logic; instead verify the pinned
manifest value is correct by running the header/filename inspection against the
actual Perplexity download endpoint from a network path that can reach it (e.g.,
curl -sI ... and inspect location/content-disposition) and confirm the served
installer/version matches 145.2.7632.4581; if the served installer differs,
either update the pinned version in the manifest to the real served version or
confirm with the FMA ingestion owners that the downgrade to 145.2.7632.4581 is
intentional before proceeding.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: c4e7add3-0007-415c-b951-b7145e8745db
📒 Files selected for processing (5)
ee/maintained-apps/outputs/affinity/windows.jsonee/maintained-apps/outputs/comet/darwin.jsonee/maintained-apps/outputs/kitty/darwin.jsonee/maintained-apps/outputs/slack/windows.jsonee/maintained-apps/outputs/stats/darwin.json
| "version": "145.2.7632.4581", | ||
| "queries": { | ||
| "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet' AND version_compare(bundle_short_version, '148.0.7778.1016') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.perplexity.comet' AND version_compare(bundle_short_version, '145.2.7632.4581') < 0);" |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check the installer URL to confirm the version being served
curl -sI "https://www.perplexity.ai/rest/browser/download?channel=stable&platform=mac_arm64" | grep -i "location\|content-disposition"Repository: fleetdm/fleet
Length of output: 102
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# Show the whole file (or as much as reasonable) for context
echo "=== File content: ee/maintained-apps/outputs/comet/darwin.json ==="
sed -n '1,120p' ee/maintained-apps/outputs/comet/darwin.json
# Search for the versions across the repo
echo "=== Occurrences of 145.2.7632.4581 ==="
rg -n "145\.2\.7632\.4581" -S .
echo "=== Occurrences of 148.0.7778.1016 ==="
rg -n "148\.0\.7778\.1016" -S .
# Capture more curl metadata (follow redirects) for the stable mac_arm64 download
echo "=== curl -IL (follow redirects) for Comet stable mac_arm64 ==="
curl -sIL "https://www.perplexity.ai/rest/browser/download?channel=stable&platform=mac_arm64" | sed -n '1,80p'Repository: fleetdm/fleet
Length of output: 7161
🌐 Web query:
Perplexity Comet mac_arm64 stable download version 145.2.7632.4581 release notes
💡 Result:
As of June 7, 2026, Comet is an AI-powered, Chromium-based web browser developed by Perplexity AI [1][2]. Regarding the specific version number 145.2.7632.4581, this version was identified in technical documentation for the macOS (arm64) Homebrew cask [3]. However, official, public-facing release notes detailing the specific changes for version 145.2.7632.4581 are not independently published by Perplexity AI [4][5]. Perplexity typically manages Comet updates through automatic background processes, and detailed changelogs for specific build numbers are often handled within the application's internal update mechanism or general product update channels [3][5]. General information about the Comet browser includes: - Availability: It is available for macOS (Intel and Apple Silicon), Windows, Android, and iOS [6][5][2]. - Core Features: It features an integrated AI assistant designed for "agentic" tasks such as multi-step research, summarization, and task automation [1][4][7]. - Update Source: For macOS users, the browser can be managed or installed via Homebrew Cask, where the version field is updated by the community or automated scripts tracking Perplexity's official update endpoints [3][8]. For the most accurate and up-to-date information regarding your current installation, it is recommended to check the "About" section within the Comet browser application itself, which typically displays the latest available release notes or version history [5].
Citations:
- 1: https://comet.macupdate.com/
- 2: https://en.wikipedia.org/wiki/Comet_(browser)
- 3: https://github.com/Homebrew/homebrew-cask/blob/a11e8bb93d246674c4aa57254651222746c4901c/Casks/c/comet.rb
- 4: https://www.perplexity.ai/hub/blog/comet-is-now-available-to-everyone-worldwide
- 5: https://releasebot.io/updates/perplexity-ai
- 6: https://www.softwareswave.com/perplexity-comet-download/
- 7: https://www.perplexity.ai/enterprise/comet
- 8: https://formulae.brew.sh/cask/
🌐 Web query:
148.0.7778.1016 Perplexity Comet version
💡 Result:
The version number 148.0.7778.1016 refers to a specific build of the Comet web browser for macOS [1]. Comet is a web browser developed by Perplexity AI that integrates an AI-powered assistant designed for agentic web browsing and research [2][3][4]. The browser is built on the Chromium engine [4], which explains why its version numbering aligns with Chromium release channels (specifically Chromium 148) [5][6]. Key details regarding this version and the browser include: Chromium Base: The version 148.0.7778.xxx series is associated with Chrome/Chromium 148, which reached its stable release in May 2026 [5]. Browser Identity: Comet serves as Perplexity's agentic browser, enabling autonomous AI interaction with web pages, such as summarizing content, managing tasks, and conducting multi-step research [3][7][4]. Availability: The browser is available across major platforms, including macOS, Windows, iOS, and Android [4]. Desktop versions (such as the one identified by your version number) are often managed and tracked in software catalogs for enterprise deployment [1][7]. It is important to distinguish between the core browser version (which tracks Chromium releases) and the application's internal feature version (often tracked separately, such as 1.23.0 for mobile) [8]. Build 148.0.7778.1016 is a specific binary version of the Comet browser package for macOS [1].
Citations:
- 1: https://fleetdm.com/software-catalog/comet-darwin
- 2: https://www.perplexity.ai/hub/blog/comet-is-now-available-to-everyone-worldwide
- 3: https://labs.zenity.io/p/perplexity-comet-a-reversing-story
- 4: https://vantaige.io/ai-tool/comet
- 5: https://developer.chrome.com/release-notes/148
- 6: https://www.gitclear.com/open_repos/chromium/chromium/release/148.0.7778.101
- 7: https://www.perplexity.ai/enterprise/comet
- 8: https://www.apkmirror.com/apk/perplexityai/comet-ai-browser-assistant/comet-ai-browser-assistant-1-23-0-release/
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# Show the whole file (or as much as reasonable) for context
echo "=== File content: ee/maintained-apps/outputs/comet/darwin.json ==="
sed -n '1,120p' ee/maintained-apps/outputs/comet/darwin.json
# Search for the versions across the repo
echo "=== Occurrences of 145.2.7632.4581 ==="
rg -n "145\.2\.7632\.4581" -S .
echo "=== Occurrences of 148.0.7778.1016 ==="
rg -n "148\.0\.7778\.1016" -S .
# Capture more curl metadata (follow redirects) for the stable mac_arm64 download
echo "=== curl -IL (follow redirects) for Comet stable mac_arm64 ==="
curl -sIL "https://www.perplexity.ai/rest/browser/download?channel=stable&platform=mac_arm64" | sed -n '1,80p'Repository: fleetdm/fleet
Length of output: 7161
🌐 Web query:
Perplexity Comet mac_arm64 stable download version 145.2.7632.4581 release notes
💡 Result:
As of June 7, 2026, there is no public information or official release documentation from Perplexity AI referencing a version number "145.2.7632.4581" for the Comet browser [1][2]. Perplexity typically manages Comet updates through their official website, where users are directed to download the latest stable version directly [3][4]. General information regarding Perplexity Comet: - Availability: Comet is available for download on major platforms, including macOS (arm64 and x64), Windows, iOS, and Android [2][3][5]. - Versioning: Known public versions follow a different, simpler numbering convention (e.g., 1.23.0 for recent mobile releases) [6]. High-precision, long-form version strings like "145.2.7632.4581" are not standard for Perplexity's public-facing browser releases [1][2][6]. - Official Resources: You can verify the latest official release notes and download the stable build directly from the official Perplexity Comet page at https://perplexity.ai/comet or the official changelog at https://docs.perplexity.ai/docs/resources/changelog [1][7][3]. If you encountered this specific version string in an unofficial third-party repository or a download prompt, please exercise caution, as it does not match standard Perplexity naming conventions [6]. Always prioritize downloading software from official, verified sources to ensure security and stability.
Citations:
- 1: https://docs.perplexity.ai/docs/resources/changelog
- 2: https://releasebot.io/updates/perplexity-ai
- 3: https://www.perplexity.ai/hub/blog/comet-is-now-available-to-everyone-worldwide
- 4: https://mashable.com/article/perplexity-comet-ai-web-browser-how-to-try
- 5: https://play.google.com/store/apps/details?hl=en_US&id=ai.perplexity.comet
- 6: https://www.apkmirror.com/apk/perplexityai/comet-ai-browser-assistant/comet-ai-browser-assistant-1-23-0-release/
- 7: https://www.softwareswave.com/perplexity-comet-download/
🌐 Web query:
148.0.7778.1016 Perplexity Comet version
💡 Result:
The version number 148.0.7778.1016 refers to a specific build of the Comet web browser developed by Perplexity AI [1]. Comet is an AI-powered browser based on the Chromium open-source project [2]. The version string 148.0.7778.x corresponds to the underlying Chromium 148 release cycle [3][4]. Chromium 148 stable releases began in early May 2026 [4], consistent with the build version you provided [1]. Comet leverages this Chromium base to provide its features, which include an integrated AI assistant capable of automating web tasks, managing tabs, and performing research [5][6][7][8].
Citations:
- 1: https://fleetdm.com/software-catalog/comet-darwin
- 2: https://en.wikipedia.org/wiki/Comet_(browser)
- 3: https://www.gitclear.com/open_repos/chromium/chromium/release/148.0.7778.101
- 4: https://developer.chrome.com/release-notes/148
- 5: https://www.perplexity.ai/hub/blog/comet-is-now-available-to-everyone-worldwide
- 6: https://www.perplexity.ai/hub/blog/introducing-comet
- 7: https://www.perplexity.ai/comet/
- 8: https://techcrunch.com/2025/07/09/perplexity-launches-comet-an-ai-powered-web-browser/
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "version_compare\\(bundle_short_version" -S ee fleetdm -g'*.go' -g'*.sql' -g'*.js' -g'*.ts' -g'*.py' -g'*.rb' -g'*.sql' .Repository: fleetdm/fleet
Length of output: 2880
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "version_compare\\(bundle_short_version" -S ee/maintained-apps .Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "\"patched\"" ee -S .Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "maintained-apps" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 8882
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "install_script_ref" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 4857
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Search for version_compare(bundle_short_version ...) usage ==="
rg -n "version_compare\\(bundle_short_version" -S ee/maintained-apps .
echo "=== Search for install_script_ref usage (to find ingestion/apply logic) ==="
rg -n "install_script_ref" -S . | head -n 50
echo "=== Search for JSON key \"patched\" usage in code ==="
rg -n "\"patched\"\\s*:" -S ee . | head -n 50
echo "=== Search for maintained-apps ingestion keyword ==="
rg -n "maintained-apps" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Search for version_compare(bundle_short_version ...) usage ==="
rg -n "version_compare\\(bundle_short_version" -S ee/maintained-apps .
echo "=== Search for install_script_ref usage (to find ingestion/apply logic) ==="
rg -n "install_script_ref" -S . | head -n 50
echo "=== Search for JSON key \"patched\" usage in code ==="
rg -n "\"patched\"\\s*:" -S ee . | head -n 50
echo "=== Search for maintained-apps ingestion keyword ==="
rg -n "maintained-apps" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Search for version_compare(bundle_short_version ...) usage ==="
rg -n "version_compare\\(bundle_short_version" -S ee/maintained-apps .
echo "=== Search for install_script_ref usage (to find ingestion/apply logic) ==="
rg -n "install_script_ref" -S . | head -n 50
echo "=== Search for JSON key \"patched\" usage in code ==="
rg -n "\"patched\"\\s*:" -S ee . | head -n 50
echo "=== Search for maintained-apps ingestion keyword ==="
rg -n "maintained-apps" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Search for version_compare(bundle_short_version ...) usage ==="
rg -n "version_compare\\(bundle_short_version" -S ee/maintained-apps .
echo "=== Search for install_script_ref usage (to find ingestion/apply logic) ==="
rg -n "install_script_ref" -S . | head -n 50
echo "=== Search for JSON key \"patched\" usage in code ==="
rg -n "\"patched\"\\s*:" -S ee . | head -n 50
echo "=== Search for maintained-apps ingestion keyword ==="
rg -n "maintained-apps" -S ee . | head -n 50Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/bin/bash
set -euo pipefail
sed -n '1,240p' pkg/patch_policy/patch_policy.go
# Also search for evaluation logic for maintained-apps policies / patch policies
echo "=== search for PatchPolicy usage ==="
rg -n "PatchPolicy" pkg server ee | head -n 50
echo "=== search for field Patched/Exists usage ==="
rg -n "Patched.*json|json:\"patched\"|Query.*patched|patched.*query|Exists.*json\"|json:\"exists\"" ee pkg server | head -n 50Repository: fleetdm/fleet
Length of output: 10214
🏁 Script executed:
#!/bin/bash
set -euo pipefail
sed -n '1,260p' pkg/patch_policy/patch_policy.go
echo "=== search for PatchPolicy usage ==="
rg -n "patch_policy" pkg server ee | head -n 50
echo "=== search for query fields in maintained-apps policy structs ==="
rg -n "Exists string `json:\"exists\"`|Patched string `json:\"patched\"`" -S ee pkg serverRepository: fleetdm/fleet
Length of output: 7371
🏁 Script executed:
#!/bin/bash
set -euo pipefail
sed -n '1,220p' ee/maintained-apps/maintained_apps.go
echo "=== search for Policy evaluation usage ==="
rg -n "Policy.*Exists|Policy.*Patched|json:\"exists\"|json:\"patched\"" ee server pkg | head -n 50Repository: fleetdm/fleet
Length of output: 2818
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n "\"exists\"\\s*:\\s*\"SELECT|\"patched\"\\s*:\\s*\"SELECT" ee/maintained-apps/outputs/comet/darwin.json
# Search for "version_compare(" in patch_policy.go
rg -n "version_compare" pkg/patch_policy/patch_policy.go
# Show rest of patch_policy.go around patchTemplate
sed -n '120,220p' pkg/patch_policy/patch_policy.goRepository: fleetdm/fleet
Length of output: 2104
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== pkg/patch_policy/patch_policy.go (for semantics) ==="
sed -n '1,260p' pkg/patch_policy/patch_policy.go
echo "=== ee/maintained-apps/maintained_apps.go ==="
sed -n '1,120p' ee/maintained-apps/maintained_apps.go
echo "=== Search callers that evaluate maintained-apps policies ==="
rg -n "json:\"exists\"|json:\"patched\"|Patched string `json:\"patched\"`|Exists string `json:\"exists\"`" ee server pkg | head -n 100
echo "=== Search for where queries are used in execution ==="
rg -n "Query\\.Exists|Query\\.Patched|policy\\.Query|patched.*query|exists.*query" ee server pkg | head -n 100Repository: fleetdm/fleet
Length of output: 12761
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== pkg/patch_policy/patch_policy.go (for semantics) ==="
sed -n '1,260p' pkg/patch_policy/patch_policy.go
echo "=== ee/maintained-apps/maintained_apps.go ==="
sed -n '1,140p' ee/maintained-apps/maintained_apps.go
echo "=== Search callers that evaluate maintained-apps policies ==="
rg -n "json:\"exists\"|json:\"patched\"|Patched string `json:\"patched\"`|Exists string `json:\"exists\"`" ee server pkg | head -n 120
echo "=== Search for where queries are used in execution ==="
rg -n "policy.*(exists|patched)|patched.*(query|where)|exists.*(query|where)" ee server pkg | head -n 120Repository: fleetdm/fleet
Length of output: 15085
🏁 Script executed:
curl -sI "https://www.perplexity.ai/rest/browser/download?channel=stable&platform=mac_arm64" | grep -i "location\|content-disposition"Repository: fleetdm/fleet
Length of output: 102
Comet manifest version drop shouldn’t trigger a rollback, but the pinned “stable” version still needs confirmation.
ee/maintained-apps/outputs/comet/darwin.json’spatchedquery isNOT EXISTS (... version_compare(bundle_short_version, '145.2.7632.4581') < 0), which means hosts already on a newerbundle_short_versionshould be considered patched—so this “downgrade” value shouldn’t force a rollback to145.2....- The concern shifts to ingestion accuracy: devices currently below
145.2...will install only up to this pinned version until the manifest advances again. - The suggested
curl -sI ... | grep location/content-dispositioncheck can’t validate the real served version in this environment (it only returnedlocation: https://www.example.com?status=ok); run the same header/filename inspection from a network path that can reach the Perplexity download endpoint and confirm the served installer/version matches145.2.7632.4581. - If the version decrease was intentional (rollback/stable mapping/versioning-scheme change), confirm with the team maintaining the FMA ingestion logic rather than relying on public build-specific release notes.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/comet/darwin.json` around lines 4 - 7, The patched
query using version_compare(bundle_short_version, '145.2.7632.4581') is intended
to treat hosts with newer bundle_short_version as already patched, so don’t
change the query logic; instead verify the pinned manifest value is correct by
running the header/filename inspection against the actual Perplexity download
endpoint from a network path that can reach it (e.g., curl -sI ... and inspect
location/content-disposition) and confirm the served installer/version matches
145.2.7632.4581; if the served installer differs, either update the pinned
version in the manifest to the real served version or confirm with the FMA
ingestion owners that the downgrade to 145.2.7632.4581 is intentional before
proceeding.
|
Closing in favor of #47043. |
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit