Bump frozen Adobe Acrobat Pro (macOS) to installer-delivered 26.001.21691

[allenhouchins]

Automated unfreeze probe, revised after validation. The full unfreeze failed: the Homebrew cask
reports 26.001.21771 (tracking Adobe's updater manifest), but Adobe's version-less web installer
DMG still delivers 26.001.21691, so the validator's post-install osquery check failed at
26.001.21771 — the same installer-lags-manifest behavior that caused the original freeze.

This PR instead pins the output manifest to 26.001.21691 (the version the DMG actually installs,
confirmed by the 2026-08-01 validator run) and keeps "frozen": true so the nightly ingester
doesn't bump it back to the cask version.

Frozen since: 2025-12-02 (#36609 — "product updated but installer was not, causing validation issues")
Version: 26.001.21662 -> 26.001.21691 (cask claims 26.001.21771; installer not updated yet)

Note: the regenerated manifest also picks up a newer uninstall_script_ref, because the frozen
output missed the script-template updates that landed on main while it was pinned.

Draft until validation reports. Merge only if the FMA checks are green and the validate shard
actually ran for this slug.

Related issue: NA

Checklist for submitter

• QA'd all new/changed functionality manually — pending CI validation, see above.

---

Generated by Claude Code

Summary by CodeRabbit

• Updates
  • Updated the Adobe Acrobat Pro macOS package to version 26.001.21691.
  • Improved uninstallation handling for launch services while retaining existing cleanup behavior.

[github-actions]

Script Diff Results

ee/maintained-apps/outputs/adobe-acrobat-pro/darwin.json

=== Install Script (no changes) ===
=== Uninstall // c89ac073 -> 31c20531 ===

--- /tmp/old.Du68pH	2026-08-01 02:05:02.771429468 +0000
+++ /tmp/new.0Xvg5O	2026-08-01 02:05:02.771429468 +0000
@@ -78,38 +78,63 @@
 
   echo "Removing launchctl service ${service}"
 
-  for should_sudo in "${booleans[@]}"; do
-    plist_status=$(launchctl list "${service}" 2>/dev/null)
-
-    if [[ $plist_status == \{* ]]; then
-      if [[ $should_sudo == "true" ]]; then
-        sudo launchctl remove "${service}"
-      else
-        launchctl remove "${service}"
-      fi
-      sleep 1
+  # A wildcard label can't be used with launchctl or as a plist name, so expand
+  # it to the labels of currently loaded services that match the pattern.
+  local services=("$service")
+  if [[ "$service" == *"*"* ]]; then
+    local regex
+    # Escape regex metacharacters, turn '*' into '.*', and anchor the pattern so
+    # it matches a full label rather than a substring.
+    regex=$(printf '%s' "$service" | sed -e 's/[][(){}.^$+?|\\]/\\&/g' -e 's/\*/.*/g')
+    regex="^${regex}$"
+    services=()
+    local id
+    # Match every loaded job by label regardless of PID; launchctl list reports
+    # loaded-but-not-running jobs with a "-" in the PID column.
+    while read -r _ _ id; do
+      [[ "$id" =~ $regex ]] && services+=("$id")
+    done < <(launchctl list 2>/dev/null | tail -n +2)
+    if [[ ${#services[@]} -eq 0 ]]; then
+      echo "No loaded launchctl service matches ${service}"
+      return
     fi
+  fi
 
-    paths=(
-      "/Library/LaunchAgents/${service}.plist"
-      "/Library/LaunchDaemons/${service}.plist"
-    )
-
-    # if not using sudo, prepend the home directory to the paths
-    if [[ $should_sudo == "false" ]]; then
-      for i in "${!paths[@]}"; do
-        paths[i]="${HOME}${paths[i]}"
-      done
-    fi
+  local service_label
+  for service_label in "${services[@]}"; do
+    for should_sudo in "${booleans[@]}"; do
+      plist_status=$(launchctl list "${service_label}" 2>/dev/null)
 
-    for path in "${paths[@]}"; do
-      if [[ -e "$path" ]]; then
+      if [[ $plist_status == \{* ]]; then
         if [[ $should_sudo == "true" ]]; then
-          sudo rm -f -- "$path"
+          sudo launchctl remove "${service_label}"
         else
-          rm -f -- "$path"
+          launchctl remove "${service_label}"
         fi
+        sleep 1
       fi
+
+      paths=(
+        "/Library/LaunchAgents/${service_label}.plist"
+        "/Library/LaunchDaemons/${service_label}.plist"
+      )
+
+      # if not using sudo, prepend the home directory to the paths
+      if [[ $should_sudo == "false" ]]; then
+        for i in "${!paths[@]}"; do
+          paths[i]="${HOME}${paths[i]}"
+        done
+      fi
+
+      for path in "${paths[@]}"; do
+        if [[ -e "$path" ]]; then
+          if [[ $should_sudo == "true" ]]; then
+            sudo rm -f -- "$path"
+          else
+            rm -f -- "$path"
+          fi
+        fi
+      done
     done
   done
 }

[Copilot]

Pull request overview

Unfreezes the macOS Fleet-maintained app (FMA) for Adobe Acrobat Pro by removing the frozen pin from the Homebrew input and regenerating the darwin output manifest to track the current upstream version.

Changes:

• Remove "frozen": true from adobe-acrobat-pro/darwin input.
• Regenerate the darwin output manifest to bump the tracked version to 26.001.21771.
• Update the output manifest to reference the newer uninstall script template revision.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
ee/maintained-apps/outputs/adobe-acrobat-pro/darwin.json	Bumps version/probe query to 26.001.21771 and updates uninstall script ref in the regenerated output manifest.
ee/maintained-apps/inputs/homebrew/adobe-acrobat-pro.json	Removes the freeze flag so the darwin FMA can validate against current upstream again.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1e745e0e-07f8-452b-abf2-f964f2ff7330

📥 Commits

Reviewing files that changed from the base of the PR and between 45abf8c and 9745f6d.

📒 Files selected for processing (1)

• ee/maintained-apps/outputs/adobe-acrobat-pro/darwin.json

---

Walkthrough

Adobe Acrobat Pro’s macOS package version and patched-version query now target 26.001.21691. The manifest references uninstall script 31c20531 instead of c89ac073. The new uninstall script matches loaded launchctl services with wildcards before removing services and plist files. The installer script remains unchanged.

Possibly related PRs

• fleetdm/fleet#50372: Updates a macOS app manifest with a newer version and wildcard launchctl cleanup.
• fleetdm/fleet#49784: Updates maintained application metadata and patched-version queries.
• fleetdm/fleet#49989: Updates maintained application metadata and uninstall-script references.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-unfreeze/adobe-acrobat-pro-darwin

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}