Update Fleet-maintained apps - #50899
Closed
fleet-release wants to merge 1 commit into
Closed
Conversation
Generated automatically with cmd/maintained-apps.
fleet-release
temporarily deployed
to
Docker Hub
August 10, 2026 19:37 — with 
GitHub Actions
Inactive
GitHub Actions
Inactive
Contributor
WalkthroughUpdated Darwin installer metadata for Android Studio, ChatGPT, and Cisco Jabber. The changes update release versions where applicable, installer URLs, and SHA-256 checksums. Existing installation and uninstallation script references remain unchanged. Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/android-studio/darwin.json`:
- Around line 10-13: Ensure the Darwin manifests use installers compatible with
each host CPU architecture: update both
ee/maintained-apps/outputs/android-studio/darwin.json lines 10-13 and
ee/maintained-apps/outputs/chatgpt/darwin.json lines 10-13 to provide universal
or Intel-compatible installers, or implement architecture-aware selection in the
maintained-app path that currently validates only host.FleetPlatform().
- Around line 10-13: Align the application bundle identifier queries and script
references in ee/maintained-apps/outputs/chatgpt/darwin.json (lines 10-13) with
the installers: use com.openai.codex instead of com.openai.chat, and update the
related manifest/install-script references. In
ee/maintained-apps/outputs/cisco-jabber/darwin.json (lines 10-13), use
com.cisco.Jabber instead of com.cisco.jabber and update the related references.
ee/maintained-apps/outputs/android-studio/darwin.json (lines 10-13) requires no
direct change.
🪄 Autofix
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro Plus
Run ID: bef65f77-d8aa-4d10-b0f8-9cc9fdf7692b
📒 Files selected for processing (3)
ee/maintained-apps/outputs/android-studio/darwin.jsonee/maintained-apps/outputs/chatgpt/darwin.jsonee/maintained-apps/outputs/cisco-jabber/darwin.json
Comment on lines
+10
to
+13
| "installer_url": "https://edgedl.me.gvt1.com/android/studio/install/2026.1.3.8/android-studio-quail3-patch1-mac_arm.dmg", | ||
| "install_script_ref": "2f5a5ada", | ||
| "uninstall_script_ref": "aa386b1a", | ||
| "sha256": "e43fb8f880a419208f821befea17eb9ec1b00c5c2a20227db29c495411c5f99d", | ||
| "sha256": "aa77ef6919b22be51566dcd79603c323f7c403fa91dc79dc413eed7f6a05c048", |
Contributor
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift
🧩 Analysis chain
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
rg -n -C 8 \
'FMAManifestApp|runtime\.GOARCH|GOARCH|arm64|amd64|x86_64|architecture|darwin' \
ee/maintained-apps ee/serverRepository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- candidate manifests ---'
for f in \
ee/maintained-apps/outputs/android-studio/darwin.json \
ee/maintained-apps/outputs/chatgpt/darwin.json
do
if [ -f "$f" ]; then
printf '\n%s\n' "$f"
cat -n "$f"
fi
done
printf '%s\n' '--- relevant symbol locations ---'
rg -n --glob '*.go' --glob '*.ts' --glob '*.tsx' --glob '*.js' \
'FMAManifestApp|runtime\.GOARCH|GOARCH|darwin|installer_url|install_script_ref' \
ee/maintained-apps ee/server | head -n 400Repository: fleetdm/fleet
Length of output: 50369
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- maintained-apps files ---'
git ls-files ee/maintained-apps | rg '(^|/)(main|.*manifest|.*maintained.*app|.*darwin).*\.go$|server' | head -n 300
printf '%s\n' '--- manifest-related Go outlines ---'
while IFS= read -r f; do
ast-grep outline "$f" 2>/dev/null | rg -i 'manifest|app|installer|platform|architecture|darwin|mac' || true
done < <(git ls-files ee/maintained-apps ee/server | rg '\.go$' | head -n 200)Repository: fleetdm/fleet
Length of output: 3724
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- manifest model and platform derivation ---'
cat -n ee/maintained-apps/maintained_apps.go | sed -n '1,130p'
printf '%s\n' '--- maintained-app service paths ---'
cat -n ee/server/service/maintained_apps.go | sed -n '120,230p'
cat -n ee/server/service/software_installers.go | sed -n '3580,3695p'
cat -n ee/server/service/software_installers.go | sed -n '4380,4490p'
printf '%s\n' '--- architecture-related identifiers ---'
rg -n --glob '*.go' --glob '*.sql' --glob '*.json' --glob '*.yml' --glob '*.yaml' \
'HardwareArchitecture|hardware_architecture|architecture|Architecture|arm64|amd64|x86_64|GOARCH|cpu_type|platform.*arch|arch.*platform' \
ee server orbit | head -n 500Repository: fleetdm/fleet
Length of output: 50369
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- installer download and maintained-app selection references ---'
rg -n --glob '*.go' \
'InstallerURL|installer_url|MaintainedApp|maintained app|maintained_apps|SoftwareInstallerPayload|INSTALLER_PATH|Download' \
ee/server ee/maintained-apps | head -n 700
printf '%s\n' '--- platform and architecture fields in Fleet host models ---'
rg -n --glob '*.go' --glob '*.sql' \
'type Host struct|FleetPlatform|Platform string|Platform:|cpu|hardware|osquery.*platform|system_info|uname' \
server ee orbit | head -n 700Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- host/platform validation in installer flows ---'
rg -n -C 6 --glob '*.go' \
'host\.Platform|FleetPlatform\(\)|installerRequiredPlatform|IsUnixLike|cpu_type|CPUType|OperatingSystem|Arch' \
ee/server/service/software_installers.go ee/server/service/maintained_apps.go server | head -n 500
printf '%s\n' '--- maintained-app hydration and slug resolution ---'
cat -n ee/server/service/software_installers.go | sed -n '2968,3072p'
cat -n ee/server/service/software_installers.go | sed -n '3690,3778p'Repository: fleetdm/fleet
Length of output: 47538
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
python3 - <<'PY'
import json
from pathlib import Path
manifest_paths = [
Path("ee/maintained-apps/outputs/android-studio/darwin.json"),
Path("ee/maintained-apps/outputs/chatgpt/darwin.json"),
]
for path in manifest_paths:
data = json.loads(path.read_text())
versions = data["versions"]
assert len(versions) == 1, (path, len(versions))
item = versions[0]
url = item["installer_url"]
print(f"{path}:")
print(f" platform encoded by output path: {path.parent.name}")
print(f" installer_url: {url}")
print(f" architecture marker: " + (
"arm64/arm marker present" if any(x in url.lower() for x in ("arm64", "_arm", "-arm")) else "none"
))
print(f" manifest architecture fields: " + str([
k for k in item if any(x in k.lower() for x in ("arch", "cpu"))
]))
source_paths = [
Path("ee/maintained-apps/maintained_apps.go"),
Path("ee/server/service/software_installers.go"),
Path("ee/server/service/maintained_apps.go"),
]
terms = ("cpu_type", "CPUType", "runtime.GOARCH", "GOARCH", "Arch", "Architecture")
for path in source_paths:
text = path.read_text()
print(f"{path}:")
for term in terms:
print(f" {term}: {text.count(term)}")
PYRepository: fleetdm/fleet
Length of output: 1115
Use architecture-compatible installers for Darwin hosts.
The maintained-app path validates only host.FleetPlatform() and has no CPU-architecture selection. Intel macOS hosts can receive the ARM64-only installers in both manifests. Provide universal or Intel-compatible installers, or add architecture-aware selection.
📍 Affects 2 files
ee/maintained-apps/outputs/android-studio/darwin.json#L10-L13(this comment)ee/maintained-apps/outputs/chatgpt/darwin.json#L10-L13
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/android-studio/darwin.json` around lines 10 - 13,
Ensure the Darwin manifests use installers compatible with each host CPU
architecture: update both ee/maintained-apps/outputs/android-studio/darwin.json
lines 10-13 and ee/maintained-apps/outputs/chatgpt/darwin.json lines 10-13 to
provide universal or Intel-compatible installers, or implement
architecture-aware selection in the maintained-app path that currently validates
only host.FleetPlatform().
🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
verify() {
local name="$1"
local url="$2"
local expected="$3"
local file="$tmpdir/$name"
curl --fail --location --retry 3 --output "$file" "$url"
actual="$(shasum -a 256 "$file" | awk '{print $1}')"
test "$actual" = "$expected"
}
verify android-studio \
'https://edgedl.me.gvt1.com/android/studio/install/2026.1.3.8/android-studio-quail3-patch1-mac_arm.dmg' \
'aa77ef6919b22be51566dcd79603c323f7c403fa91dc79dc413eed7f6a05c048'
verify chatgpt \
'https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip' \
'd96e2fc6d3ecfd7889cfa82827f431a99540028c6a5bf551dc06e569006db600'
verify cisco-jabber \
'https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg' \
'bb71f8686049930033710f88698712e6aee6ed469516f3a73e48df8cecda4d61'Repository: fleetdm/fleet
Length of output: 3951
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
for f in \
ee/maintained-apps/outputs/android-studio/darwin.json \
ee/maintained-apps/outputs/chatgpt/darwin.json \
ee/maintained-apps/outputs/cisco-jabber/darwin.json
do
echo "===== $f ====="
cat -n "$f"
done
echo "===== related metadata and references ====="
rg -n --glob '*.json' --glob '*.yaml' --glob '*.yml' \
'android-studio|ChatGPT-darwin|Cisco-Jabber|Install_Cisco-Jabber|2026\.1\.3\.8|26\.803\.61601|20260722023311|bundle identifier|CFBundleIdentifier' \
ee/maintained-apps | head -300Repository: fleetdm/fleet
Length of output: 50370
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
echo "===== macOS artifact architecture patterns ====="
rg -n --glob 'darwin.json' \
'"installer_url"|"version"|"bundle_identifier"' \
ee/maintained-apps/outputs/android-studio \
ee/maintained-apps/outputs/chatgpt \
ee/maintained-apps/outputs/cisco-jabber \
ee/maintained-apps/outputs | head -250
echo "===== manifest schemas and generation rules ====="
rg -n --glob '*.json' --glob '*.yaml' --glob '*.yml' \
'sha256|installer_url|darwin|architecture|arm64|x86_64|bundle_identifier' \
ee/maintained-apps | head -250
echo "===== artifact headers ====="
for url in \
'https://edgedl.me.gvt1.com/android/studio/install/2026.1.3.8/android-studio-quail3-patch1-mac_arm.dmg' \
'https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip' \
'https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
do
echo "----- $url"
curl --fail --location --silent --show-error --head "$url"
doneRepository: fleetdm/fleet
Length of output: 50369
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
verify_hash() {
local name="$1"
local url="$2"
local expected="$3"
local file="$tmpdir/$name"
echo "===== $name ====="
curl --fail --location --retry 3 --silent --show-error --output "$file" "$url"
if command -v sha256sum >/dev/null 2>&1; then
actual="$(sha256sum "$file" | awk '{print $1}')"
else
actual="$(openssl dgst -sha256 "$file" | awk '{print $NF}')"
fi
printf 'size=%s bytes\nexpected=%s\nactual=%s\n' \
"$(wc -c < "$file")" "$expected" "$actual"
test "$actual" = "$expected"
}
verify_hash android-studio \
'https://edgedl.me.gvt1.com/android/studio/install/2026.1.3.8/android-studio-quail3-patch1-mac_arm.dmg' \
'aa77ef6919b22be51566dcd79603c323f7c403fa91dc79dc413eed7f6a05c048'
verify_hash chatgpt \
'https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip' \
'd96e2fc6d3ecfd7889cfa82827f431a99540028c6a5bf551dc06e569006db600'
verify_hash cisco-jabber \
'https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg' \
'bb71f8686049930033710f88698712e6aee6ed469516f3a73e48df8cecda4d61'Repository: fleetdm/fleet
Length of output: 725
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
chatgpt_url='https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip'
cisco_url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --output "$tmpdir/chatgpt.zip" "$chatgpt_url"
echo "===== ChatGPT archive ====="
unzip -l "$tmpdir/chatgpt.zip" | head -80
unzip -q "$tmpdir/chatgpt.zip" -d "$tmpdir/chatgpt"
find "$tmpdir/chatgpt" -type f -name Info.plist -print -exec \
sh -c 'plutil -p "$1" 2>/dev/null || strings "$1" | grep -E "CFBundleIdentifier|CFBundleShortVersionString|CFBundleVersion|arm64|x86_64" | head -30' sh {} \;
curl --fail --location --silent --show-error --output "$tmpdir/cisco.pkg" "$cisco_url"
echo "===== Cisco Jabber package ====="
file "$tmpdir/cisco.pkg"
if command -v xar >/dev/null 2>&1; then
xar -tf "$tmpdir/cisco.pkg" | head -100
xar -xf "$tmpdir/cisco.pkg" -C "$tmpdir"
find "$tmpdir" -type f -name '*.bom' -o -name '*.plist' | head -50
fi
strings "$tmpdir/cisco.pkg" | grep -E \
'Cisco Jabber|15\.2|CFBundleIdentifier|com\.cisco|arm64|x86_64' | head -80Repository: fleetdm/fleet
Length of output: 6846
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
for spec in \
'android-studio|https://edgedl.me.gvt1.com/android/studio/install/2026.1.3.8/android-studio-quail3-patch1-mac_arm.dmg|aa77ef6919b22be51566dcd79603c323f7c403fa91dc79dc413eed7f6a05c048' \
'chatgpt|https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip|d96e2fc6d3ecfd7889cfa82827f431a99540028c6a5bf551dc06e569006db600' \
'cisco-jabber|https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg|bb71f8686049930033710f88698712e6aee6ed469516f3a73e48df8cecda4d61'
do
IFS='|' read -r name url expected <<< "$spec"
file="$tmpdir/$name"
curl --fail --location --retry 3 --silent --show-error --output "$file" "$url"
actual="$(sha256sum "$file" | awk '{print $1}')"
printf '%s size=%s expected=%s actual=%s\n' \
"$name" "$(wc -c < "$file")" "$expected" "$actual"
doneRepository: fleetdm/fleet
Length of output: 671
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
chatgpt_url='https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip'
cisco_url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --output "$tmpdir/chatgpt.zip" "$chatgpt_url"
python3 - "$tmpdir/chatgpt.zip" <<'PY'
import plistlib, sys, zipfile
with zipfile.ZipFile(sys.argv[1]) as z:
names = z.namelist()
plist_name = "ChatGPT.app/Contents/Info.plist"
print("ChatGPT Info.plist present:", plist_name in names)
if plist_name in names:
info = plistlib.loads(z.read(plist_name))
for key in ("CFBundleIdentifier", "CFBundleShortVersionString",
"CFBundleVersion", "LSMinimumSystemVersion",
"CFBundlePackageType"):
print(f"{key}={info.get(key)!r}")
PY
curl --fail --location --silent --show-error --output "$tmpdir/cisco.pkg" "$cisco_url"
echo "Cisco package:"
file "$tmpdir/cisco.pkg"
if command -v xar >/dev/null 2>&1; then
xar -tf "$tmpdir/cisco.pkg" | head -40 || true
xar -xf "$tmpdir/cisco.pkg" -C "$tmpdir"
find "$tmpdir" -type f \( -name '*.plist' -o -name '*.bom' \) -print
fi
strings "$tmpdir/cisco.pkg" | grep -E \
'Cisco Jabber|15\.2|CFBundleIdentifier|com\.cisco|arm64|x86_64' | head -80 || trueRepository: fleetdm/fleet
Length of output: 402
🌐 Web query:
Android Studio 2026.1.3.8 quail3 patch1 mac_arm release version
💡 Result:
As of August 10, 2026, there is no released version of Android Studio known as 2026.1.3.8. The latest stable major version in the Quail release cycle is Android Studio Quail 3, which corresponds to version 2026.1.3 [1][2]. Android Studio Quail 3 was officially released to the stable channel on July 30, 2026 [1][2]. Android Studio versions generally follow an animal-based naming convention (e.g., Quail) and a build version scheme (e.g., 2026.1.3) [3]. Patch releases are designated by a "Patch n" suffix (e.g., 2026.1.3 Patch 1) rather than an incremented final digit in the build number [4][5][3]. You can verify the latest stable and preview releases on the official Android Studio download page or the Android Studio release notes website [4][6].
Citations:
- 1: https://androidstudio.googleblog.com/2026/07/
- 2: https://androidstudio.googleblog.com/
- 3: https://developer.android.com/studio/releases/studio-release-names
- 4: https://developer.android.com/studio/releases
- 5: https://developer.android.com/studio/releases/past-releases/as-quail-1-release-notes
- 6: https://developer.android.com/studio/preview
🌐 Web query:
Cisco Jabber Mac 15.2.1 20260722023311 Install_Cisco-Jabber-Mac.pkg bundle identifier
💡 Result:
The bundle identifier for Cisco Jabber for Mac (including version 15.2.1) is com.cisco.Jabber [1][2][3]. This identifier is consistent across versions and is used for software management, deployment, and configuration tasks [2][3]. You can verify this identifier within the application's Info.plist file or by using standard macOS commands (such as mdls or codesign checks) [1][3].
Citations:
- 1: https://doesitarm.com/app/jabber
- 2: https://fleetdm.com/software-catalog/cisco-jabber-darwin
- 3: https://appcatalog.cloud/apps/cisco-jabber
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.803.61601.zip'
curl --fail --location --silent --show-error --output "$tmpdir/chatgpt.zip" "$url"
python3 - "$tmpdir/chatgpt.zip" <<'PY'
import plistlib, sys, zipfile
with zipfile.ZipFile(sys.argv[1]) as archive:
info = plistlib.loads(archive.read("ChatGPT.app/Contents/Info.plist"))
for key in ("CFBundleIdentifier", "CFBundleShortVersionString",
"CFBundleVersion", "CFBundlePackageType"):
print(f"{key}={info.get(key)!r}")
PYRepository: fleetdm/fleet
Length of output: 281
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
echo "===== Cisco identifier references ====="
rg -n -i --glob '*.json' --glob '*.yaml' --glob '*.yml' \
'com\.cisco(\.|\b)|Cisco Jabber|15\.2\.1|20260722023311' \
ee/maintained-apps | head -120
echo "===== available package/archive inspection tools ====="
for tool in xar xz zstd 7z 7zz dmg2img hdiutil file pkgutil; do
if command -v "$tool" >/dev/null 2>&1; then
printf '%s=%s\n' "$tool" "$(command -v "$tool")"
else
printf '%s=unavailable\n' "$tool"
fi
done
echo "===== Android Studio URL and release references ====="
rg -n --glob '*.json' --glob '*.md' --glob '*.txt' \
'2026\.1(\.3(\.8)?)?|quail3|Android Studio' . | head -160Repository: fleetdm/fleet
Length of output: 50369
🌐 Web query:
site:androidstudio.googleblog.com "Android Studio Quail 3" "2026.1.3"
💡 Result:
As of August 10, 2026, there is no official Android Studio version identified as "2026.1.3" associated with the "Quail" release codename [1][2][3]. The "Quail" codename refers to a series of Android Studio releases that have progressed through major versions during the summer of 2026 [3]. As of August 2026, the stable release of Android Studio Quail 3 is available, having been released on July 30, 2026 [2][3]. Additionally, the Android Studio Quail 4 series is currently in the Canary channel, with version Canary 4 released on August 6, 2026 [4][5][3]. It appears the version string "2026.1.3" may be a misinterpretation of these release patterns, as Android Studio typically uses a versioning scheme based on the year, major release, and minor/patch increments (e.g., Quail 3) rather than the specific date-based format mentioned [3].
Citations:
- 1: https://androidstudio.googleblog.com/2026/07/android-studio-quail-2-now-available.html
- 2: https://androidstudio.googleblog.com/2026/07/android-studio-quail-3-now-available.html
- 3: https://androidstudio.googleblog.com/2026/07/
- 4: https://androidstudio.googleblog.com/2026/08/android-studio-quail-4-canary-4-now.html
- 5: https://androidstudio.googleblog.com/
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/cisco.pkg.prefix" "$url"
python3 - "$tmpdir/cisco.pkg.prefix" <<'PY'
import struct, sys, zlib
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
print("prefix_bytes", len(data))
print("magic", data[:4])
if data[:4] != b"xar!":
raise SystemExit("not an XAR package")
header_size, version, toc_compressed, toc_uncompressed = struct.unpack(">HHQQ", data[4:24])
print("header_size", header_size)
print("version", version)
print("toc_compressed", toc_compressed)
print("toc_uncompressed", toc_uncompressed)
toc_start = header_size
toc_end = toc_start + toc_compressed
toc = data[toc_start:toc_end]
for decoder in (
lambda b: zlib.decompress(b),
lambda b: __import__("lzma").decompress(b),
):
try:
decoded = decoder(toc)
print(decoded[:20000].decode("utf-8", "replace"))
break
except Exception:
pass
else:
raise SystemExit("could not decode XAR TOC")
PYRepository: fleetdm/fleet
Length of output: 20256
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/cisco.pkg.prefix" "$url"
python3 - "$tmpdir/cisco.pkg.prefix" <<'PY'
import struct, sys, zlib
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
print("prefix_bytes", len(data))
print("magic", data[:4])
if data[:4] != b"xar!":
raise SystemExit("not an XAR package")
header_size, version, toc_compressed, toc_uncompressed = struct.unpack(">HHQQ", data[4:24])
print("header_size", header_size)
print("version", version)
print("toc_compressed", toc_compressed)
print("toc_uncompressed", toc_uncompressed)
toc = data[header_size:header_size + toc_compressed]
for decoder in (zlib.decompress,):
try:
print(decoder(toc).decode("utf-8", "replace")[:20000])
break
except Exception:
pass
PYRepository: fleetdm/fleet
Length of output: 20256
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/cisco.pkg.prefix" "$url"
python3 - "$tmpdir/cisco.pkg.prefix" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
toc = zlib.decompress(data[header_size:header_size + toc_compressed])
root = ET.fromstring(toc)
for node in root.iter():
text = (node.text or "").strip()
attrs = " ".join(f"{k}={v}" for k, v in node.attrib.items())
if text and (
"cisco" in text.lower()
or "jabber" in text.lower()
or "15.2" in text
or node.tag.endswith(("name", "type", "archived-checksum"))
):
print(node.tag, attrs, repr(text[:300]))
PYRepository: fleetdm/fleet
Length of output: 14258
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/cisco.pkg.prefix" "$url"
python3 - "$tmpdir/cisco.pkg.prefix" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
toc = zlib.decompress(data[header_size:header_size + toc_compressed])
root = ET.fromstring(toc)
for node in root.iter():
text = (node.text or "").strip()
if text and any(value in text.lower() for value in ("cisco", "jabber", "15.2")):
print(node.tag, repr(text[:300]))
PYRepository: fleetdm/fleet
Length of output: 387
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/toc.prefix" "$url"
python3 - "$tmpdir/toc.prefix" "$tmpdir/ranges.tsv" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
root = ET.fromstring(zlib.decompress(data[header_size:header_size + toc_compressed]))
def walk(node, path=()):
name = node.find("name")
current = path + ((name.text,) if name is not None else ())
data_node = node.find("data")
if current[-1:] == ("PackageInfo",) and data_node is not None:
offset = int(data_node.findtext("offset"))
size = int(data_node.findtext("size"))
print("/".join(current), offset, size)
with open(sys.argv[2], "a") as out:
out.write(f"{offset}\t{size}\t{'/'.join(current)}\n")
for child in node.findall("file"):
walk(child, current)
walk(root)
PY
while IFS=$'\t' read -r offset size path; do
end=$((offset + size - 1))
curl --fail --location --silent --show-error --range "$offset-$end" \
--output "$tmpdir/packageinfo.gz" "$url"
echo "===== $path ====="
gzip -dc "$tmpdir/packageinfo.gz" 2>/dev/null || cat "$tmpdir/packageinfo.gz"
done < "$tmpdir/ranges.tsv"Repository: fleetdm/fleet
Length of output: 224
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
: > "$tmpdir/ranges.tsv"
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/toc.prefix" "$url"
python3 - "$tmpdir/toc.prefix" "$tmpdir/ranges.tsv" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
root = ET.fromstring(zlib.decompress(data[header_size:header_size + toc_compressed]))
def walk(node, path=()):
name = node.find("name")
current = path + ((name.text,) if name is not None else ())
data_node = node.find("data")
if current[-1:] == ("PackageInfo",) and data_node is not None:
offset = int(data_node.findtext("offset"))
size = int(data_node.findtext("size"))
print("/".join(current), offset, size)
with open(sys.argv[2], "a") as out:
out.write(f"{offset}\t{size}\t{'/'.join(current)}\n")
for child in node.findall("file"):
walk(child, current)
walk(root)
PY
while IFS=$'\t' read -r offset size path; do
end=$((offset + size - 1))
curl --fail --location --silent --show-error --range "$offset-$end" \
--output "$tmpdir/packageinfo.gz" "$url"
echo "===== $path ====="
gzip -dc "$tmpdir/packageinfo.gz" 2>/dev/null || cat "$tmpdir/packageinfo.gz"
done < "$tmpdir/ranges.tsv"Repository: fleetdm/fleet
Length of output: 151
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
: > "$tmpdir/ranges.tsv"
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/toc.prefix" "$url"
python3 - "$tmpdir/toc.prefix" "$tmpdir/ranges.tsv" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
root = ET.fromstring(zlib.decompress(data[header_size:header_size + toc_compressed]))
for node in root.iter("file"):
name = node.findtext("name", "")
data_node = node.find("data")
if name == "PackageInfo" and data_node is not None:
offset = int(data_node.findtext("offset"))
size = int(data_node.findtext("size"))
print(name, offset, size)
with open(sys.argv[2], "a") as out:
out.write(f"{offset}\t{size}\n")
PY
while IFS=$'\t' read -r offset size; do
end=$((offset + size - 1))
curl --fail --location --silent --show-error --range "$offset-$end" \
--output "$tmpdir/packageinfo.gz" "$url"
gzip -dc "$tmpdir/packageinfo.gz" 2>/dev/null || cat "$tmpdir/packageinfo.gz"
done < "$tmpdir/ranges.tsv"Repository: fleetdm/fleet
Length of output: 4849
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
: > "$tmpdir/ranges.tsv"
url='https://binaries.webex.com/jabberclientmac/20260722023311/Install_Cisco-Jabber-Mac.pkg'
curl --fail --location --silent --show-error --range 0-2097151 \
--output "$tmpdir/toc.prefix" "$url"
python3 - "$tmpdir/toc.prefix" "$tmpdir/ranges.tsv" <<'PY'
import struct, sys, zlib
import xml.etree.ElementTree as ET
from pathlib import Path
data = Path(sys.argv[1]).read_bytes()
header_size, _, toc_compressed, _ = struct.unpack(">HHQQ", data[4:24])
root = ET.fromstring(zlib.decompress(data[header_size:header_size + toc_compressed]))
for node in root.iter("file"):
if node.findtext("name", "") == "PackageInfo":
data_node = node.find("data")
if data_node is not None:
offset = int(data_node.findtext("offset"))
size = int(data_node.findtext("size"))
print("PackageInfo", offset, size)
with open(sys.argv[2], "a") as out:
out.write(f"{offset}\t{size}\n")
PY
while IFS=$'\t' read -r offset size; do
end=$((offset + size - 1))
curl --fail --location --silent --show-error --range "$offset-$end" \
--output "$tmpdir/packageinfo.gz" "$url"
gzip -dc "$tmpdir/packageinfo.gz" 2>/dev/null || cat "$tmpdir/packageinfo.gz"
done < "$tmpdir/ranges.tsv"Repository: fleetdm/fleet
Length of output: 4849
Align the declared bundle identifiers with the installers.
ee/maintained-apps/outputs/chatgpt/darwin.json: The installer declarescom.openai.codex, but the manifest and install script usecom.openai.chat.ee/maintained-apps/outputs/cisco-jabber/darwin.json: Cisco Jabber usescom.cisco.Jabber, but the manifest and install script usecom.cisco.jabber.
Update the queries and script references so Fleet can detect, upgrade, quit, and relaunch the installed applications.
📍 Affects 3 files
ee/maintained-apps/outputs/android-studio/darwin.json#L10-L13(this comment)ee/maintained-apps/outputs/chatgpt/darwin.json#L10-L13ee/maintained-apps/outputs/cisco-jabber/darwin.json#L10-L13
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/android-studio/darwin.json` around lines 10 - 13,
Align the application bundle identifier queries and script references in
ee/maintained-apps/outputs/chatgpt/darwin.json (lines 10-13) with the
installers: use com.openai.codex instead of com.openai.chat, and update the
related manifest/install-script references. In
ee/maintained-apps/outputs/cisco-jabber/darwin.json (lines 10-13), use
com.cisco.Jabber instead of com.cisco.jabber and update the related references.
ee/maintained-apps/outputs/android-studio/darwin.json (lines 10-13) requires no
direct change.
Contributor
|
Closing in favor of #50905. |
This was referenced Aug 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit