diff --git a/ee/maintained-apps/outputs/antigravity/darwin.json b/ee/maintained-apps/outputs/antigravity/darwin.json
index 26b9780039c..88d2c42775d 100644
--- a/ee/maintained-apps/outputs/antigravity/darwin.json
+++ b/ee/maintained-apps/outputs/antigravity/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2.3.1",
+      "version": "2.4.2",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.antigravity';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.antigravity' AND version_compare(bundle_short_version, '2.3.1') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.google.antigravity' AND version_compare(bundle_short_version, '2.4.2') < 0);"
       },
-      "installer_url": "https://storage.googleapis.com/antigravity-public/antigravity-hub/2.3.1-5358163105546240/darwin-arm/Antigravity.dmg",
+      "installer_url": "https://storage.googleapis.com/antigravity-public/antigravity-hub/2.4.2-6711062033203200/darwin-arm/Antigravity.dmg",
       "install_script_ref": "ec27c305",
       "uninstall_script_ref": "8838465b",
-      "sha256": "841714173d20026d1865ea3efbe04406dfeccdda44b3eb1f2c465216bc0786b8",
+      "sha256": "3a4d1ebf441797605a242a227bb977d7a82ab058195873b45ae0d98fa9da500c",
       "default_categories": [
         "Developer tools"
       ]
diff --git a/ee/maintained-apps/outputs/apidog/darwin.json b/ee/maintained-apps/outputs/apidog/darwin.json
index 64545c3a1d2..0d9843520f4 100644
--- a/ee/maintained-apps/outputs/apidog/darwin.json
+++ b/ee/maintained-apps/outputs/apidog/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2.8.39",
+      "version": "2.8.40",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.apidog.app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.apidog.app' AND version_compare(bundle_short_version, '2.8.39') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.apidog.app' AND version_compare(bundle_short_version, '2.8.40') < 0);"
       },
-      "installer_url": "https://file-assets.apidog.com/download/2.8.39/legacy-Apidog-macOS-arm64-2.8.39.dmg",
+      "installer_url": "https://file-assets.apidog.com/download/2.8.40/legacy-Apidog-macOS-arm64-2.8.40.dmg",
       "install_script_ref": "164bc8ef",
       "uninstall_script_ref": "b51190cf",
-      "sha256": "82c0b3a5328c60ddd4e4f0767a32035553b02e62c60df7a77d2df18ed8cc8da9",
+      "sha256": "74edd9a11689ee1c44859644803e4a8baaaa8528da884ab893ab0875d7b9defa",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/arc/darwin.json b/ee/maintained-apps/outputs/arc/darwin.json
index 2bdeacff170..9f65f499f65 100644
--- a/ee/maintained-apps/outputs/arc/darwin.json
+++ b/ee/maintained-apps/outputs/arc/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "1.157.0",
+      "version": "1.157.1",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'company.thebrowser.Browser';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'company.thebrowser.Browser' AND version_compare(bundle_short_version, '1.157.0') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'company.thebrowser.Browser' AND version_compare(bundle_short_version, '1.157.1') < 0);"
       },
-      "installer_url": "https://releases.arc.net/release/Arc-1.157.0-83934.zip",
+      "installer_url": "https://releases.arc.net/release/Arc-1.157.1-84133.zip",
       "install_script_ref": "bb0dd542",
       "uninstall_script_ref": "a19b04fa",
-      "sha256": "7a463bbae6326536c29397ce2356ef7cdc697fb1e150538af3ba9f73e33692e3",
+      "sha256": "5ded8afd261da0dc2422a0a6b92245a16afeba2cac3409d8ab70c1a9d527b237",
       "default_categories": [
         "Browsers"
       ]
diff --git a/ee/maintained-apps/outputs/capcut/darwin.json b/ee/maintained-apps/outputs/capcut/darwin.json
index 85e3f567f53..e5e3c04e2ad 100644
--- a/ee/maintained-apps/outputs/capcut/darwin.json
+++ b/ee/maintained-apps/outputs/capcut/darwin.json
@@ -1,22 +1,22 @@
 {
   "versions": [
     {
-      "version": "3.3.0.1159",
+      "version": "9.1.0.4369",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.lemon.lvoverseas';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.lemon.lvoverseas' AND version_compare(bundle_short_version, '3.3.0.1159') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.lemon.lvoverseas' AND version_compare(bundle_short_version, '9.1.0.4369') < 0);"
       },
-      "installer_url": "https://lf16-capcut.faceulv.com/obj/capcutpc-packages-us/packages/CapCut_3_3_0_1159_capcutpc_0_creatortool.dmg",
+      "installer_url": "https://sf16-web-tos-buz.capcutstatic.com/obj/capcut-web-buz-sg/packages/CapCut_9_1_0_4369_capcutpc_0_creatortool.dmg",
       "install_script_ref": "afecaee6",
-      "uninstall_script_ref": "a9b4c8a1",
-      "sha256": "26c253719a61eae679a2923121a83d0a39b98d920a5c57f3e00d66224986c867",
+      "uninstall_script_ref": "30a898df",
+      "sha256": "95a8b1cc9ecbcbe368b3e788c2acfb911a8969eb15936e9dc6cdd9d7eb720148",
       "default_categories": [
         "Productivity"
       ]
     }
   ],
   "refs": {
-    "a9b4c8a1": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\ntrash() {\n  local logged_in_user=\"$1\"\n  local target_file=\"$2\"\n  local timestamp=\"$(date +%Y-%m-%d-%s)\"\n  local rand=\"$(jot -r 1 0 99999)\"\n\n  # replace ~ with /Users/$logged_in_user\n  if [[ \"$target_file\" == ~* ]]; then\n    target_file=\"/Users/$logged_in_user${target_file:1}\"\n  fi\n\n  local trash=\"/Users/$logged_in_user/.Trash\"\n\n  # If the target contains glob characters, expand it and move each match.\n  if [[ \"$target_file\" == *[*?[]* ]]; then\n    local file file_name\n    local matched=false\n    local i=0\n    # compgen -G expands the (quoted) pattern itself, so paths containing\n    # spaces glob correctly; reading line by line keeps each match intact.\n    while IFS= read -r file; do\n      [[ -n \"$file\" ]] || continue\n      [[ -e \"$file\" || -L \"$file\" ]] || continue\n      matched=true\n      i=$((i + 1))\n      file_name=\"$(basename \"$file\")\"\n      echo \"removing $file.\"\n      # The per-match counter keeps matches that share a basename from\n      # overwriting each other in the trash.\n      mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n    done < <(compgen -G \"$target_file\" 2>/dev/null)\n    if [[ \"$matched\" == false ]]; then\n      echo \"$target_file doesn't exist.\"\n    fi\n    return\n  fi\n\n  local file_name=\"$(basename \"${target_file}\")\"\n\n  if [[ -e \"$target_file\" ]]; then\n    echo \"removing $target_file.\"\n    mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n  else\n    echo \"$target_file doesn't exist.\"\n  fi\n}\n\nsudo rm -rf \"$APPDIR/CapCut.app\"\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/com.lemon.lvoverseas'\ntrash $LOGGED_IN_USER '~/Library/Containers/com.lemon.lvoverseas'\ntrash $LOGGED_IN_USER '~/Library/Group Containers/22MMUN2RN5.lv'\ntrash $LOGGED_IN_USER '~/Library/Group Containers/22MMUN2RN5.ve'\n",
+    "30a898df": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\ntrash() {\n  local logged_in_user=\"$1\"\n  local target_file=\"$2\"\n  local timestamp=\"$(date +%Y-%m-%d-%s)\"\n  local rand=\"$(jot -r 1 0 99999)\"\n\n  # replace ~ with /Users/$logged_in_user\n  if [[ \"$target_file\" == ~* ]]; then\n    target_file=\"/Users/$logged_in_user${target_file:1}\"\n  fi\n\n  local trash=\"/Users/$logged_in_user/.Trash\"\n\n  # If the target contains glob characters, expand it and move each match.\n  if [[ \"$target_file\" == *[*?[]* ]]; then\n    local file file_name\n    local matched=false\n    local i=0\n    # compgen -G expands the (quoted) pattern itself, so paths containing\n    # spaces glob correctly; reading line by line keeps each match intact.\n    while IFS= read -r file; do\n      [[ -n \"$file\" ]] || continue\n      [[ -e \"$file\" || -L \"$file\" ]] || continue\n      matched=true\n      i=$((i + 1))\n      file_name=\"$(basename \"$file\")\"\n      echo \"removing $file.\"\n      # The per-match counter keeps matches that share a basename from\n      # overwriting each other in the trash.\n      mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n    done < <(compgen -G \"$target_file\" 2>/dev/null)\n    if [[ \"$matched\" == false ]]; then\n      echo \"$target_file doesn't exist.\"\n    fi\n    return\n  fi\n\n  local file_name=\"$(basename \"${target_file}\")\"\n\n  if [[ -e \"$target_file\" ]]; then\n    echo \"removing $target_file.\"\n    mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n  else\n    echo \"$target_file doesn't exist.\"\n  fi\n}\n\nsudo rm -rf \"$APPDIR/CapCut.app\"\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/com.lemon.lvoverseas'\ntrash $LOGGED_IN_USER '~/Library/Containers/com.lemon.lvoverseas'\ntrash $LOGGED_IN_USER '~/Library/Group Containers/22MMUN2RN5.lv'\n",
     "afecaee6": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  # App was running, mark it for relaunch\n  eval \"export $var_name=1\"\n  echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\nrelaunch_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local was_running\n\n  # Check if the app was running before installation\n  eval \"was_running=\\$$var_name\"\n  if [[ \"$was_running\" != \"1\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Relaunching application '$bundle_id'...\"\n\n  # Launch the app in the logged-in user's GUI session. Apps launched by root\n  # won't register with the user's Dock/GUI, so run 'open' as the console user.\n  # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n  # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n  # LSOpenURLsWithRole() failures even when 'open' exits 0.\n  local open_status=0\n  if [[ $EUID -eq 0 ]]; then\n    local console_uid\n    console_uid=$(id -u \"$console_user\")\n    /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  else\n    open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  fi\n\n  if [[ $open_status -eq 0 ]]; then\n    echo \"Application '$bundle_id' relaunched successfully.\"\n  else\n    echo \"Failed to relaunch application '$bundle_id'.\"\n  fi\n}\n\n\n# extract contents\nMOUNT_POINT=$(mktemp -d /tmp/dmg_mount_XXXXXX)\nyes | hdiutil attach -plist -nobrowse -readonly -mountpoint \"$MOUNT_POINT\" \"$INSTALLER_PATH\" || exit 1\nsudo cp -R \"$MOUNT_POINT\"/* \"$TMPDIR\"\nhdiutil detach \"$MOUNT_POINT\" || true\n# copy to the applications folder\nquit_and_track_application 'com.lemon.lvoverseas'\nif [ -d \"$APPDIR/CapCut.app\" ]; then\n\tsudo mv \"$APPDIR/CapCut.app\" \"$TMPDIR/CapCut.app.bkp\"\nfi\nsudo cp -R \"$TMPDIR/CapCut.app\" \"$APPDIR\"\nrelaunch_application 'com.lemon.lvoverseas'\n"
   }
 }
diff --git a/ee/maintained-apps/outputs/clickup/darwin.json b/ee/maintained-apps/outputs/clickup/darwin.json
index 0a6749b3fe5..0e3b3c4a336 100644
--- a/ee/maintained-apps/outputs/clickup/darwin.json
+++ b/ee/maintained-apps/outputs/clickup/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "3.5.230",
+      "version": "3.5.262",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.clickup.desktop-app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.clickup.desktop-app' AND version_compare(bundle_short_version, '3.5.230') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.clickup.desktop-app' AND version_compare(bundle_short_version, '3.5.262') < 0);"
       },
-      "installer_url": "https://download.todesktop.com/221003ra4tebclw/ClickUp%203.5.230%20-%20Build%20260616wecrh5vza-arm64.dmg",
+      "installer_url": "https://download.todesktop.com/221003ra4tebclw/ClickUp%203.5.262%20-%20Build%20260717dcrpwg7m0-arm64.dmg",
       "install_script_ref": "e936dc60",
       "uninstall_script_ref": "f272dcb6",
-      "sha256": "283531cae233999a80735db81844bf4005aa047ab59be40c92685663caf0081e",
+      "sha256": "76168f07eeddcab9f0ab967e1c2be6f0a6a0450625ca1369835f6ceb8d4e2a01",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/clickup/windows.json b/ee/maintained-apps/outputs/clickup/windows.json
index e63d353b2d3..d5ad459e68c 100644
--- a/ee/maintained-apps/outputs/clickup/windows.json
+++ b/ee/maintained-apps/outputs/clickup/windows.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "3.5.230",
+      "version": "3.5.262",
       "queries": {
         "exists": "SELECT 1 FROM programs WHERE name = 'ClickUp' AND publisher = 'ClickUp';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'ClickUp' AND publisher = 'ClickUp' AND version_compare(version, '3.5.230') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'ClickUp' AND publisher = 'ClickUp' AND version_compare(version, '3.5.262') < 0);"
       },
-      "installer_url": "https://download.todesktop.com/221003ra4tebclw/ClickUp-3.5.230-build-260616wecrh5vza-x64.msi",
+      "installer_url": "https://download.todesktop.com/221003ra4tebclw/ClickUp-3.5.262-build-260717dcrpwg7m0-x64.msi",
       "install_script_ref": "8959087b",
       "uninstall_script_ref": "38f3af4a",
-      "sha256": "ff83290f29366d73a4098c5400f6a8289da9428e6e9f2df9a71e3d62dfae521b",
+      "sha256": "f7723ee1bb32f617cd7b3f4559b982c691316413381e6d1dabd29f249fe84272",
       "default_categories": [
         "Productivity"
       ],
diff --git a/ee/maintained-apps/outputs/dot/darwin.json b/ee/maintained-apps/outputs/dot/darwin.json
index f1b60fb35cf..0c7a2ba6948 100644
--- a/ee/maintained-apps/outputs/dot/darwin.json
+++ b/ee/maintained-apps/outputs/dot/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2.3.2",
+      "version": "2.3.3",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.dot.app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.dot.app' AND version_compare(bundle_short_version, '2.3.2') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.dot.app' AND version_compare(bundle_short_version, '2.3.3') < 0);"
       },
-      "installer_url": "https://github.com/prateekkeshari/dot-releases/releases/download/v2.3.2/Dot-2.3.2.dmg",
+      "installer_url": "https://github.com/prateekkeshari/dot-releases/releases/download/v2.3.3/Dot-2.3.3.dmg",
       "install_script_ref": "2fd2fbc1",
       "uninstall_script_ref": "3e5c7f37",
-      "sha256": "c20cb6377d2fc2897f05a2ed8af2f72f26808bb1a934fb65c119ddb631f2d267",
+      "sha256": "4ce5fd781b447c33982548aac2a936f40de405b495204f49e605e335211ed475",
       "default_categories": [
         "Communication"
       ]
diff --git a/ee/maintained-apps/outputs/downie/darwin.json b/ee/maintained-apps/outputs/downie/darwin.json
index 56e3973262f..ac065101bc8 100644
--- a/ee/maintained-apps/outputs/downie/darwin.json
+++ b/ee/maintained-apps/outputs/downie/darwin.json
@@ -6,10 +6,10 @@
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.charliemonroe.Downie-4';",
         "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.charliemonroe.Downie-4' AND version_compare(bundle_short_version, '4.12.11') < 0);"
       },
-      "installer_url": "https://software.charliemonroe.net/trial/downie/v4/Downie_4_5221.dmg",
+      "installer_url": "https://software.charliemonroe.net/trial/downie/v4/Downie_4_5222.dmg",
       "install_script_ref": "1468a553",
       "uninstall_script_ref": "24e71e3c",
-      "sha256": "2a16482eba21dae91d59a4f932f87cc7f56e01f118b1974aa5de87eaac8f5b80",
+      "sha256": "460c113d396f2c42bf3e57b7e40f215c7a648070b97b84cef4e378ef3c412102",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/firefox@nightly/darwin.json b/ee/maintained-apps/outputs/firefox@nightly/darwin.json
index 12e62c6e8c5..97d3e05ae49 100644
--- a/ee/maintained-apps/outputs/firefox@nightly/darwin.json
+++ b/ee/maintained-apps/outputs/firefox@nightly/darwin.json
@@ -6,10 +6,10 @@
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.nightly';",
         "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.nightly' AND version_compare(bundle_version, '15526.7.24') < 0);"
       },
-      "installer_url": "https://ftp.mozilla.org/pub/firefox/nightly/2026/07/2026-07-24-09-01-43-mozilla-central/firefox-155.0a1.en-US.mac.dmg",
+      "installer_url": "https://ftp.mozilla.org/pub/firefox/nightly/2026/07/2026-07-24-21-53-55-mozilla-central/firefox-155.0a1.en-US.mac.dmg",
       "install_script_ref": "418c9331",
       "uninstall_script_ref": "d7c711ad",
-      "sha256": "da960116f669fe603d584eca723ac4c245da5dc982848575d8b498a9da2a1191",
+      "sha256": "375d006673fe4b83536609695f48bae5e86e26cce709846ee7e2dd809e0bb7f3",
       "default_categories": [
         "Browsers"
       ]
diff --git a/ee/maintained-apps/outputs/goland/windows.json b/ee/maintained-apps/outputs/goland/windows.json
index 71ac732e338..a7c0e199451 100644
--- a/ee/maintained-apps/outputs/goland/windows.json
+++ b/ee/maintained-apps/outputs/goland/windows.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2026.2",
+      "version": "2026.2.0.1",
       "queries": {
         "exists": "SELECT 1 FROM programs WHERE name LIKE 'GoLand %' AND publisher = 'JetBrains s.r.o.';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name LIKE 'GoLand %' AND publisher = 'JetBrains s.r.o.' AND version_compare(version, '262.8665.270') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name LIKE 'GoLand %' AND publisher = 'JetBrains s.r.o.' AND version_compare(version, '262.8665.336') < 0);"
       },
-      "installer_url": "https://download.jetbrains.com/go/goland-2026.2.exe",
+      "installer_url": "https://download.jetbrains.com/go/goland-2026.2.0.1.exe",
       "install_script_ref": "6d754683",
       "uninstall_script_ref": "f2b296c7",
-      "sha256": "22ab9a1594c26894c0e470d0ac6f21177c7174b486cbd81130260e907895ee96",
+      "sha256": "cbb1baa41c12bba7d973d2c614dfabea29ef03b2ca9ce84bb24b3f8c84dbf13e",
       "default_categories": [
         "Developer tools"
       ]
diff --git a/ee/maintained-apps/outputs/granola/darwin.json b/ee/maintained-apps/outputs/granola/darwin.json
index e0feb63f97c..34a33b6c223 100644
--- a/ee/maintained-apps/outputs/granola/darwin.json
+++ b/ee/maintained-apps/outputs/granola/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "7.441.4",
+      "version": "7.441.6",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.granola.app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.granola.app' AND version_compare(bundle_short_version, '7.441.4') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.granola.app' AND version_compare(bundle_short_version, '7.441.6') < 0);"
       },
-      "installer_url": "https://dr2v7l5emb758.cloudfront.net/7.441.4/Granola-7.441.4-mac-universal.dmg",
+      "installer_url": "https://dr2v7l5emb758.cloudfront.net/7.441.6/Granola-7.441.6-mac-universal.dmg",
       "install_script_ref": "89a55638",
       "uninstall_script_ref": "7b9b9d06",
-      "sha256": "2ccb3a8deeca4529fef3963fc04793876ab67c53d2206df5d3400e7f555fc184",
+      "sha256": "8543184f97f85f1818d6fb1af78a0125306cb48598785fb2b260f87519cf30d9",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/hive-app/darwin.json b/ee/maintained-apps/outputs/hive-app/darwin.json
index d89587abf7c..cf9e8009976 100644
--- a/ee/maintained-apps/outputs/hive-app/darwin.json
+++ b/ee/maintained-apps/outputs/hive-app/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "1.2.23",
+      "version": "1.2.24",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.hive.app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.hive.app' AND version_compare(bundle_short_version, '1.2.23') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.hive.app' AND version_compare(bundle_short_version, '1.2.24') < 0);"
       },
-      "installer_url": "https://github.com/morapelker/hive/releases/download/v1.2.23/Hive-1.2.23-arm64.dmg",
+      "installer_url": "https://github.com/morapelker/hive/releases/download/v1.2.24/Hive-1.2.24-arm64.dmg",
       "install_script_ref": "6b39e7ad",
       "uninstall_script_ref": "78bb4e43",
-      "sha256": "815662cd7f404e8b68f8f429f0abbb35cc2cfc952c7de86b453fe8c0f04700c4",
+      "sha256": "f8241581bc134c37ddd38697e37b9d26f14bbb01e08afce24b4112c12b45095d",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/kiro-cli/darwin.json b/ee/maintained-apps/outputs/kiro-cli/darwin.json
index a418e584a71..56166b37668 100644
--- a/ee/maintained-apps/outputs/kiro-cli/darwin.json
+++ b/ee/maintained-apps/outputs/kiro-cli/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2.14.1",
+      "version": "2.14.2",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'dev.kiro.cli';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'dev.kiro.cli' AND version_compare(bundle_short_version, '2.14.1') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'dev.kiro.cli' AND version_compare(bundle_short_version, '2.14.2') < 0);"
       },
-      "installer_url": "https://desktop-release.q.us-east-1.amazonaws.com/2.14.1/Kiro%20CLI.dmg",
+      "installer_url": "https://desktop-release.q.us-east-1.amazonaws.com/2.14.2/Kiro%20CLI.dmg",
       "install_script_ref": "7bf3d706",
       "uninstall_script_ref": "ed98f0de",
-      "sha256": "3c22147f5e297fb03b13bd61870c449b2cfe21818fb6718c89eede3263f15426",
+      "sha256": "114d860ce88ae6244de82c6b7fd7bbf411a85665489184d9c9fc7cb9a3a8a81b",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/krisp/darwin.json b/ee/maintained-apps/outputs/krisp/darwin.json
index e3948fd8b6e..13ab0c04370 100644
--- a/ee/maintained-apps/outputs/krisp/darwin.json
+++ b/ee/maintained-apps/outputs/krisp/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "3.14.4",
+      "version": "3.14.6",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'ai.krisp.krispMac';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.krisp.krispMac' AND version_compare(bundle_short_version, '3.14.4') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'ai.krisp.krispMac' AND version_compare(bundle_short_version, '3.14.6') < 0);"
       },
-      "installer_url": "https://cdn.krisp.ai/mp/mn/3.14/mac/Krisp_3.14.4_arm64.pkg",
-      "install_script_ref": "e15a2faa",
+      "installer_url": "https://cdn.krisp.ai/mp/mn/3.14/mac/Krisp_3.14.6_arm64.pkg",
+      "install_script_ref": "37cf5d02",
       "uninstall_script_ref": "0d2116c2",
-      "sha256": "1d1fb0a2e026b5a6414d4c20c5839fde1fe1170c3edce2a1da53f2b2f6d25aa1",
+      "sha256": "e8f321838c6627462974441e3d6a79c2f8bb473e29cf68824227f3b4a215d774",
       "default_categories": [
         "Productivity"
       ]
@@ -17,6 +17,6 @@
   ],
   "refs": {
     "0d2116c2": "#!/bin/bash\n\n# variables\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\nexpand_pkgid_and_map() {\n  local PKGID=\"$1\"\n  local FUNC=\"$2\"\n  if [[ \"$PKGID\" == *\"*\" ]]; then\n    local prefix=\"${PKGID%\\*}\"\n    echo \"Expanding wildcard for PKGID: $PKGID\"\n    for receipt in $(pkgutil --pkgs | grep \"^${prefix}\"); do\n      echo \"Processing $receipt\"\n      \"$FUNC\" \"$receipt\"\n    done\n  else\n    \"$FUNC\" \"$PKGID\"\n  fi\n}\n\nforget_pkg() {\n  local PKGID=\"$1\"\n  expand_pkgid_and_map \"$PKGID\" forget_receipt\n}\n\nforget_receipt() {\n  local PKGID=\"$1\"\n  sudo pkgutil --forget \"$PKGID\"\n}\n\nquit_application() {\n  local bundle_id=\"$1\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\nremove_launchctl_service() {\n  local service=\"$1\"\n  local booleans=(\"true\" \"false\")\n  local plist_status\n  local paths\n  local should_sudo\n\n  echo \"Removing launchctl service ${service}\"\n\n  # A wildcard label can't be used with launchctl or as a plist name, so expand\n  # it to the labels of currently loaded services that match the pattern.\n  local services=(\"$service\")\n  if [[ \"$service\" == *\"*\"* ]]; then\n    local regex\n    # Escape regex metacharacters, turn '*' into '.*', and anchor the pattern so\n    # it matches a full label rather than a substring.\n    regex=$(printf '%s' \"$service\" | sed -e 's/[][(){}.^$+?|\\\\]/\\\\&/g' -e 's/\\*/.*/g')\n    regex=\"^${regex}$\"\n    services=()\n    local id\n    # Match every loaded job by label regardless of PID; launchctl list reports\n    # loaded-but-not-running jobs with a \"-\" in the PID column.\n    while read -r _ _ id; do\n      [[ \"$id\" =~ $regex ]] && services+=(\"$id\")\n    done < <(launchctl list 2>/dev/null | tail -n +2)\n    if [[ ${#services[@]} -eq 0 ]]; then\n      echo \"No loaded launchctl service matches ${service}\"\n      return\n    fi\n  fi\n\n  local service_label\n  for service_label in \"${services[@]}\"; do\n    for should_sudo in \"${booleans[@]}\"; do\n      plist_status=$(launchctl list \"${service_label}\" 2>/dev/null)\n\n      if [[ $plist_status == \\{* ]]; then\n        if [[ $should_sudo == \"true\" ]]; then\n          sudo launchctl remove \"${service_label}\"\n        else\n          launchctl remove \"${service_label}\"\n        fi\n        sleep 1\n      fi\n\n      paths=(\n        \"/Library/LaunchAgents/${service_label}.plist\"\n        \"/Library/LaunchDaemons/${service_label}.plist\"\n      )\n\n      # if not using sudo, prepend the home directory to the paths\n      if [[ $should_sudo == \"false\" ]]; then\n        for i in \"${!paths[@]}\"; do\n          paths[i]=\"${HOME}${paths[i]}\"\n        done\n      fi\n\n      for path in \"${paths[@]}\"; do\n        if [[ -e \"$path\" ]]; then\n          if [[ $should_sudo == \"true\" ]]; then\n            sudo rm -f -- \"$path\"\n          else\n            rm -f -- \"$path\"\n          fi\n        fi\n      done\n    done\n  done\n}\n\nremove_pkg_files() {\n  local PKGID=\"$1\"\n  expand_pkgid_and_map \"$PKGID\" remove_receipt_files\n}\n\nremove_receipt_files() {\n  local PKGID=\"$1\"\n  local PKGINFO VOLUME INSTALL_LOCATION FULL_INSTALL_LOCATION\n\n  echo \"pkgutil --pkg-info-plist \\\"$PKGID\\\"\"\n  PKGINFO=$(pkgutil --pkg-info-plist \"$PKGID\")\n  VOLUME=$(echo \"$PKGINFO\" | awk '/<key>volume<\\/key>/ {getline; gsub(/.*<string>|<\\/string>.*/, \"\"); print}')\n  INSTALL_LOCATION=$(echo \"$PKGINFO\" | awk '/<key>install-location<\\/key>/ {getline; gsub(/.*<string>|<\\/string>.*/, \"\"); print}')\n\n  if [ -z \"$INSTALL_LOCATION\" ] || [ \"$INSTALL_LOCATION\" = \"/\" ]; then\n    FULL_INSTALL_LOCATION=\"$VOLUME\"\n  else\n    FULL_INSTALL_LOCATION=\"$VOLUME/$INSTALL_LOCATION\"\n    FULL_INSTALL_LOCATION=$(echo \"$FULL_INSTALL_LOCATION\" | sed 's|//|/|g')\n  fi\n\n  echo \"sudo pkgutil --only-files --files \\\"$PKGID\\\" | sed \\\"s|^|${FULL_INSTALL_LOCATION}/|\\\" | tr '\\\\\\\\n' '\\\\\\\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\"\n  sudo pkgutil --only-files --files \"$PKGID\" | sed \"s|^|/${INSTALL_LOCATION}/|\" | tr '\\n' '\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\n\n  echo \"sudo pkgutil --only-dirs --files \\\"$PKGID\\\" | sed \\\"s|^|${FULL_INSTALL_LOCATION}/|\\\" | grep '\\\\.app$' | tr '\\\\\\\\n' '\\\\\\\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\"\n  sudo pkgutil --only-dirs --files \"$PKGID\" | sed \"s|^|${FULL_INSTALL_LOCATION}/|\" | grep '\\.app$' | tr '\\n' '\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\n\n  root_app_dir=$(\n    sudo pkgutil --only-dirs --files \"$PKGID\" \\\n      | sed \"s|^|${FULL_INSTALL_LOCATION}/|\" \\\n      | grep 'Applications' \\\n      | awk '{ print length, $0 }' \\\n      | sort -n \\\n      | head -n1 \\\n      | cut -d' ' -f2-\n  )\n  if [ -n \"$root_app_dir\" ]; then\n    echo \"sudo rmdir -p \\\"$root_app_dir\\\" 2>/dev/null || :\"\n    sudo rmdir -p \"$root_app_dir\" 2>/dev/null || :\n  fi\n}\n\ntrash() {\n  local logged_in_user=\"$1\"\n  local target_file=\"$2\"\n  local timestamp=\"$(date +%Y-%m-%d-%s)\"\n  local rand=\"$(jot -r 1 0 99999)\"\n\n  # replace ~ with /Users/$logged_in_user\n  if [[ \"$target_file\" == ~* ]]; then\n    target_file=\"/Users/$logged_in_user${target_file:1}\"\n  fi\n\n  local trash=\"/Users/$logged_in_user/.Trash\"\n\n  # If the target contains glob characters, expand it and move each match.\n  if [[ \"$target_file\" == *[*?[]* ]]; then\n    local file file_name\n    local matched=false\n    local i=0\n    # compgen -G expands the (quoted) pattern itself, so paths containing\n    # spaces glob correctly; reading line by line keeps each match intact.\n    while IFS= read -r file; do\n      [[ -n \"$file\" ]] || continue\n      [[ -e \"$file\" || -L \"$file\" ]] || continue\n      matched=true\n      i=$((i + 1))\n      file_name=\"$(basename \"$file\")\"\n      echo \"removing $file.\"\n      # The per-match counter keeps matches that share a basename from\n      # overwriting each other in the trash.\n      mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n    done < <(compgen -G \"$target_file\" 2>/dev/null)\n    if [[ \"$matched\" == false ]]; then\n      echo \"$target_file doesn't exist.\"\n    fi\n    return\n  fi\n\n  local file_name=\"$(basename \"${target_file}\")\"\n\n  if [[ -e \"$target_file\" ]]; then\n    echo \"removing $target_file.\"\n    mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n  else\n    echo \"$target_file doesn't exist.\"\n  fi\n}\n\nremove_launchctl_service 'ai.krisp.krispMac*'\nremove_launchctl_service 'krisp'\nquit_application 'ai.krisp.krispMac'\nremove_pkg_files 'ai.krisp.krispMac*'\nforget_pkg 'ai.krisp.krispMac*'\nsudo rm -rf '/Applications/krisp.app'\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/ai.krisp.krispMac.LaunchHelper'\ntrash $LOGGED_IN_USER '~/Library/Application Support/ai.krisp.krispMac'\ntrash $LOGGED_IN_USER '~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/ai.krisp.krispmac.sfl*'\ntrash $LOGGED_IN_USER '~/Library/Application Support/krisp'\ntrash $LOGGED_IN_USER '~/Library/Caches/ai.krisp.krispMac'\ntrash $LOGGED_IN_USER '~/Library/Containers/ai.krisp.krispMac.LaunchHelper'\ntrash $LOGGED_IN_USER '~/Library/HTTPStorages/ai.krisp.krispMac.*'\ntrash $LOGGED_IN_USER '~/Library/LaunchAgents/ai.krisp.krispMac.cameraAssistant.plist'\ntrash $LOGGED_IN_USER '~/Library/LaunchAgents/krisp.plist'\ntrash $LOGGED_IN_USER '~/Library/Preferences/ai.krisp.krispMac.plist'\n",
-    "e15a2faa": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  # App was running, mark it for relaunch\n  eval \"export $var_name=1\"\n  echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\nrelaunch_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local was_running\n\n  # Check if the app was running before installation\n  eval \"was_running=\\$$var_name\"\n  if [[ \"$was_running\" != \"1\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Relaunching application '$bundle_id'...\"\n\n  # Launch the app in the logged-in user's GUI session. Apps launched by root\n  # won't register with the user's Dock/GUI, so run 'open' as the console user.\n  # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n  # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n  # LSOpenURLsWithRole() failures even when 'open' exits 0.\n  local open_status=0\n  if [[ $EUID -eq 0 ]]; then\n    local console_uid\n    console_uid=$(id -u \"$console_user\")\n    /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  else\n    open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  fi\n\n  if [[ $open_status -eq 0 ]]; then\n    echo \"Application '$bundle_id' relaunched successfully.\"\n  else\n    echo \"Failed to relaunch application '$bundle_id'.\"\n  fi\n}\n\n\n# install pkg files\nquit_and_track_application 'ai.krisp.krispMac'\nsudo installer -pkg \"$TMPDIR/krisp_3.14.4_arm64.pkg\" -target /\nrelaunch_application 'ai.krisp.krispMac'\n"
+    "37cf5d02": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  # App was running, mark it for relaunch\n  eval \"export $var_name=1\"\n  echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\nrelaunch_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local was_running\n\n  # Check if the app was running before installation\n  eval \"was_running=\\$$var_name\"\n  if [[ \"$was_running\" != \"1\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Relaunching application '$bundle_id'...\"\n\n  # Launch the app in the logged-in user's GUI session. Apps launched by root\n  # won't register with the user's Dock/GUI, so run 'open' as the console user.\n  # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n  # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n  # LSOpenURLsWithRole() failures even when 'open' exits 0.\n  local open_status=0\n  if [[ $EUID -eq 0 ]]; then\n    local console_uid\n    console_uid=$(id -u \"$console_user\")\n    /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  else\n    open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  fi\n\n  if [[ $open_status -eq 0 ]]; then\n    echo \"Application '$bundle_id' relaunched successfully.\"\n  else\n    echo \"Failed to relaunch application '$bundle_id'.\"\n  fi\n}\n\n\n# install pkg files\nquit_and_track_application 'ai.krisp.krispMac'\nsudo installer -pkg \"$TMPDIR/krisp_3.14.6_arm64.pkg\" -target /\nrelaunch_application 'ai.krisp.krispMac'\n"
   }
 }
diff --git a/ee/maintained-apps/outputs/microsoft-edge/windows.json b/ee/maintained-apps/outputs/microsoft-edge/windows.json
index 7757fd4b965..e8af2328f50 100644
--- a/ee/maintained-apps/outputs/microsoft-edge/windows.json
+++ b/ee/maintained-apps/outputs/microsoft-edge/windows.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "150.0.4078.83",
+      "version": "150.0.4078.99",
       "queries": {
         "exists": "SELECT 1 FROM programs WHERE name = 'Microsoft Edge' AND publisher = 'Microsoft Corporation';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Microsoft Edge' AND publisher = 'Microsoft Corporation' AND version_compare(version, '150.0.4078.83') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Microsoft Edge' AND publisher = 'Microsoft Corporation' AND version_compare(version, '150.0.4078.99') < 0);"
       },
-      "installer_url": "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/7110b41a-d8a5-4d46-8a7b-61cd2829f1d3/MicrosoftEdgeEnterpriseX64.msi",
+      "installer_url": "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/7987dc1e-4d7c-474e-8f4a-0f66b2895b58/MicrosoftEdgeEnterpriseX64.msi",
       "install_script_ref": "8959087b",
       "uninstall_script_ref": "e12e9902",
-      "sha256": "1eff2543ff905276bf16b3c2b508ffa97ed52e7b96f122c310c1ff5d42238ec1",
+      "sha256": "ce3c976d8e624756f845f0ad1fc80e31e6099db56a19fa8ce8341afe44b325b1",
       "default_categories": [
         "Browsers"
       ],
diff --git a/ee/maintained-apps/outputs/miro/darwin.json b/ee/maintained-apps/outputs/miro/darwin.json
index 92ca86bd11b..3d050ba4fea 100644
--- a/ee/maintained-apps/outputs/miro/darwin.json
+++ b/ee/maintained-apps/outputs/miro/darwin.json
@@ -1,10 +1,10 @@
 {
   "versions": [
     {
-      "version": "0.11.162",
+      "version": "0.11.164",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.realtimeboard';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.realtimeboard' AND version_compare(bundle_short_version, '0.11.162') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.realtimeboard' AND version_compare(bundle_short_version, '0.11.164') < 0);"
       },
       "installer_url": "https://desktop.miro.com/platforms/darwin-arm64/Install-Miro.dmg",
       "install_script_ref": "ea60f0ac",
diff --git a/ee/maintained-apps/outputs/obs/darwin.json b/ee/maintained-apps/outputs/obs/darwin.json
index 03637cf1507..ffa5f1e5460 100644
--- a/ee/maintained-apps/outputs/obs/darwin.json
+++ b/ee/maintained-apps/outputs/obs/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "32.2.0",
+      "version": "32.2.1",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.obsproject.obs-studio';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.obsproject.obs-studio' AND version_compare(bundle_short_version, '32.2.0') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.obsproject.obs-studio' AND version_compare(bundle_short_version, '32.2.1') < 0);"
       },
-      "installer_url": "https://cdn-fastly.obsproject.com/downloads/obs-studio-32.2.0-macos-apple.dmg",
+      "installer_url": "https://cdn-fastly.obsproject.com/downloads/obs-studio-32.2.1-macos-apple.dmg",
       "install_script_ref": "b96854c1",
       "uninstall_script_ref": "54899728",
-      "sha256": "e4bed7f871efa8f2bb5b31d1bbdbde1d0b1016062050f5eab03fd16d44f7a04d",
+      "sha256": "6120c995614be17ecd0ee0877514a88b121249e6261cde46d1440b87d7ffd70c",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/ocenaudio/darwin.json b/ee/maintained-apps/outputs/ocenaudio/darwin.json
index 9806a309607..670d585ead8 100644
--- a/ee/maintained-apps/outputs/ocenaudio/darwin.json
+++ b/ee/maintained-apps/outputs/ocenaudio/darwin.json
@@ -1,10 +1,10 @@
 {
   "versions": [
     {
-      "version": "3.20.0",
+      "version": "3.20.1",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.ocenaudio';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.ocenaudio' AND version_compare(bundle_short_version, '3.20.0') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.ocenaudio' AND version_compare(bundle_short_version, '3.20.1') < 0);"
       },
       "installer_url": "https://www.ocenaudio.com/downloads/index.php/ocenaudio_universal.dmg",
       "install_script_ref": "0c2240cf",
diff --git a/ee/maintained-apps/outputs/ocenaudio/windows.json b/ee/maintained-apps/outputs/ocenaudio/windows.json
index 0f119971fda..fe5cf330356 100644
--- a/ee/maintained-apps/outputs/ocenaudio/windows.json
+++ b/ee/maintained-apps/outputs/ocenaudio/windows.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "3.20.0",
+      "version": "3.20.1",
       "queries": {
         "exists": "SELECT 1 FROM programs WHERE name = 'ocenaudio' AND publisher = 'Ocenaudio Team';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'ocenaudio' AND publisher = 'Ocenaudio Team' AND version_compare(version, '3.20.0') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'ocenaudio' AND publisher = 'Ocenaudio Team' AND version_compare(version, '3.20.1') < 0);"
       },
       "installer_url": "https://www.ocenaudio.com/downloads/index.php/ocenaudio_windows64.exe",
       "install_script_ref": "ebf8794b",
       "uninstall_script_ref": "7264fb50",
-      "sha256": "ada197609bb284de1362c0e09628b2b22a2a07d4f22e6d358163d2ff43857870",
+      "sha256": "c9a31c8fd00c8d5e2b0417c1aea105b72bb095a87a4433574805c16bfc98d8be",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/ollama/darwin.json b/ee/maintained-apps/outputs/ollama/darwin.json
index 4e93b224a07..ee9100da6ef 100644
--- a/ee/maintained-apps/outputs/ollama/darwin.json
+++ b/ee/maintained-apps/outputs/ollama/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "0.32.3",
+      "version": "0.32.4",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.ollama';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.ollama' AND version_compare(bundle_short_version, '0.32.3') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.electron.ollama' AND version_compare(bundle_short_version, '0.32.4') < 0);"
       },
-      "installer_url": "https://github.com/ollama/ollama/releases/download/v0.32.3/Ollama-darwin.zip",
+      "installer_url": "https://github.com/ollama/ollama/releases/download/v0.32.4/Ollama-darwin.zip",
       "install_script_ref": "9f174559",
       "uninstall_script_ref": "ecec947d",
-      "sha256": "3be39ebba6e7beee0e6498468dd391771db56e8fff84d77424fccc8bd94ccbfa",
+      "sha256": "19e08ffc0e338721cd998bbc3aa146de71140e4751800fc0f3206370e6c8f007",
       "default_categories": [
         "Developer tools"
       ]
diff --git a/ee/maintained-apps/outputs/pastebot/darwin.json b/ee/maintained-apps/outputs/pastebot/darwin.json
index 69982d02612..4c6b15fda70 100644
--- a/ee/maintained-apps/outputs/pastebot/darwin.json
+++ b/ee/maintained-apps/outputs/pastebot/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2.4.8",
+      "version": "3.0",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.tapbots.Pastebot2Mac';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.tapbots.Pastebot2Mac' AND version_compare(bundle_short_version, '2.4.8') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.tapbots.Pastebot2Mac' AND version_compare(bundle_short_version, '3.0') < 0);"
       },
-      "installer_url": "https://tapbots.net/pastebot2/Pastebot.dmg",
+      "installer_url": "https://tapbots.net/pastebot3/Pastebot.30000.dmg",
       "install_script_ref": "47ea7aec",
-      "uninstall_script_ref": "fdce5819",
-      "sha256": "3cd01fee94994cebce198ea81e48dce9b1aef86986836d17fc86f91fa9f047cc",
+      "uninstall_script_ref": "885af44b",
+      "sha256": "22fd4d29482c0c04012ecbbdd918ca60b372d79dd7caabb2eb4671e9ddd69862",
       "default_categories": [
         "Productivity"
       ]
@@ -17,6 +17,6 @@
   ],
   "refs": {
     "47ea7aec": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    eval \"export $var_name=0\"\n    return\n  fi\n\n  # App was running, mark it for relaunch\n  eval \"export $var_name=1\"\n  echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\nrelaunch_application() {\n  local bundle_id=\"$1\"\n  local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n  local was_running\n\n  # Check if the app was running before installation\n  eval \"was_running=\\$$var_name\"\n  if [[ \"$was_running\" != \"1\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Relaunching application '$bundle_id'...\"\n\n  # Launch the app in the logged-in user's GUI session. Apps launched by root\n  # won't register with the user's Dock/GUI, so run 'open' as the console user.\n  # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n  # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n  # LSOpenURLsWithRole() failures even when 'open' exits 0.\n  local open_status=0\n  if [[ $EUID -eq 0 ]]; then\n    local console_uid\n    console_uid=$(id -u \"$console_user\")\n    /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  else\n    open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n  fi\n\n  if [[ $open_status -eq 0 ]]; then\n    echo \"Application '$bundle_id' relaunched successfully.\"\n  else\n    echo \"Failed to relaunch application '$bundle_id'.\"\n  fi\n}\n\n\n# extract contents\nMOUNT_POINT=$(mktemp -d /tmp/dmg_mount_XXXXXX)\nyes | hdiutil attach -plist -nobrowse -readonly -mountpoint \"$MOUNT_POINT\" \"$INSTALLER_PATH\" || exit 1\nsudo cp -R \"$MOUNT_POINT\"/* \"$TMPDIR\"\nhdiutil detach \"$MOUNT_POINT\" || true\n# copy to the applications folder\nquit_and_track_application 'com.tapbots.Pastebot2Mac'\nif [ -d \"$APPDIR/Pastebot.app\" ]; then\n\tsudo mv \"$APPDIR/Pastebot.app\" \"$TMPDIR/Pastebot.app.bkp\"\nfi\nsudo cp -R \"$TMPDIR/Pastebot.app\" \"$APPDIR\"\nrelaunch_application 'com.tapbots.Pastebot2Mac'\n",
-    "fdce5819": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\nquit_application() {\n  local bundle_id=\"$1\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\ntrash() {\n  local logged_in_user=\"$1\"\n  local target_file=\"$2\"\n  local timestamp=\"$(date +%Y-%m-%d-%s)\"\n  local rand=\"$(jot -r 1 0 99999)\"\n\n  # replace ~ with /Users/$logged_in_user\n  if [[ \"$target_file\" == ~* ]]; then\n    target_file=\"/Users/$logged_in_user${target_file:1}\"\n  fi\n\n  local trash=\"/Users/$logged_in_user/.Trash\"\n\n  # If the target contains glob characters, expand it and move each match.\n  if [[ \"$target_file\" == *[*?[]* ]]; then\n    local file file_name\n    local matched=false\n    local i=0\n    # compgen -G expands the (quoted) pattern itself, so paths containing\n    # spaces glob correctly; reading line by line keeps each match intact.\n    while IFS= read -r file; do\n      [[ -n \"$file\" ]] || continue\n      [[ -e \"$file\" || -L \"$file\" ]] || continue\n      matched=true\n      i=$((i + 1))\n      file_name=\"$(basename \"$file\")\"\n      echo \"removing $file.\"\n      # The per-match counter keeps matches that share a basename from\n      # overwriting each other in the trash.\n      mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n    done < <(compgen -G \"$target_file\" 2>/dev/null)\n    if [[ \"$matched\" == false ]]; then\n      echo \"$target_file doesn't exist.\"\n    fi\n    return\n  fi\n\n  local file_name=\"$(basename \"${target_file}\")\"\n\n  if [[ -e \"$target_file\" ]]; then\n    echo \"removing $target_file.\"\n    mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n  else\n    echo \"$target_file doesn't exist.\"\n  fi\n}\n\nquit_application 'com.tapbots.Pastebot2Mac'\nsudo rm -rf \"$APPDIR/Pastebot.app\"\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/9JTH7AWHE6.com.tapbots.Pastebot2Mac'\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/com.tapbots.Pastebot2Mac*'\ntrash $LOGGED_IN_USER '~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.tapbots.pastebot2mac.launchhelper.sfl*'\ntrash $LOGGED_IN_USER '~/Library/Containers/com.tapbots.Pastebot2Mac*'\ntrash $LOGGED_IN_USER '~/Library/Group Containers/9JTH7AWHE6.com.tapbots.Pastebot2Mac'\ntrash $LOGGED_IN_USER '~/Library/Preferences/com.tapbots.Pastebot2Mac.plist'\n"
+    "885af44b": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\nquit_application() {\n  local bundle_id=\"$1\"\n  local timeout_duration=10\n\n  # check if the application is running\n  local app_running\n  app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n  if [[ \"$app_running\" != \"true\" ]]; then\n    return\n  fi\n\n  local console_user\n  console_user=$(stat -f \"%Su\" /dev/console)\n  if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n    echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n    return\n  fi\n\n  echo \"Quitting application '$bundle_id'...\"\n\n  # try to quit the application within the timeout period\n  local quit_success=false\n  SECONDS=0\n  while (( SECONDS < timeout_duration )); do\n    if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n      if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n        echo \"Application '$bundle_id' quit successfully.\"\n        quit_success=true\n        break\n      fi\n    fi\n    sleep 1\n  done\n\n  if [[ \"$quit_success\" = false ]]; then\n    echo \"Application '$bundle_id' did not quit.\"\n  fi\n}\n\n\ntrash() {\n  local logged_in_user=\"$1\"\n  local target_file=\"$2\"\n  local timestamp=\"$(date +%Y-%m-%d-%s)\"\n  local rand=\"$(jot -r 1 0 99999)\"\n\n  # replace ~ with /Users/$logged_in_user\n  if [[ \"$target_file\" == ~* ]]; then\n    target_file=\"/Users/$logged_in_user${target_file:1}\"\n  fi\n\n  local trash=\"/Users/$logged_in_user/.Trash\"\n\n  # If the target contains glob characters, expand it and move each match.\n  if [[ \"$target_file\" == *[*?[]* ]]; then\n    local file file_name\n    local matched=false\n    local i=0\n    # compgen -G expands the (quoted) pattern itself, so paths containing\n    # spaces glob correctly; reading line by line keeps each match intact.\n    while IFS= read -r file; do\n      [[ -n \"$file\" ]] || continue\n      [[ -e \"$file\" || -L \"$file\" ]] || continue\n      matched=true\n      i=$((i + 1))\n      file_name=\"$(basename \"$file\")\"\n      echo \"removing $file.\"\n      # The per-match counter keeps matches that share a basename from\n      # overwriting each other in the trash.\n      mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n    done < <(compgen -G \"$target_file\" 2>/dev/null)\n    if [[ \"$matched\" == false ]]; then\n      echo \"$target_file doesn't exist.\"\n    fi\n    return\n  fi\n\n  local file_name=\"$(basename \"${target_file}\")\"\n\n  if [[ -e \"$target_file\" ]]; then\n    echo \"removing $target_file.\"\n    mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n  else\n    echo \"$target_file doesn't exist.\"\n  fi\n}\n\nquit_application 'com.tapbots.Pastebot3Mac'\nsudo rm -rf \"$APPDIR/Pastebot.app\"\nsudo rm -rf 'pastebot-tool'\nsudo rm -rf 'pastebot-mcp'\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/*.com.tapbots.Pastebot*Mac'\ntrash $LOGGED_IN_USER '~/Library/Application Scripts/com.tapbots.Pastebot*Mac*'\ntrash $LOGGED_IN_USER '~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.tapbots.pastebot*mac.launchhelper.sfl*'\ntrash $LOGGED_IN_USER '~/Library/Containers/com.tapbots.Pastebot*Mac*'\ntrash $LOGGED_IN_USER '~/Library/Group Containers/*.com.tapbots.Pastebot*Mac'\ntrash $LOGGED_IN_USER '~/Library/Preferences/com.tapbots.Pastebot*Mac.plist'\n"
   }
 }
diff --git a/ee/maintained-apps/outputs/rive/darwin.json b/ee/maintained-apps/outputs/rive/darwin.json
index 8342eb4d7dd..d4b9b2d83cc 100644
--- a/ee/maintained-apps/outputs/rive/darwin.json
+++ b/ee/maintained-apps/outputs/rive/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "0.8.5273",
+      "version": "0.8.5275",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'app.rive.editor';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.rive.editor' AND version_compare(bundle_short_version, '0.8.5273') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.rive.editor' AND version_compare(bundle_short_version, '0.8.5275') < 0);"
       },
-      "installer_url": "https://releases.rive.app/macos/0.8.5273/Rive.dmg",
+      "installer_url": "https://releases.rive.app/macos/0.8.5275/Rive.dmg",
       "install_script_ref": "2bbfee4e",
       "uninstall_script_ref": "8f862785",
-      "sha256": "9b74ced18fff2318085847a2840c87dd8a6da86d584f6c93b9f649261f84eed9",
+      "sha256": "50d6d5109d770f54adbcc2b7c9b2ecfb4eb307f9862444313ace97567868c391",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/super-productivity/darwin.json b/ee/maintained-apps/outputs/super-productivity/darwin.json
index 5da3c42970f..5fb2dedf80f 100644
--- a/ee/maintained-apps/outputs/super-productivity/darwin.json
+++ b/ee/maintained-apps/outputs/super-productivity/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "18.15.1",
+      "version": "18.16.0",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.super-productivity.app';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.super-productivity.app' AND version_compare(bundle_short_version, '18.15.1') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.super-productivity.app' AND version_compare(bundle_short_version, '18.16.0') < 0);"
       },
-      "installer_url": "https://github.com/super-productivity/super-productivity/releases/download/v18.15.1/superProductivity-arm64.dmg",
+      "installer_url": "https://github.com/super-productivity/super-productivity/releases/download/v18.16.0/superProductivity-arm64.dmg",
       "install_script_ref": "149e0795",
       "uninstall_script_ref": "98941c96",
-      "sha256": "0e7382260d0afba7bcb557038ee750270122d201756337bcec9081d701076591",
+      "sha256": "ac5335d334e47842fc0a090207b0e115873617d4c56afe123ad9baa6a1738b2a",
       "default_categories": [
         "Productivity"
       ]
diff --git a/ee/maintained-apps/outputs/superhuman/darwin.json b/ee/maintained-apps/outputs/superhuman/darwin.json
index 0e131195d24..c8734bb8427 100644
--- a/ee/maintained-apps/outputs/superhuman/darwin.json
+++ b/ee/maintained-apps/outputs/superhuman/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "1041.0.24",
+      "version": "1041.0.25",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.superhuman.mail';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.superhuman.mail' AND version_compare(bundle_short_version, '1041.0.24') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.superhuman.mail' AND version_compare(bundle_short_version, '1041.0.25') < 0);"
       },
-      "installer_url": "https://storage.googleapis.com/download.superhuman.com/supertron-update/Superhuman-1041.0.24-arm64-latest-mac.zip",
+      "installer_url": "https://storage.googleapis.com/download.superhuman.com/supertron-update/Superhuman-1041.0.25-arm64-latest-mac.zip",
       "install_script_ref": "b7ebe5bf",
       "uninstall_script_ref": "1809183d",
-      "sha256": "489584dfcb913be56e0f2c81fedb440fd94f52f8e634cc3b83e65e5d619ed327",
+      "sha256": "00433042ca7404638255339e3732a407f2b7240c745f5a9d8ecf2b9c46ff86ac",
       "default_categories": [
         "Communication"
       ]
diff --git a/ee/maintained-apps/outputs/wechat/darwin.json b/ee/maintained-apps/outputs/wechat/darwin.json
index fde7e50d3be..56cb7c656c1 100644
--- a/ee/maintained-apps/outputs/wechat/darwin.json
+++ b/ee/maintained-apps/outputs/wechat/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "4.1.12.27",
+      "version": "4.1.12.28",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.tencent.xinWeChat';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.tencent.xinWeChat' AND version_compare(bundle_short_version, '4.1.12.27') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.tencent.xinWeChat' AND version_compare(bundle_short_version, '4.1.12.28') < 0);"
       },
-      "installer_url": "https://dldir1.qq.com/weixin/Universal/Mac/xWeChatMac_universal_4.1.12.27_269339.dmg",
+      "installer_url": "https://dldir1.qq.com/weixin/Universal/Mac/xWeChatMac_universal_4.1.12.28_269340.dmg",
       "install_script_ref": "57f30b74",
       "uninstall_script_ref": "18d6be1e",
-      "sha256": "8db40a7a80337e88baa50741372ccf75134bf3146db44de889b28b62884c45f2",
+      "sha256": "ef5335b6986082107889caeb77667ee3f082130f8d9c46fc42748b8dca1b762a",
       "default_categories": [
         "Communication"
       ]
diff --git a/ee/maintained-apps/outputs/yaak/darwin.json b/ee/maintained-apps/outputs/yaak/darwin.json
index 91ad8752a31..487d4710f1f 100644
--- a/ee/maintained-apps/outputs/yaak/darwin.json
+++ b/ee/maintained-apps/outputs/yaak/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "2026.4.0",
+      "version": "2026.5.0",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'app.yaak.desktop';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.yaak.desktop' AND version_compare(bundle_short_version, '2026.4.0') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.yaak.desktop' AND version_compare(bundle_short_version, '2026.5.0') < 0);"
       },
-      "installer_url": "https://github.com/mountain-loop/yaak/releases/download/v2026.4.0/Yaak_2026.4.0_aarch64.dmg",
+      "installer_url": "https://github.com/mountain-loop/yaak/releases/download/v2026.5.0/Yaak_2026.5.0_aarch64.dmg",
       "install_script_ref": "064e2880",
       "uninstall_script_ref": "7041eb1f",
-      "sha256": "d2a05e7782919589564284868312bf040a4cb3d437aa78cb83258985fe65bb02",
+      "sha256": "c191f08eb7796475a6fadbe22b0b38bffb2fc211aa5a591d4061d7a0dc4e427a",
       "default_categories": [
         "Developer tools"
       ]
diff --git a/ee/maintained-apps/outputs/zen/darwin.json b/ee/maintained-apps/outputs/zen/darwin.json
index 559f9de2cdf..ea9c0cd3e62 100644
--- a/ee/maintained-apps/outputs/zen/darwin.json
+++ b/ee/maintained-apps/outputs/zen/darwin.json
@@ -1,15 +1,15 @@
 {
   "versions": [
     {
-      "version": "1.21.8b",
+      "version": "1.21.9b",
       "queries": {
         "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'app.zen-browser.zen';",
-        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.zen-browser.zen' AND version_compare(bundle_short_version, '1.21.8b') < 0);"
+        "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'app.zen-browser.zen' AND version_compare(bundle_short_version, '1.21.9b') < 0);"
       },
-      "installer_url": "https://github.com/zen-browser/desktop/releases/download/1.21.8b/zen.macos-universal.dmg",
+      "installer_url": "https://github.com/zen-browser/desktop/releases/download/1.21.9b/zen.macos-universal.dmg",
       "install_script_ref": "fd25a9c8",
       "uninstall_script_ref": "6fa48a6f",
-      "sha256": "4d54c527b1e18762a7d76b0ecf0ce959a29329fe0a68f737d97e644e13341e07",
+      "sha256": "29e0b6653d82ad890dc8232cd1ca03e2860bdfb68dcd9f79582282a6ccbd12fb",
       "default_categories": [
         "Browsers"
       ]