Skip to content

Update Fleet-maintained apps #50396

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
fleet-release wants to merge 1 commit into from
Closed

Update Fleet-maintained apps #50396

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions ee/maintained-apps/outputs/bome-network/darwin.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,15 +1,15 @@
{
"versions": [
{
"version": "1.6.0",
"version": "1.7.0",
"queries": {
"exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network';",
"patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network' AND version_compare(bundle_short_version, '1.6.0') < 0);"
"patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.bome.network' AND version_compare(bundle_short_version, '1.7.0') < 0);"
},
"installer_url": "https://download.bome.com/BomeNet1.6.0_macOS.dmg",
"installer_url": "https://download.bome.com/BomeNet1.7.0_macOS.dmg",
"install_script_ref": "f614c9b5",
"uninstall_script_ref": "647d1ff7",
"sha256": "24f99bdf3356bf1218c65b315ca63085d8d41cd21f73a67c374cd73acf02d959",
"sha256": "0c2f6d336c227f1dfcc9c6db88e8daa2de7503f3931fae0868f06630d3215ce3",
Comment on lines +4 to +12

@coderabbitai coderabbitai Bot Aug 2, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

manifest='ee/maintained-apps/outputs/bome-network/darwin.json'
url=$(jq -r '.versions[0].installer_url' "$manifest")
expected=$(jq -r '.versions[0].sha256' "$manifest")
version=$(jq -r '.versions[0].version' "$manifest")

case "$url" in
  *"BomeNet${version}_macOS.dmg") ;;
  *) echo "Installer URL does not match manifest version" >&2; exit 1 ;;
esac

tmp=$(mktemp)
trap 'rm -f "$tmp"' EXIT

curl --fail --location --silent --show-error "$url" --output "$tmp"
actual=$(sha256sum "$tmp" | awk '{print $1}')
test "$actual" = "$expected"

Repository: fleetdm/fleet

Length of output: 199

🏁 Script executed:

#!/bin/bash
set -euo pipefail

manifest='ee/maintained-apps/outputs/bome-network/darwin.json'
jq . "$manifest"
url=$(jq -r '.versions[0].installer_url' "$manifest")
expected=$(jq -r '.versions[0].sha256' "$manifest")
version=$(jq -r '._versions[0].version' "$manifest" 2>/dev/null || jq -r '.versions[0].version' "$manifest")

printf '\nManifest fields:\nurl=%s\nexpected_sha256=%s\nversion=%s\n\n' "$url" "$expected" "$version"

python3 - <<'PY' "$url" "$expected" "$version"
import sys, subprocess, tempfile, os, urllib.request, hashlib

url, expected, version = sys.argv[1], sys.argv[2], sys.argv[3]
with tempfile.NamedTemporaryFile(delete=False) as f:
    out = f.name
try:
    urllib.request.urlretrieve(url, out)
    byt = b""
    with open(out, "rb") as f:
        while True:
            chunk = f.read(1024*1024)
            if not chunk: break
            byt += chunk
    actual = hashlib.sha256(byt).hexdigest()
    print("download_ok=1")
    print("actual_sha256=" + actual)
    print("sha256_match=" + ("1" if actual == expected else "0"))
    print("installer_url_matches_version=" + ("1" if "BomeNet" + version + "_macOS.dmg" in url else "0"))
finally:
    os.unlink(out)
PY

Repository: fleetdm/fleet

Length of output: 9362

🌐 Web query:

Bome Network macOS download official version BomeNet 1.7.0 1.6.0 bome.com

💡 Result:

The official version of the Bome Network tool available for macOS is version 1.6.0, which was released on September 25, 2023 [1][2]. There is currently no official version 1.7.0 [2]. You can download the official macOS version directly from the Bome Software website at https://www.bome.com/products/bomenet or via their dedicated downloads page at https://www.bome.com/downloads [1][2]. The software is provided as a universal binary compatible with both Intel and Apple Silicon Macs, supporting macOS versions 10.10 through 15 [1]. Alternatively, it can be installed via Homebrew using the command brew install --cask bome-network [3].

Citations:

Do not ship Bome Network 1.7.0 until the installer is official.

The manifest declares 1.7.0, points to BomeNet1.7.0_macOS.dmg, and marks installed 1.6.0 versions as outdated. Use the official macOS installer if it is the intended release, and set manifest version, patched, and the checksum to the verified artifact metadata.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ee/maintained-apps/outputs/bome-network/darwin.json` around lines 4 - 12,
Update the Bome Network manifest metadata to use only the verified official
macOS installer artifact: revise version, installer_url, and the sha256 checksum
together, and align the patched query’s version comparison with that verified
release. Do not ship version 1.7.0 or its current checksum until the official
artifact metadata has been confirmed.

"default_categories": [
"Productivity"
]
Expand Down
4 changes: 2 additions & 2 deletions ee/maintained-apps/outputs/firefox@nightly/darwin.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,10 +6,10 @@
"exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.nightly';",
"patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.nightly' AND version_compare(bundle_version, '15526.8.1') < 0);"
},
"installer_url": "https://ftp.mozilla.org/pub/firefox/nightly/2026/08/2026-08-01-09-49-16-mozilla-central/firefox-155.0a1.en-US.mac.dmg",
"installer_url": "https://ftp.mozilla.org/pub/firefox/nightly/2026/08/2026-08-01-21-12-58-mozilla-central/firefox-155.0a1.en-US.mac.dmg",
"install_script_ref": "d9c4cf87",
"uninstall_script_ref": "0661f848",
"sha256": "6b0c58599eaa50bee0801085be6f8337d4021ae30ef0619426d7093008c9b4b2",
"sha256": "7993f6ab0f2dc5eb4ebb98d5bc772143882fbd265e61d5efdf131001fc8997fc",
"default_categories": [
"Browsers"
]
Expand Down
Loading