Update Fleet-maintained apps - #47234
Conversation
Generated automatically with cmd/maintained-apps.
Script Diff Resultsee/maintained-apps/outputs/arduino-ide/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/brave-browser/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/claude/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/codexbar/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/crossover/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/dropbox/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/libreoffice/windows.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/microsoft-dotnet-runtime-10/windows.json=== Install Script (no changes) ===
=== Uninstall // b2eac15c -> 8d137fbb ===
--- /tmp/old.B9CaGY 2026-06-09 21:23:53.815577660 +0000
+++ /tmp/new.f1q0dB 2026-06-09 21:23:53.815577660 +0000
@@ -8,7 +8,7 @@
# We target the bundle by its ProductCode (injected by the ingester) and fall back
# to the cached bootstrapper in the Package Cache.
-$productCode = '{4443C461-ED45-4D3E-A6BB-3794C1B9FC6C}'
+$productCode = '{0EE1CA63-7D41-454E-9108-AC904CB35652}'
function Invoke-Uninstaller {
param([string]$exe, [string]$exeArgs)ee/maintained-apps/outputs/microsoft-edge/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/rustrover/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/ua-connect/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/visual-studio-code/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) === |
WalkthroughThis PR updates version metadata for 12 maintained applications across Fleet's macOS and Windows platform support. Each update follows a consistent pattern: bumping the application version, adjusting the patch-detection SQL query threshold, updating the installer download URL to the new release artifact, and replacing the SHA-256 checksum for integrity verification. For Microsoft .NET Runtime 10 on Windows, the uninstall script reference and ProductCode registry lookup are also updated to target the correct bundle. Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/arduino-ide/darwin.json`:
- Around line 4-12: The manifest claims version "2.3.10" but that release/tag
isn't official; update the entries so they reference a real Arduino IDE release:
set "version" to an actual released version (e.g., "2.3.9" or whatever official
tag you confirm), replace "installer_url" with the official release asset URL
for that exact version, and update "sha256" to the checksum provided by the
official release page; ensure the "queries" string that embeds the version (the
patched query using version_compare against '2.3.10') is updated to match the
new version string so existence/patch detection remains correct.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 557601ba-a164-414d-97fd-9f4e39f2153d
📒 Files selected for processing (12)
ee/maintained-apps/outputs/arduino-ide/darwin.jsonee/maintained-apps/outputs/brave-browser/darwin.jsonee/maintained-apps/outputs/claude/darwin.jsonee/maintained-apps/outputs/codexbar/darwin.jsonee/maintained-apps/outputs/crossover/darwin.jsonee/maintained-apps/outputs/dropbox/darwin.jsonee/maintained-apps/outputs/libreoffice/windows.jsonee/maintained-apps/outputs/microsoft-dotnet-runtime-10/windows.jsonee/maintained-apps/outputs/microsoft-edge/darwin.jsonee/maintained-apps/outputs/rustrover/darwin.jsonee/maintained-apps/outputs/ua-connect/darwin.jsonee/maintained-apps/outputs/visual-studio-code/darwin.json
| "version": "2.3.10", | ||
| "queries": { | ||
| "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'cc.arduino.IDE2';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'cc.arduino.IDE2' AND version_compare(bundle_short_version, '2.3.9') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'cc.arduino.IDE2' AND version_compare(bundle_short_version, '2.3.10') < 0);" | ||
| }, | ||
| "installer_url": "https://github.com/arduino/arduino-ide/releases/download/2.3.9/arduino-ide_2.3.9_macOS_ARM64.dmg", | ||
| "installer_url": "https://github.com/arduino/arduino-ide/releases/download/2.3.10/arduino-ide_2.3.10_macOS_ARM64.dmg", | ||
| "install_script_ref": "323dc006", | ||
| "uninstall_script_ref": "6fdce371", | ||
| "sha256": "88dcbe0360a6d96e811413110fc4c72e66e14e0c2fd93994bc1c82fc90ef3917", | ||
| "sha256": "8811860dc8782b6cd6bb0076e9215255849f404b1b9e6f38069fdc4f5c43648e", |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Verify Arduino IDE 2.3.10 installer URL and checksum
URL="https://github.com/arduino/arduino-ide/releases/download/2.3.10/arduino-ide_2.3.10_macOS_ARM64.dmg"
EXPECTED_SHA256="8811860dc8782b6cd6bb0076e9215255849f404b1b9e6f38069fdc4f5c43648e"
echo "Checking URL accessibility..."
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" -L "$URL")
echo "HTTP Status: $HTTP_STATUS"
if [ "$HTTP_STATUS" = "200" ]; then
echo "Downloading and computing SHA256..."
ACTUAL_SHA256=$(curl -sL "$URL" | shasum -a 256 | awk '{print $1}')
echo "Expected: $EXPECTED_SHA256"
echo "Actual: $ACTUAL_SHA256"
if [ "$EXPECTED_SHA256" = "$ACTUAL_SHA256" ]; then
echo "✓ Checksum matches"
else
echo "✗ Checksum mismatch!"
fi
else
echo "✗ URL not accessible (HTTP $HTTP_STATUS)"
fiRepository: fleetdm/fleet
Length of output: 143
🏁 Script executed:
#!/bin/bash
URL="https://github.com/arduino/arduino-ide/releases/download/2.3.10/arduino-ide_2.3.10_macOS_ARM64.dmg"
echo "Checking URL accessibility (HEAD, short timeouts)..."
HTTP_STATUS=$(curl -sS -o /dev/null -L --head --max-time 20 -w "%{http_code}" "$URL" || true)
echo "HTTP Status: ${HTTP_STATUS:-<none>}"Repository: fleetdm/fleet
Length of output: 127
🌐 Web query:
Arduino IDE 2.3.10 arduino-ide_2.3.10_macOS_ARM64.dmg sha256 8811860dc8782b6cd6bb0076e9215255849f404b1b9e6f38069fdc4f5c43648e
💡 Result:
As of June 9, 2026, there is no official Arduino IDE version 2.3.10. The most recent stable version is 2.3.9, which was released on May 26, 2026 [1]. Because version 2.3.10 does not exist, the SHA-256 hash value you provided (8811860dc8782b6cd6bb0076e9215255849f404b1b9e6f38069fdc4f5c43648e) cannot be verified against an official release. You should only download Arduino IDE from official sources, such as the Arduino website [2][3] or the official GitHub repository [2], to ensure the software's integrity and security. To verify the checksum of a genuine release, you can typically find the associated hashes within the release assets or the specific release notes on the official Arduino IDE GitHub repository [2][4].
Citations:
- 1: https://github.com/arduino/arduino-ide/releases/tag/2.3.9
- 2: https://github.com/arduino/arduino-ide/releases
- 3: https://arduino-ide.net/download.html
- 4: https://forum.arduino.cc/t/2-3-6-appimage-file-download/1382102
🌐 Web query:
site:github.com arduino-ide releases/download/2.3.10 checksums SHA256 arduino-ide_2.3.10_macOS_ARM64.dmg
💡 Result:
As of June 9, 2026, there is no release of Arduino IDE version 2.3.10 [1][2]. The most recent stable release is version 2.3.9, which was published on May 26, 2026 [2]. Regarding your interest in SHA256 checksums, the official Arduino IDE GitHub repository does not provide direct SHA256 checksums for all release binaries in the release notes [3][4]. While users have requested this as a feature in multiple GitHub issues (e.g., #2173 and #2648) to facilitate secure verification and automation, the project has not implemented a standard practice of publishing checksums alongside the download assets [3][4]. Consequently, there is no official SHA256 checksum available for a 2.3.10 release, nor for the existing 2.3.9 assets in the release documentation [2].
Citations:
- 1: https://github.com/arduino/arduino-ide/releases
- 2: https://github.com/arduino/arduino-ide/releases/tag/2.3.9
- 3: Provide checksums for all release packages arduino/arduino-ide#2648
- 4: checksums for downloads please arduino/arduino-ide#2173
Arduino IDE 2.3.10: URL reachable, but checksum can’t be validated against an official 2.3.10 release
installer_urlcurrently returns HTTP 200, but public Arduino IDE release info indicates there is no official2.3.10release/tag (latest stable is2.3.9), so the providedsha256cannot be tied to an official artifact for integrity verification.- Update
installer_url/sha256to a real Arduino IDE release asset and use the checksum sourced from the official release/checksum publication.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/arduino-ide/darwin.json` around lines 4 - 12, The
manifest claims version "2.3.10" but that release/tag isn't official; update the
entries so they reference a real Arduino IDE release: set "version" to an actual
released version (e.g., "2.3.9" or whatever official tag you confirm), replace
"installer_url" with the official release asset URL for that exact version, and
update "sha256" to the checksum provided by the official release page; ensure
the "queries" string that embeds the version (the patched query using
version_compare against '2.3.10') is updated to match the new version string so
existence/patch detection remains correct.
|
Closing in favor of #47238. |
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit