Update Fleet-maintained apps - #48427
Conversation
Generated automatically with cmd/maintained-apps.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
WalkthroughVersion metadata was updated for 16 maintained app output JSON files. Each change increments the Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/miro/windows.json`:
- Around line 9-12: The Miro Windows installer entry is pinned to a mutable
download URL, so the checksum can drift if the vendor republishes it. Update the
installer reference in the Miro windows.json entry to use an immutable,
versioned artifact or an internal mirror, and keep the existing sha256 tied to
that fixed asset so the install reproducibly matches the pinned hash.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: dd39a154-db1a-4690-971b-cc78e58a5225
📒 Files selected for processing (16)
ee/maintained-apps/outputs/bezel/darwin.jsonee/maintained-apps/outputs/clipbook/darwin.jsonee/maintained-apps/outputs/cryptomator/darwin.jsonee/maintained-apps/outputs/downie/darwin.jsonee/maintained-apps/outputs/duckduckgo/darwin.jsonee/maintained-apps/outputs/genesys-cloud/windows.jsonee/maintained-apps/outputs/macwhisper/darwin.jsonee/maintained-apps/outputs/miro/windows.jsonee/maintained-apps/outputs/nextcloud/windows.jsonee/maintained-apps/outputs/notepadexe/darwin.jsonee/maintained-apps/outputs/opera/darwin.jsonee/maintained-apps/outputs/proton-drive/windows.jsonee/maintained-apps/outputs/reqable/darwin.jsonee/maintained-apps/outputs/reqable/windows.jsonee/maintained-apps/outputs/whatsapp/darwin.jsonee/maintained-apps/outputs/wins/darwin.json
| "installer_url": "https://desktop.miro.com/platforms/win32-nsis-pu/Miro-setup.exe", | ||
| "install_script_ref": "c9d9747e", | ||
| "uninstall_script_ref": "66f6a4de", | ||
| "sha256": "24da9d6b31fd5429a773f1e30d7fb2b16ba789330201289f45920babf8fb0704", | ||
| "sha256": "0191332d9a1ed8e470552adbc752d71c7da0d21172223369ac18cb37ff9c89a1", |
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
url='https://desktop.miro.com/platforms/win32-nsis-pu/Miro-setup.exe'
tmp="$(mktemp)"
trap 'rm -f "$tmp"' EXIT
echo "Effective URL:"
curl -fsSIL -o /dev/null -w '%{url_effective}\n' "$url"
echo
echo "Headers:"
curl -fsSIL "$url"
echo
echo "Downloading to compute current sha256..."
curl -fsSL --retry 3 --output "$tmp" "$url"
sha256sum "$tmp"Repository: fleetdm/fleet
Length of output: 913
🌐 Web query:
Miro Windows installer URL versioned immutable desktop.miro.com platform win32 nsis pu Miro-setup.exe
💡 Result:
Miro does not utilize a public, versioned, or immutable URL structure for its Windows installer files [1][2]. Instead, Miro provides standardized download links via its official website, which consistently point to the latest available version [3][1]. For Windows, the primary installer is commonly referenced as Miro-setup.exe [4][5]. IT administrators and users typically access these installers through the official Miro apps page [3][1]. While older community documentation or legacy scripts may have referenced path structures like desktop.miro.com/platforms/..., Miro now directs users to their official download center for the most current MSI or EXE installers [3][1]. Key details regarding Miro Windows installation: - Official Source: All downloads should be sourced from the official Miro website (miro.com/apps/) to ensure security and validity [3][1][2]. - Installer Types: Miro offers various installers, including MSI versions for enterprise deployment (per-user and per-machine, with or without auto-updates) [1]. - Persistence/Immutability: There is no guarantee of immutability for these URLs; they are designed to serve the most recent release [1]. Automated deployment scripts that rely on static URLs often require maintenance as the underlying download infrastructure may change [6]. - Installation Framework: The Windows desktop application is built using technologies consistent with standard Windows installation frameworks (such as NSIS for older executables or MSI/MSIX for enterprise deployment) [1][7][8]. If you are automating deployment, it is recommended to use the official links provided in the Miro Help Center, which lists specific MSI installers for enterprise use, rather than attempting to construct URLs manually [1].
Citations:
- 1: https://help.miro.com/hc/en-us/articles/360017572854-Desktop-app
- 2: https://offlineinstallersetup.com/miro-offline-installer/
- 3: https://miro.com/apps/
- 4: https://community.miro.com/ask-the-community-45/is-the-miro-desktop-app-available-as-a-zip-17870
- 5: https://www.filehorse.com/download-miro-mind-map/
- 6: Miro download URL is changed Installomator/Installomator#1509
- 7: https://www.appdeploynews.com/app-tips/miro-miro-desktop-0-7-16/
- 8: https://fleetdm.com/software-catalog/miro-windows
Pin the installer to an immutable artifact. https://desktop.miro.com/platforms/win32-nsis-pu/Miro-setup.exe is a latest-style download URL, so the pinned sha256 can drift if Miro republishes the file; use a versioned asset or internal mirror instead.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/miro/windows.json` around lines 9 - 12, The Miro
Windows installer entry is pinned to a mutable download URL, so the checksum can
drift if the vendor republishes it. Update the installer reference in the Miro
windows.json entry to use an immutable, versioned artifact or an internal
mirror, and keep the existing sha256 tied to that fixed asset so the install
reproducibly matches the pinned hash.
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit