Bump fleet-desktop to 1.3.2 - #48028
Conversation
Update Fleet Desktop from 1.3.1 to 1.3.2 across Homebrew cask, API metadata, and darwin output. Changes include version and sha256 updates, updated download URLs and pkg filenames, updated ruby_source checksum, and a new installer script ref that installs fleet_desktop-v1.3.2.pkg.
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
Script Diff Resultsee/maintained-apps/outputs/fleet-desktop/darwin.json=== Install // 73908487 -> 0c5ce475 ===
--- /tmp/old.x3N7Y2 2026-06-22 16:46:08.611780094 +0000
+++ /tmp/new.ZWop4K 2026-06-22 16:46:08.611780094 +0000
@@ -96,5 +96,5 @@
# install pkg files
quit_and_track_application 'com.fleetdm.fleet-desktop'
-sudo installer -pkg "$TMPDIR/fleet_desktop-v1.3.1.pkg" -target /
+sudo installer -pkg "$TMPDIR/fleet_desktop-v1.3.2.pkg" -target /
relaunch_application 'com.fleetdm.fleet-desktop'
=== Uninstall Script (no changes) === |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (3)
WalkthroughThe Fleet Desktop maintained-app definition is updated from v1.3.1 to v1.3.2 across three files. The Homebrew cask ( 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
Updates the Fleet Desktop maintained-app metadata to ship v1.3.2 (from v1.3.1) across the Homebrew cask inputs and the generated Darwin output used by Fleet’s maintained apps pipeline.
Changes:
- Bumped Fleet Desktop version to 1.3.2 and updated corresponding sha256 values.
- Updated download URLs/pkg filename references to
fleet_desktop-v1.3.2.pkg. - Updated the generated Homebrew API metadata checksum and the install script ref in the Darwin output.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| ee/maintained-apps/outputs/fleet-desktop/darwin.json | Bumps Fleet Desktop to 1.3.2, updates patched query version, installer URL, sha256, and install script ref/pkg filename. |
| ee/maintained-apps/inputs/homebrew/custom-tap/Casks/fleet-desktop.rb | Updates the Homebrew cask version and sha256 to 1.3.2. |
| ee/maintained-apps/inputs/homebrew/custom-tap/api/fleet-desktop.json | Updates Homebrew API metadata (url/version/sha/pkg filename) and ruby_source_checksum for the updated cask. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…m Rooms 7.1.0.13088 (#49563) **Related issue:** NA — routine custom-tap cask maintenance ## What Bump three custom-tap casks to their latest upstream releases and regenerate the api JSONs (`regenerate.sh`) and FMA output manifests (`go run cmd/maintained-apps/main.go --slug=<token>/darwin`): | Cask | Old | New | |------|-----|-----| | Druva inSync | 7.6.1 (r110931) | 8.1.3 (r110967) | | Fleet Desktop | 1.3.2 | 1.3.4 | | Zoom Rooms | 7.0.5.12655 | 7.1.0.13088 | XCreds 5.9 (9148) is still the latest upstream release and is unchanged. ## Why / reviewer notes - **Druva:** the 8.0.0 phased rollout never reached the public CDN (its `.dmg` 404'd since March); 8.1.3 is the first 8.x build served from `downloads.druva.com`. Druva 8.x officially supports macOS 14 (Sonoma)+ only, so `depends_on` moves from `:big_sur` to `:sonoma` (informational — the ingester doesn't read it). - **`api/xcreds.json` +2 lines with no cask change:** `regenerate.sh` rebuilds all api JSONs, and current Homebrew now emits `pinned`/`pinned_version` fields. Expected drift; anyone running the script gets the same output. - **Verification done against the downloaded installers:** - sha256 values computed locally from the actual downloads; the Druva download's SHA1 matches the checksum published on Druva's download page. - Installer internals inspected: the Druva dmg still contains `Install inSync.pkg`, and pkg receipt IDs are unchanged across all three (`com.druva.inSync.pkg` @ 8.1.3, `com.fleetdm.fleet-desktop` @ 1.3.4, `us.zoom.pkg.zp` @ 7.1.0.13088), so existing install/uninstall stanzas remain valid. - No `changes/` file, consistent with prior cask-bump PRs (#45912, #48028) and the automated FMA-ingestion PRs. # Checklist for submitter - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. ## Testing - [x] `go test ./ee/maintained-apps/...` passes - [ ] QA'd all new/changed functionality manually (installer metadata, URLs, and checksums verified as above; not yet deployed through a Fleet server)
**Related issue:** NA — routine custom-tap cask maintenance # Checklist for submitter - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] Timeouts are implemented and retries are limited to avoid infinite loops ## Testing - [x] `go test ./ee/maintained-apps/...` passes - [ ] QA'd all new/changed functionality manually (installer metadata, URL, and checksum verified as below; not yet deployed through a Fleet server) No `changes/` file, consistent with prior custom-tap cask-bump PRs (#49563, #48028, #45912). ## Version bump details | | Old | New | |---|---|---| | Version | 7.1.0.13088 | 7.1.5.13403 | - **Upstream source:** `https://zoom.us/client/latest/ZoomRooms.pkg` redirects to `https://cdn.zoom.us/prod/7.1.5.13403/ZoomRooms.pkg` (Zoom does not expose a parseable Zoom Rooms version feed, per the cask's `livecheck` block, so this is the standard manual-bump discovery method). - **New download URL:** `https://cdn.zoom.us/prod/7.1.5.13403/ZoomRooms.pkg` - **sha256:** `3b303bc150a3a5d639f09439abf84f2117784a2124ba660f7c73917ba5ef9ab6` - Downloaded installer verified: 587 MB, `xar archive` (matches expected `.pkg` format). **Reviewer note:** `api/zoom-rooms.json` was updated mechanically because `regenerate.sh` requires macOS. Before merging, run `ee/maintained-apps/inputs/homebrew/custom-tap/regenerate.sh` locally and confirm `git diff` is clean for `api/zoom-rooms.json`. --- _Generated by [Claude Code](https://claude.ai/code/session_01U8YEGYFy9Uc88wvyg96ySE)_ <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Updates** * Updated Zoom Rooms for macOS to version 7.1.5.13403. * Refreshed download links and package verification checksums. * Installation and uninstallation behavior remains unchanged. <!-- end of auto-generated comment: release notes by coderabbit.ai --> Co-authored-by: Claude <noreply@anthropic.com>
Update Fleet Desktop from 1.3.1 to 1.3.2 across Homebrew cask, API metadata, and darwin output. Changes include version and sha256 updates, updated download URLs and pkg filenames, updated ruby_source checksum, and a new installer script ref that installs fleet_desktop-v1.3.2.pkg.
Summary by CodeRabbit