Update custom-tap casks: Druva inSync 8.1.3, Fleet Desktop 1.3.4, Zoom Rooms 7.1.0.13088 - #49563
Conversation
…m Rooms 7.1.0.13088 Bump three custom-tap casks to their latest upstream releases and regenerate the api JSONs and FMA output manifests: - Druva inSync 7.6.1 (r110931) -> 8.1.3 (r110967). The 8.0.0 phased rollout never reached the public CDN; 8.1.3 is the first 8.x build served from downloads.druva.com. Druva 8.x supports macOS 14+ only, so depends_on moves from big_sur to sonoma. - Fleet Desktop 1.3.2 -> 1.3.4 - Zoom Rooms 7.0.5.12655 -> 7.1.0.13088 XCreds 5.9 (9148) is still the latest upstream release and is unchanged; its api JSON picks up the pinned/pinned_version fields now emitted by current Homebrew during regeneration. Verified against the downloaded installers: sha256 computed locally, Druva SHA1 matches the checksum published on the download page, pkg receipt IDs and dmg contents unchanged.
Script Diff Resultsee/maintained-apps/outputs/druva-insync/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/fleet-desktop/darwin.json=== Install // 0c5ce475 -> 32288f52 ===
--- /tmp/old.GNifF1 2026-07-20 14:34:44.643778873 +0000
+++ /tmp/new.r5U21E 2026-07-20 14:34:44.643778873 +0000
@@ -96,5 +96,5 @@
# install pkg files
quit_and_track_application 'com.fleetdm.fleet-desktop'
-sudo installer -pkg "$TMPDIR/fleet_desktop-v1.3.2.pkg" -target /
+sudo installer -pkg "$TMPDIR/fleet_desktop-v1.3.4.pkg" -target /
relaunch_application 'com.fleetdm.fleet-desktop'
=== Uninstall Script (no changes) ===ee/maintained-apps/outputs/zoom-rooms/darwin.json=== Install Script (no changes) ===
=== Uninstall Script (no changes) === |
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (10)
WalkthroughUpdated Homebrew casks and API manifests for Druva inSync, Fleet Desktop, and Zoom Rooms to newer releases with matching URLs, package names, versions, and checksums. Druva’s minimum macOS version was raised to Sonoma. Added pinning fields to the xcreds manifest. Updated macOS output records with new version checks, installer metadata, and Fleet Desktop’s install script reference. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 Checkov (3.3.8)ee/maintained-apps/inputs/homebrew/custom-tap/api/druva-insync.jsonTraceback (most recent call last): ee/maintained-apps/inputs/homebrew/custom-tap/api/fleet-desktop.jsonTraceback (most recent call last): ee/maintained-apps/inputs/homebrew/custom-tap/api/xcreds.jsonTraceback (most recent call last):
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
Routine Homebrew custom-tap maintenance updating three maintained-app casks (Druva inSync, Fleet Desktop, Zoom Rooms) to their latest upstream versions, with regenerated Homebrew API JSON and Fleet Maintained Apps (FMA) darwin output manifests to keep ingestion metadata in sync.
Changes:
- Bumped cask versions/URLs/SHA256 for Druva inSync (8.1.3 r110967), Fleet Desktop (1.3.4), and Zoom Rooms (7.1.0.13088).
- Regenerated custom-tap
api/*.jsonmetadata (including newpinned/pinned_versionfields where emitted by current Homebrew). - Regenerated FMA darwin output manifests (
ee/maintained-apps/outputs/*/darwin.json) to match the new installer metadata.
Reviewed changes
Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| ee/maintained-apps/outputs/zoom-rooms/darwin.json | Updates Zoom Rooms FMA manifest version, URL, checksum, and patched query threshold. |
| ee/maintained-apps/outputs/fleet-desktop/darwin.json | Updates Fleet Desktop FMA manifest version, URL, checksum, patched query threshold, and install script ref (pkg filename update). |
| ee/maintained-apps/outputs/druva-insync/darwin.json | Updates Druva inSync FMA manifest version, URL (r110967), checksum, and patched query threshold. |
| ee/maintained-apps/inputs/homebrew/custom-tap/Casks/zoom-rooms.rb | Bumps Zoom Rooms cask version and sha256. |
| ee/maintained-apps/inputs/homebrew/custom-tap/Casks/fleet-desktop.rb | Bumps Fleet Desktop cask version and sha256. |
| ee/maintained-apps/inputs/homebrew/custom-tap/Casks/druva-insync.rb | Bumps Druva inSync cask version/build + sha256 and updates macOS minimum to Sonoma. |
| ee/maintained-apps/inputs/homebrew/custom-tap/api/zoom-rooms.json | Regenerated Homebrew API JSON for Zoom Rooms (url/version/sha256/checksum). |
| ee/maintained-apps/inputs/homebrew/custom-tap/api/xcreds.json | Regenerated Homebrew API JSON drift (adds pinned/pinned_version fields). |
| ee/maintained-apps/inputs/homebrew/custom-tap/api/fleet-desktop.json | Regenerated Homebrew API JSON for Fleet Desktop (url/version/sha256/pkg filename/checksum). |
| ee/maintained-apps/inputs/homebrew/custom-tap/api/druva-insync.json | Regenerated Homebrew API JSON for Druva inSync (url/version/sha256, adds pinned fields, macOS min 14). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
**Related issue:** NA — routine custom-tap cask maintenance # Checklist for submitter - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. - [x] Timeouts are implemented and retries are limited to avoid infinite loops ## Testing - [x] `go test ./ee/maintained-apps/...` passes - [ ] QA'd all new/changed functionality manually (installer metadata, URL, and checksum verified as below; not yet deployed through a Fleet server) No `changes/` file, consistent with prior custom-tap cask-bump PRs (#49563, #48028, #45912). ## Version bump details | | Old | New | |---|---|---| | Version | 7.1.0.13088 | 7.1.5.13403 | - **Upstream source:** `https://zoom.us/client/latest/ZoomRooms.pkg` redirects to `https://cdn.zoom.us/prod/7.1.5.13403/ZoomRooms.pkg` (Zoom does not expose a parseable Zoom Rooms version feed, per the cask's `livecheck` block, so this is the standard manual-bump discovery method). - **New download URL:** `https://cdn.zoom.us/prod/7.1.5.13403/ZoomRooms.pkg` - **sha256:** `3b303bc150a3a5d639f09439abf84f2117784a2124ba660f7c73917ba5ef9ab6` - Downloaded installer verified: 587 MB, `xar archive` (matches expected `.pkg` format). **Reviewer note:** `api/zoom-rooms.json` was updated mechanically because `regenerate.sh` requires macOS. Before merging, run `ee/maintained-apps/inputs/homebrew/custom-tap/regenerate.sh` locally and confirm `git diff` is clean for `api/zoom-rooms.json`. --- _Generated by [Claude Code](https://claude.ai/code/session_01U8YEGYFy9Uc88wvyg96ySE)_ <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Updates** * Updated Zoom Rooms for macOS to version 7.1.5.13403. * Refreshed download links and package verification checksums. * Installation and uninstallation behavior remains unchanged. <!-- end of auto-generated comment: release notes by coderabbit.ai --> Co-authored-by: Claude <noreply@anthropic.com>
Related issue: NA — routine custom-tap cask maintenance
What
Bump three custom-tap casks to their latest upstream releases and regenerate the api JSONs (
regenerate.sh) and FMA output manifests (go run cmd/maintained-apps/main.go --slug=<token>/darwin):XCreds 5.9 (9148) is still the latest upstream release and is unchanged.
Why / reviewer notes
.dmg404'd since March); 8.1.3 is the first 8.x build served fromdownloads.druva.com. Druva 8.x officially supports macOS 14 (Sonoma)+ only, sodepends_onmoves from:big_surto:sonoma(informational — the ingester doesn't read it).api/xcreds.json+2 lines with no cask change:regenerate.shrebuilds all api JSONs, and current Homebrew now emitspinned/pinned_versionfields. Expected drift; anyone running the script gets the same output.Install inSync.pkg, and pkg receipt IDs are unchanged across all three (com.druva.inSync.pkg@ 8.1.3,com.fleetdm.fleet-desktop@ 1.3.4,us.zoom.pkg.zp@ 7.1.0.13088), so existing install/uninstall stanzas remain valid.changes/file, consistent with prior cask-bump PRs (Update fleet-desktop and zoom-rooms casks #45912, Bump fleet-desktop to 1.3.2 #48028) and the automated FMA-ingestion PRs.Checklist for submitter
SELECT *is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters.Testing
go test ./ee/maintained-apps/...passesSummary by CodeRabbit
New Features
Compatibility