Update Fleet-maintained apps#47559
Conversation
Generated automatically with cmd/maintained-apps.
WalkthroughThis PR updates version metadata for seven maintained applications across Windows and macOS platforms. Each update modifies the corresponding output JSON file to bump the application version, adjust the SQL version-comparison predicate for patched-state detection, point to the new installer URL, and replace the SHA256 checksum with the new artifact hash. All other configuration fields, including script references and categories, remain unchanged. Possibly related PRs
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (2)
ee/maintained-apps/outputs/firealpaca/darwin.json (1)
12-12:⚠️ Potential issue | 🟡 Minor | ⚡ Quick winSHA256 checksum disabled for FireAlpaca.
The
sha256field is set to"no_check", which disables integrity verification of the downloaded installer. This creates a security risk as the installer cannot be verified against tampering or corruption.Consider obtaining and using the actual SHA256 checksum for the FireAlpaca 2.16.0 installer to enable integrity verification.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@ee/maintained-apps/outputs/firealpaca/darwin.json` at line 12, The json currently disables integrity verification by setting the "sha256" field to "no_check" for FireAlpaca 2.16.0; replace that placeholder with the actual 64-character SHA256 hex of the official installer (obtain from vendor or compute locally) and validate it against a downloaded copy to ensure it matches, then update the "sha256" value with the lowercase hex string (instead of "no_check") so the installer integrity is enforced.ee/maintained-apps/outputs/nvidia-geforce-now/darwin.json (1)
12-12:⚠️ Potential issue | 🟡 Minor | ⚡ Quick winSHA256 checksum disabled for NVIDIA GeForce NOW.
The
sha256field is set to"no_check", which disables integrity verification of the downloaded installer. This creates a security risk as the installer cannot be verified against tampering or corruption.Consider obtaining and using the actual SHA256 checksum for the GeForce NOW 2.0.85.135 installer to enable integrity verification.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@ee/maintained-apps/outputs/nvidia-geforce-now/darwin.json` at line 12, The "sha256" field currently set to "no_check" disables integrity verification; replace that placeholder with the real SHA256 digest for the NVIDIA GeForce NOW 2.0.85.135 macOS installer by downloading the exact installer used in the package, computing its SHA256 (e.g., shasum -a 256 or equivalent), and updating the "sha256" field in darwin.json with the computed hex string (ensure the value is the exact lowercase hex and not wrapped in any extra text).
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@ee/maintained-apps/outputs/firealpaca/darwin.json`:
- Line 12: The json currently disables integrity verification by setting the
"sha256" field to "no_check" for FireAlpaca 2.16.0; replace that placeholder
with the actual 64-character SHA256 hex of the official installer (obtain from
vendor or compute locally) and validate it against a downloaded copy to ensure
it matches, then update the "sha256" value with the lowercase hex string
(instead of "no_check") so the installer integrity is enforced.
In `@ee/maintained-apps/outputs/nvidia-geforce-now/darwin.json`:
- Line 12: The "sha256" field currently set to "no_check" disables integrity
verification; replace that placeholder with the real SHA256 digest for the
NVIDIA GeForce NOW 2.0.85.135 macOS installer by downloading the exact installer
used in the package, computing its SHA256 (e.g., shasum -a 256 or equivalent),
and updating the "sha256" field in darwin.json with the computed hex string
(ensure the value is the exact lowercase hex and not wrapped in any extra text).
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 48bf5d8a-7811-4e9e-95a2-df101fe208a9
📒 Files selected for processing (7)
ee/maintained-apps/outputs/android-studio/windows.jsonee/maintained-apps/outputs/aws-cli/windows.jsonee/maintained-apps/outputs/codex-app/darwin.jsonee/maintained-apps/outputs/firealpaca/darwin.jsonee/maintained-apps/outputs/nextcloud-talk/darwin.jsonee/maintained-apps/outputs/notesnook/darwin.jsonee/maintained-apps/outputs/nvidia-geforce-now/darwin.json
|
Closing in favor of #47561. |
2 participants
Automated ingestion of latest Fleet-maintained app data.
Summary by CodeRabbit