Update Fleet-maintained apps - #50396
Conversation
Generated automatically with cmd/maintained-apps.
GitHub Actions
Inactive
WalkthroughUpdated the Bome Network macOS manifest from version 1.6.0 to 1.7.0. The change updates its patch query, installer URL, and SHA-256 checksum. The Firefox Nightly macOS manifest now references the 2026-08-01 21:12:58 build and its replacement checksum. Installation and uninstallation script references remain unchanged. Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/bome-network/darwin.json`:
- Around line 4-12: Update the Bome Network manifest metadata to use only the
verified official macOS installer artifact: revise version, installer_url, and
the sha256 checksum together, and align the patched query’s version comparison
with that verified release. Do not ship version 1.7.0 or its current checksum
until the official artifact metadata has been confirmed.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro Plus
Run ID: d5005d60-24d8-4bc7-a979-4effc5de4088
📒 Files selected for processing (2)
ee/maintained-apps/outputs/bome-network/darwin.jsonee/maintained-apps/outputs/firefox@nightly/darwin.json
| "version": "1.7.0", | ||
| "queries": { | ||
| "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network';", | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network' AND version_compare(bundle_short_version, '1.6.0') < 0);" | ||
| "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network' AND version_compare(bundle_short_version, '1.7.0') < 0);" | ||
| }, | ||
| "installer_url": "https://download.bome.com/BomeNet1.6.0_macOS.dmg", | ||
| "installer_url": "https://download.bome.com/BomeNet1.7.0_macOS.dmg", | ||
| "install_script_ref": "f614c9b5", | ||
| "uninstall_script_ref": "647d1ff7", | ||
| "sha256": "24f99bdf3356bf1218c65b315ca63085d8d41cd21f73a67c374cd73acf02d959", | ||
| "sha256": "0c2f6d336c227f1dfcc9c6db88e8daa2de7503f3931fae0868f06630d3215ce3", |
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
manifest='ee/maintained-apps/outputs/bome-network/darwin.json'
url=$(jq -r '.versions[0].installer_url' "$manifest")
expected=$(jq -r '.versions[0].sha256' "$manifest")
version=$(jq -r '.versions[0].version' "$manifest")
case "$url" in
*"BomeNet${version}_macOS.dmg") ;;
*) echo "Installer URL does not match manifest version" >&2; exit 1 ;;
esac
tmp=$(mktemp)
trap 'rm -f "$tmp"' EXIT
curl --fail --location --silent --show-error "$url" --output "$tmp"
actual=$(sha256sum "$tmp" | awk '{print $1}')
test "$actual" = "$expected"Repository: fleetdm/fleet
Length of output: 199
🏁 Script executed:
#!/bin/bash
set -euo pipefail
manifest='ee/maintained-apps/outputs/bome-network/darwin.json'
jq . "$manifest"
url=$(jq -r '.versions[0].installer_url' "$manifest")
expected=$(jq -r '.versions[0].sha256' "$manifest")
version=$(jq -r '._versions[0].version' "$manifest" 2>/dev/null || jq -r '.versions[0].version' "$manifest")
printf '\nManifest fields:\nurl=%s\nexpected_sha256=%s\nversion=%s\n\n' "$url" "$expected" "$version"
python3 - <<'PY' "$url" "$expected" "$version"
import sys, subprocess, tempfile, os, urllib.request, hashlib
url, expected, version = sys.argv[1], sys.argv[2], sys.argv[3]
with tempfile.NamedTemporaryFile(delete=False) as f:
out = f.name
try:
urllib.request.urlretrieve(url, out)
byt = b""
with open(out, "rb") as f:
while True:
chunk = f.read(1024*1024)
if not chunk: break
byt += chunk
actual = hashlib.sha256(byt).hexdigest()
print("download_ok=1")
print("actual_sha256=" + actual)
print("sha256_match=" + ("1" if actual == expected else "0"))
print("installer_url_matches_version=" + ("1" if "BomeNet" + version + "_macOS.dmg" in url else "0"))
finally:
os.unlink(out)
PYRepository: fleetdm/fleet
Length of output: 9362
🌐 Web query:
Bome Network macOS download official version BomeNet 1.7.0 1.6.0 bome.com
💡 Result:
The official version of the Bome Network tool available for macOS is version 1.6.0, which was released on September 25, 2023 [1][2]. There is currently no official version 1.7.0 [2]. You can download the official macOS version directly from the Bome Software website at https://www.bome.com/products/bomenet or via their dedicated downloads page at https://www.bome.com/downloads [1][2]. The software is provided as a universal binary compatible with both Intel and Apple Silicon Macs, supporting macOS versions 10.10 through 15 [1]. Alternatively, it can be installed via Homebrew using the command brew install --cask bome-network [3].
Citations:
- 1: https://www.bome.com/products/bomenet
- 2: https://www.bome.com/downloads
- 3: https://formulae.brew.sh/cask/bome-network
Do not ship Bome Network 1.7.0 until the installer is official.
The manifest declares 1.7.0, points to BomeNet1.7.0_macOS.dmg, and marks installed 1.6.0 versions as outdated. Use the official macOS installer if it is the intended release, and set manifest version, patched, and the checksum to the verified artifact metadata.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/bome-network/darwin.json` around lines 4 - 12,
Update the Bome Network manifest metadata to use only the verified official
macOS installer artifact: revise version, installer_url, and the sha256 checksum
together, and align the patched query’s version comparison with that verified
release. Do not ship version 1.7.0 or its current checksum until the official
artifact metadata has been confirmed.
|
Closing in favor of #50397. |
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit