Update Fleet-maintained apps

[fleet-release]

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

• Chores
  • Updated version metadata for 17 maintained applications including Apidog, AWS CLI, Bezel, Boom3D, Clockify, Cyberduck, Deezer, Firefox, Godot, Granola, Insomnia, pgAdmin4, Smultron, Spokenly, Tuple, and WhatsApp across macOS and Windows platforms.

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[coderabbitai]

Walkthrough

Seventeen maintained-app JSON manifests under ee/maintained-apps/outputs/ were updated with new release versions. The affected apps span macOS (Apidog, Bezel, Boom3D, Cyberduck, Deezer, Firefox, Godot, Granola, Insomnia, pgAdmin4, Smultron, Spokenly, Tuple, WhatsApp) and Windows (AWS CLI, Clockify, Insomnia). For each entry, the versions[0].version string, queries.patched SQL version comparison threshold, installer_url, and sha256 checksum were updated to match the new release artifact. The queries.exists SQL and install/uninstall script references were unchanged in all files.

Possibly related PRs

• fleetdm/fleet#47570: Updates the same ee/maintained-apps/outputs/aws-cli/windows.json and ee/maintained-apps/outputs/bezel/darwin.json manifests with the same pattern of version, queries.patched, installer_url, and sha256 changes.
• fleetdm/fleet#47596: Directly updates ee/maintained-apps/outputs/deezer/darwin.json with the same version-bump pattern targeting the queries.patched threshold and installer_url/sha256 fields.
• fleetdm/fleet#47676: Updates the Granola maintained-app manifest using the identical pattern of queries.patched logic and installer_url/sha256 artifact changes.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is minimal and does not follow the provided template structure, missing required sections like checklist items, testing details, and validation considerations.	Add checklist items for changes files, testing procedures, and any relevant validation; follow the template structure to document the automated ingestion process and its testing.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Update Fleet-maintained apps' is specific and directly describes the main change—updating version metadata and installer information for multiple Fleet-maintained applications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-2606181658

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (1)

ee/maintained-apps/outputs/smultron/darwin.json (1)

4-7: The Smultron14 endpoint currently resolves to version 14.4.9.

The floating download URL and missing checksum create risk of version drift. The embedded bundle version matches the pinned patched threshold (14.4.9), but relying on a non-versioned endpoint for security policy enforcement exposes the configuration to silent breaks if the upstream provider updates the bundle. Consider pinning the download URL or adding a checksum once the stable bundle URL is identified.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ee/maintained-apps/outputs/smultron/darwin.json` around lines 4 - 7, The
Smultron14 configuration in darwin.json uses a non-versioned download URL which
creates risk of silent version drift if the upstream provider updates the
bundle. To fix this, either pin the download URL to explicitly reference version
14.4.9 (or the specific stable URL once identified) or add a checksum field that
verifies the downloaded bundle matches the expected version 14.4.9. This will
ensure the security policy enforcement remains stable even if the upstream
provider makes changes to their distribution endpoint.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@ee/maintained-apps/outputs/smultron/darwin.json`:
- Around line 4-7: The Smultron14 configuration in darwin.json uses a
non-versioned download URL which creates risk of silent version drift if the
upstream provider updates the bundle. To fix this, either pin the download URL
to explicitly reference version 14.4.9 (or the specific stable URL once
identified) or add a checksum field that verifies the downloaded bundle matches
the expected version 14.4.9. This will ensure the security policy enforcement
remains stable even if the upstream provider makes changes to their distribution
endpoint.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c7064f37-2c71-43bd-9a00-d35b8d14c528

📥 Commits

Reviewing files that changed from the base of the PR and between 8d26d29 and 218e03f.

📒 Files selected for processing (17)

• ee/maintained-apps/outputs/apidog/darwin.json
• ee/maintained-apps/outputs/aws-cli/windows.json
• ee/maintained-apps/outputs/bezel/darwin.json
• ee/maintained-apps/outputs/boom-3d/darwin.json
• ee/maintained-apps/outputs/clockify/windows.json
• ee/maintained-apps/outputs/cyberduck/darwin.json
• ee/maintained-apps/outputs/deezer/darwin.json
• ee/maintained-apps/outputs/firefox/darwin.json
• ee/maintained-apps/outputs/godot/darwin.json
• ee/maintained-apps/outputs/granola/darwin.json
• ee/maintained-apps/outputs/insomnia/darwin.json
• ee/maintained-apps/outputs/insomnia/windows.json
• ee/maintained-apps/outputs/pgadmin4/darwin.json
• ee/maintained-apps/outputs/smultron/darwin.json
• ee/maintained-apps/outputs/spokenly/darwin.json
• ee/maintained-apps/outputs/tuple/darwin.json
• ee/maintained-apps/outputs/whatsapp/darwin.json

[github-actions]

Closing in favor of #47849.