Skip to content

Update Fleet-maintained apps#43505

Merged
allenhouchins merged 1 commit intomainfrom
fma-2604132122
Apr 14, 2026
Merged

Update Fleet-maintained apps#43505
allenhouchins merged 1 commit intomainfrom
fma-2604132122

Conversation

@fleet-release
Copy link
Copy Markdown
Contributor

@fleet-release fleet-release commented Apr 13, 2026

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

  • Chores
    • Updated macOS metadata for five maintained applications: Android Studio (2025.3.3.7), Loom (0.343.0), Signal (8.6.1), WhatsApp (26.15.16), and Windows App (11.3.5). Each update includes refreshed installer package references, updated integrity checksums for verification, and revised version comparison thresholds to ensure accurate patch status detection and proper reporting across all supported platforms.

Generated automatically with cmd/maintained-apps.
Copy link
Copy Markdown

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

Tip: disable this comment in your organization's Code Review settings.

@github-actions
Copy link
Copy Markdown
Contributor

Script Diff Results

ee/maintained-apps/outputs/android-studio/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/loom/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/signal/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/whatsapp/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/windows-app/darwin.json

=== Install // b2d854d6 -> a8e4b83b ===

--- /tmp/old.vnnhlG	2026-04-13 21:25:35.103388713 +0000
+++ /tmp/new.VmLoZH	2026-04-13 21:25:35.103388713 +0000
@@ -83,5 +83,5 @@
 
 # install pkg files
 quit_and_track_application 'com.microsoft.rdc.macos'
-sudo installer -pkg "$TMPDIR/Windows_App_11.3.4_installer.pkg" -target /
+sudo installer -pkg "$TMPDIR/Windows_App_11.3.5_installer.pkg" -target /
 relaunch_application 'com.microsoft.rdc.macos'

=== Uninstall Script (no changes) ===

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 13, 2026

Walkthrough

This PR updates JSON metadata files for five macOS applications in the maintained-apps directory. Android Studio was updated from version 2025.3.3.6 to 2025.3.3.7 with a new DMG installer and checksum. Loom was bumped from 0.342.1 to 0.343.0 with corresponding URL and checksum updates. Signal Desktop was updated from 8.6.0 to 8.6.1. WhatsApp was bumped from 26.15.12 to 26.15.16. Windows App was updated from 11.3.4 to 11.3.5 with installer script reference changes. All modifications include version field updates, version comparison query adjustments, new installer URLs, and updated SHA256 checksums.

Possibly related PRs

  • PR #43380: Modifies Fleet's maintained-app JSON metadata including the same darwin.json entries for Signal Desktop and WhatsApp applications.
  • PR #43404: Updates entries in the ee/maintained-apps/outputs directory with version bumps and installer URL/checksum changes for WhatsApp and Windows App files.
🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Description check ❓ Inconclusive The description is too minimal and vague. It only states 'Automated ingestion of latest Fleet-maintained app data' without specifying which apps were updated, what versions were changed, or any relevant issue number. Enhance the description to specify the apps updated (Android Studio, Loom, Signal, WhatsApp, Windows App), their version changes, and add a 'Related issue:' line if applicable per the template.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: updating metadata for multiple Fleet-maintained apps (Android Studio, Loom, Signal, WhatsApp, Windows App) with version bumps and corresponding installer URLs.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fma-2604132122

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@ee/maintained-apps/outputs/signal/darwin.json`:
- Around line 9-12: The darwin.json entry references a non-existent Signal
Desktop version (8.6.1); update the installer_url, sha256, install_script_ref,
and uninstall_script_ref to point to a valid released version (e.g., v8.5.0) and
ensure the URL uses the correct file for that release, and replace the checksum
and script refs with the values that match that release; verify the new sha256
matches the downloaded artifact and that install_script_ref and
uninstall_script_ref are the correct commit hashes for the chosen version.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 21035fc2-e54a-4435-9739-033dd0a9bb9f

📥 Commits

Reviewing files that changed from the base of the PR and between 2245359 and d117ba7.

📒 Files selected for processing (5)
  • ee/maintained-apps/outputs/android-studio/darwin.json
  • ee/maintained-apps/outputs/loom/darwin.json
  • ee/maintained-apps/outputs/signal/darwin.json
  • ee/maintained-apps/outputs/whatsapp/darwin.json
  • ee/maintained-apps/outputs/windows-app/darwin.json

Comment on lines +9 to +12
"installer_url": "https://updates.signal.org/desktop/signal-desktop-mac-arm64-8.6.1.zip",
"install_script_ref": "5ab712e8",
"uninstall_script_ref": "3902de16",
"sha256": "2d18716065421fda3628871a88ca21b3a49470a85d8051b1ef9687a3eab9b78c",
"sha256": "decf8b21176f33d9fe4542044c676a3a587ab6845e14fdc29cab83bb0573e844",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Verify Signal Desktop 8.6.1 installer URL and SHA256 checksum

INSTALLER_URL="https://updates.signal.org/desktop/signal-desktop-mac-arm64-8.6.1.zip"
EXPECTED_SHA256="decf8b21176f33d9fe4542044c676a3a587ab6845e14fdc29cab83bb0573e844"

echo "Checking URL accessibility..."
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" -L "$INSTALLER_URL")
if [ "$HTTP_STATUS" = "200" ]; then
  echo "✓ URL is accessible (HTTP $HTTP_STATUS)"
else
  echo "✗ URL returned HTTP $HTTP_STATUS"
  exit 1
fi

echo "Downloading installer to verify checksum..."
TEMP_FILE=$(mktemp)
curl -sL "$INSTALLER_URL" -o "$TEMP_FILE"

echo "Computing SHA256..."
if command -v sha256sum >/dev/null 2>&1; then
  ACTUAL_SHA256=$(sha256sum "$TEMP_FILE" | awk '{print $1}')
elif command -v shasum >/dev/null 2>&1; then
  ACTUAL_SHA256=$(shasum -a 256 "$TEMP_FILE" | awk '{print $1}')
else
  echo "✗ No SHA256 utility found"
  rm "$TEMP_FILE"
  exit 1
fi

rm "$TEMP_FILE"

echo "Expected: $EXPECTED_SHA256"
echo "Actual:   $ACTUAL_SHA256"

if [ "$ACTUAL_SHA256" = "$EXPECTED_SHA256" ]; then
  echo "✓ SHA256 checksum matches"
else
  echo "✗ SHA256 checksum mismatch"
  exit 1
fi

Repository: fleetdm/fleet

Length of output: 1755


🌐 Web query:

Signal Desktop 8.6.1 release ARM64 macOS

💡 Result:

No evidence of a Signal Desktop 8.6.1 release for ARM64 macOS (Apple Silicon). The official GitHub releases page lists up to v8.5.0 (April 1, 2026) and beta versions like v8.6.0-beta.1. A third-party site (GitClear) mentions a v8.6.0 release on April 8, 2026, but no 8.6.1. Signal Desktop supports macOS ARM64 natively via official downloads at signal.org/download/macos/, which provide universal binaries compatible with Apple Silicon (M1/M2/M3/M4). Download the latest stable version from there and link it to your mobile Signal app. Requires macOS 12 (Monterey) or later.

Citations:


Update Signal Desktop version: 8.6.1 does not exist.

The specified version 8.6.1 is not a released version of Signal Desktop. According to the official GitHub releases, the latest stable version is v8.5.0 (released April 1, 2026), with only v8.6.0-beta.1 available as a beta. Update the version to a valid released version.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@ee/maintained-apps/outputs/signal/darwin.json` around lines 9 - 12, The
darwin.json entry references a non-existent Signal Desktop version (8.6.1);
update the installer_url, sha256, install_script_ref, and uninstall_script_ref
to point to a valid released version (e.g., v8.5.0) and ensure the URL uses the
correct file for that release, and replace the checksum and script refs with the
values that match that release; verify the new sha256 matches the downloaded
artifact and that install_script_ref and uninstall_script_ref are the correct
commit hashes for the chosen version.

@allenhouchins allenhouchins merged commit ef897e2 into main Apr 14, 2026
8 checks passed
@allenhouchins allenhouchins deleted the fma-2604132122 branch April 14, 2026 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants