Update Fleet-maintained apps#45225
Conversation
Generated automatically with cmd/maintained-apps.
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
WalkthroughThis PR updates version metadata for three maintained applications in Fleet. Each update modifies a separate JSON configuration file to bump the application version and align related fields: the Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ee/maintained-apps/outputs/warp/darwin.json`:
- Around line 9-12: Replace the "no_check" sha256 placeholder for this Warp
release with the actual SHA-256 digest of the artifact referenced by
installer_url
("https://releases.warp.dev/stable/v0.2026.05.06.15.42.stable_04/Warp.dmg");
compute the checksum (e.g., curl -L the URL and run shasum -a 256) and update
the "sha256" field in darwin.json to that value so the integrity check is
enforced while leaving the installer_url, install_script_ref, and
uninstall_script_ref unchanged.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: b9fd762d-5309-4b28-bab6-44a420c84d9f
📒 Files selected for processing (3)
ee/maintained-apps/outputs/tableplus/darwin.jsonee/maintained-apps/outputs/telegram/windows.jsonee/maintained-apps/outputs/warp/darwin.json
| "installer_url": "https://releases.warp.dev/stable/v0.2026.05.06.15.42.stable_04/Warp.dmg", | ||
| "install_script_ref": "4b1c0c37", | ||
| "uninstall_script_ref": "bd923c6f", | ||
| "sha256": "no_check", |
There was a problem hiding this comment.
Pin the Warp installer checksum instead of using no_check.
This release points to a specific immutable artifact URL, but integrity verification is disabled. That weakens supply-chain guarantees for this update.
Suggested change
- "sha256": "no_check",
+ "sha256": "<computed_sha256>",🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@ee/maintained-apps/outputs/warp/darwin.json` around lines 9 - 12, Replace the
"no_check" sha256 placeholder for this Warp release with the actual SHA-256
digest of the artifact referenced by installer_url
("https://releases.warp.dev/stable/v0.2026.05.06.15.42.stable_04/Warp.dmg");
compute the checksum (e.g., curl -L the URL and run shasum -a 256) and update
the "sha256" field in darwin.json to that value so the integrity check is
enforced while leaving the installer_url, install_script_ref, and
uninstall_script_ref unchanged.
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit