Automated ingestion of latest Fleet-maintained app data.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
## Release Notes
* **Chores**
* Updated version metadata and installer information for 63 maintained
applications across macOS and Windows platforms, including development
tools, browsers, communication utilities, and productivity software.
Updated version numbers, download links, and integrity checksums to
support deployment of latest stable application releases across
supported systems.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
Co-authored-by: Allen Houchins <allenhouchins@mac.com>
Add Sonos to maintained apps across platforms. Introduces
SonosVersionTransformer (converts Homebrew "90.0-77070" -> "90.0.77070")
and registers it for the sonos/darwin slug so osquery version_compare
and patch detection work. Add special patched query in the Homebrew
ingester to compare bundle_version for Sonos. Add inputs for Homebrew
and Winget (including a Win32 install PowerShell script and Winget
manifest), outputs for darwin and windows with version metadata,
installer URLs, sha256s, and install/uninstall script refs; include the
actual install/uninstall script refs. Add a React SVG icon and map it in
the icons index, and update the Sonos app image asset and apps.json
entries. Also includes a couple punctuation cleanups in apps.json.
This pull request adds support for several new Windows applications to
the maintained apps catalog, including their installation and
uninstallation scripts, metadata, and detection queries. It also updates
the main `apps.json` index to include these new apps with descriptions.
Additionally, there are minor improvements to existing app descriptions.
**New Windows app support:**
* Added support for the following apps, including input definitions and
output manifests:
- Alacritty (`alacritty.json`, `alacritty/windows.json`)
[[1]](diffhunk://#diff-3e02eecda6ec1b6c13931cc7ddbab47c090f988f5683bb1ed39218df077160cdR1-R10)
[[2]](diffhunk://#diff-5887b934dfbbba37ac79d83119266442f17fa334190a177684086a32115d34a2R1-R23)
- Amazon Corretto JRE 8 (`amazon-corretto-jre-8.json`,
`amazon-corretto-jre-8/windows.json`)
[[1]](diffhunk://#diff-6cc761a4417395b137592c475901fecdff3f298e8f24406c5bc3792f05c27b75R1-R10)
[[2]](diffhunk://#diff-2a4d72a579b6a7593f430a4b5129a230495bf1b5099ee046a930c221c6ac437fR1-R23)
- Aptakube (`aptakube.json`, `aptakube/windows.json`)
[[1]](diffhunk://#diff-0572d094e23ababfc709823e7c5c40d01c315d32169a0308ce203bcd2e43b1caR1-R11)
[[2]](diffhunk://#diff-8b20bf0e5682306bf73366be85519573a2ac9ef10e826cc182819eb7af916a4aR1-R23)
- Audiveris (`audiveris.json`, `audiveris/windows.json`)
[[1]](diffhunk://#diff-7153868173ff1e2858eb0030faf2538b3757fb369de335046566a43b67e9bb53R1-R10)
[[2]](diffhunk://#diff-fc7ccdcfb1aa3a57d86c588c6451a534e75ed81c93c9f91ffe1d17fcf6ac11e3R1-R22)
- Autopsy (`autopsy.json`, `autopsy/windows.json`)
[[1]](diffhunk://#diff-8f6dbd95a7ad6ced8bdda80c6f91e048954304be7097db43fb26f0420554330dR1-R10)
[[2]](diffhunk://#diff-33a6ed85427063b8a5a590969ef92ddc330dcb3ebb9fb096a6bea41b03b369faR1-R22)
- AWS SAM CLI (`aws-sam-cli.json`, `aws-sam-cli/windows.json`)
- Filebeat (`filebeat.json`, `filebeat/windows.json`)
- Winlogbeat (`winlogbeat.json`, `winlogbeat/windows.json`)
**Catalog and metadata updates:**
* Updated `apps.json` to include the new Windows apps with their
descriptions and unique identifiers.
[[1]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R361-R367)
[[2]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R459-R465)
[[3]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R641-R647)
[[4]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R732-R745)
[[5]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R767-R773)
[[6]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R2769-R2775)
[[7]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2R8124-R8130)
**Minor improvements:**
* Fixed smart quote usage in the descriptions for "Moom" and "Splice" in
`apps.json` for better typographic consistency.
[[1]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2L4790-R4839)
[[2]](diffhunk://#diff-4c1446cfc02c6bb0bda874481e333c65b84e184fcea52f656b49a6489f73c9c2L6876-R6925)
This pull request adds support for several new Windows applications to
the maintained apps list by introducing new JSON manifest files and
corresponding install/uninstall scripts. Each manifest provides
configuration details required for automated installation and
categorization.
**New application manifests added:**
_Productivity applications:_
* Added `nagstamon.json` for Nagstamon, including install/uninstall
scripts and an installation script using Inno Setup silent options.
[[1]](diffhunk://#diff-3c74eeef956d1978f39fb41e4a4c8373a177d3ba899e30cfc7c23de097132689R1-R12)
[[2]](diffhunk://#diff-8befb290da9fe695b0d4c5725a819262c482367c26e5c725e64507abb54638d1R1-R26)
* Added manifests for Notesnook, ocenaudio, OpenRefine, Portfolio
Performance, PreForm, Proton Drive, Readest, Remote Desktop Manager,
Royal TSX, and RetroArch.
[[1]](diffhunk://#diff-8f46fa9ee50b09b7c763c04146a369add5d7edec998ccb1fdcd8b961d6250f2cR1-R13)
[[2]](diffhunk://#diff-3e717b6b7498ecf39f00e628d51b6b6884545e9a781605fba7ec3fdd3e9ece35R1-R12)
[[3]](diffhunk://#diff-ef74fc4e086aabedf80c1ef26493442f24e01dbbbfc169ecde810b6ecfbbc154R1-R12)
[[4]](diffhunk://#diff-0e0d13f35ef324e599a8487825d4844c2f60ad4d1bc68dc2a4f06f8276b85c5dR1-R12)
[[5]](diffhunk://#diff-c395a54083c1e88011dae0ba639b32dcb173ce21b0e21abb8b65ff5335418c38R1-R12)
[[6]](diffhunk://#diff-3a05b3cd4f042b709d41364f93b1d9cea907f0ad8bccf9514cda282a2c2632a3R1-R12)
[[7]](diffhunk://#diff-093dfe2c06862cee70bf9b57dcd535660a41665eba49b095b91b8fa6ffcdf99dR1-R12)
[[8]](diffhunk://#diff-09f2f1905ce5794bf248dcf0d2724b435a2255451adeeac3226197ceea7863f9R1-R10)
[[9]](diffhunk://#diff-00f35514528449c1248f5369bd4143470a48692415b228615c23326f5cbccc87R1-R10)
[[10]](diffhunk://#diff-1ccb271d6fb63b2a250720c43073502dc71c1b1adc6ffd951de002ea426ef785R1-R12)
_Developer tools:_
* Added manifests for NoSQL Workbench, Proxyman, and Reqable, each with
install/uninstall scripts.
[[1]](diffhunk://#diff-13c131b80d23c96d4a163c3842f6b5138b908a478b89edb4a42d5379ed7ba174R1-R12)
[[2]](diffhunk://#diff-e963cb7961788f69a34e407e6ae046cf13dc66af1e2ac0f57a42cdf1b114c568R1-R12)
[[3]](diffhunk://#diff-da81ab2f561640b12b95cae1ceb2ab022f228acdfc94d9005e885261d52224a5R1-R12)
_Browsers:_
* Added manifests for Pale Moon and Safe Exam Browser, including
install/uninstall scripts.
[[1]](diffhunk://#diff-3cee4f5e3d10ec8db232ae70aac509b86ca0eb4d5e4f97f677ecba66a178232eR1-R12)
[[2]](diffhunk://#diff-211c50486f9997fbdd63aa081c265a8e6d27d91f6ed00237d3f3e92f41bfcd98R1-R12)
_Other tools:_
* Added manifest for ProtoPie and Requestly, both with install/uninstall
scripts.
[[1]](diffhunk://#diff-8daee55ad74b517db4b49aaef6e80a329e27702a5e6f81c280685ebe520c6c62R1-R12)
[[2]](diffhunk://#diff-9c8c73d3492b7bf6cd819f2f6ba3a012441f4a8d51ecffd99b101462e074756bR1-R13)
**Script additions:**
* Introduced a PowerShell install script for Nagstamon
(`nagstamon_install.ps1`) that uses silent install flags for unattended
installation.
These changes expand the catalog of supported Windows applications,
enabling automated deployment and management for a wider range of
software.
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Automated ingestion of latest Fleet-maintained app data.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Updated metadata for 25+ maintained applications across Windows and
macOS platforms, including Docker, Discord, Slack, Spotify, and others,
to reflect current available versions.
* Added frozen state configuration for Fire Alpaca and NVIDIA GeForce
NOW Homebrew packages.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
Co-authored-by: Allen Houchins <allenhouchins@mac.com>
This pull request adds support for several new Windows applications to
the maintained apps catalog by introducing new JSON manifest files under
`ee/maintained-apps/inputs/winget/`. Each manifest specifies
installation details, categorization, and, where needed, custom
install/uninstall scripts. The additions cover a mix of productivity,
developer tools, and communication apps.
**New application manifests added:**
_Productivity apps:_
* Added manifests for `ActivityWatch`, `AirParrot`, `Bdash`, `Binance`,
`Biscuit`, `BreakTimer`, `darktable`, `Descript`, `DevToys`, `dupeGuru`,
`Dynalist`, `Electrum`, `GDevelop`, and `Gephi`, each with relevant
install/uninstall scripts and metadata.
[[1]](diffhunk://#diff-55387cfd17c8952a5a5fe56f9072156a285797be5316796f7a1bec6a190170b1R1-R12)
[[2]](diffhunk://#diff-b6391ec86660a9cbcbe90756daea60701eb69b6e0ebbde2b0d8c75dd1a31a126R1-R11)
[[3]](diffhunk://#diff-04b0ac58d3fd3d42504786f39d612dc89bde16512d954bbf1646547d15837c6fR1-R13)
[[4]](diffhunk://#diff-12047bbb053e94f70e18af209bc7b901c37df285ca753549c619cc409b3da361R1-R13)
[[5]](diffhunk://#diff-984aab5373578ee3278d33367fc48b7d67c3ddb59b35d257ef170bb8ee62aaf4R1-R13)
[[6]](diffhunk://#diff-4e06e7c7940663923b6210a19495dd13eeb605d368312718402136666edb2d23R1-R13)
[[7]](diffhunk://#diff-e4ec2c2ab61f6a9de45914b1ca8ee08ce4cde504e4e595341a776a5e69dd5862R1-R12)
[[8]](diffhunk://#diff-b7a6f3074314e4d52a9c5b8d104247ecdbf80e526791d7a02e1819e7a7148441R1-R15)
[[9]](diffhunk://#diff-096ca15b420e419a365d998af529e92e2adfb45a1d28738cfb3009afff48b3daR1-R12)
[[10]](diffhunk://#diff-0db89ec11e8da68b0eb4e894805ae3f71258bf4844aadfd1423fe0b671e58da8R1-R12)
[[11]](diffhunk://#diff-ad484bc36aa30653876aaf4665ad1e5366088a68121163ed94399fecaa17cb7cR1-R14)
[[12]](diffhunk://#diff-1516c2e3c532aecf16b7f81e7cf4488ad1aefca791cf58f5bab1f08c1d3d0becR1-R14)
[[13]](diffhunk://#diff-133f3702736e7cc29113b3faf59cd15fd631b853f21108f19a3428c8a1dac0f7R1-R12)
[[14]](diffhunk://#diff-7b356cca2e47651ce2cdbf7b99ddd89b410185ddddf7546daaefee1d14161d5dR1-R12)
_Developer tools:_
* Added manifests for `Cherry Studio`, `Dataflare`, `DbVisualizer`, and
`Geany`, categorized as developer tools and including install/uninstall
scripts.
[[1]](diffhunk://#diff-8c85cc5f00362d25db8bc87ecd1135e4038b5dbe29408cf6146ff144de02d477R1-R12)
[[2]](diffhunk://#diff-b4a1720d2b1d727613a311c4a2cfd0f1c2e0a6198c0c31605286b9ef20e30896R1-R12)
[[3]](diffhunk://#diff-7a4d41ce430b5a37d4d311c5c3ebaf3bbaef41da062db201fb496f6a2d6abb5fR1-R12)
[[4]](diffhunk://#diff-cb4abb01239b831cc4e82020821d457a018ba1ea109fbc4fe1660bc0b7839af9R1-R12)
_Communication apps:_
* Added manifests for `Fellow` and `Franz`, categorized as communication
tools with user-scope installers and scripts.
[[1]](diffhunk://#diff-284b2bdcf738397525f4e60f50da15c764c6306e8707e4f3196a9a4968a96c56R1-R12)
[[2]](diffhunk://#diff-c60796271608d278c88037acec46900c6da13731b73697b2ef08e4c3ddacd9c8R1-R12)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
## Release Notes
* **New Features**
* Added support for 30+ new Windows applications including productivity
tools (Bdash, Morgen, Fellow), utilities (dupeGuru, DevToys, Geany),
developer tools (Lapce, KNIME, GDevelop), and others (Binance, Electrum,
GOG Galaxy, Mullvad Browser, ImHex, and more).
* **Improvements**
* Updated description formatting for existing app entries.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
**Related issue:** N/A — repo cleanup
## Summary
Removes orphaned files under `ee/maintained-apps/` that have no entry in
`outputs/apps.json` and are not referenced by any input, so they are
dead
weight (never surfaced in the product UI or on fleetdm.com):
- **22 macOS `darwin.json` outputs** with no `apps.json` entry and no
corresponding `inputs/homebrew/*.json` (so nothing regenerates them):
salesforce-cli, screaming-frog-seo-spider, servo, shureplus-motiv,
silentknight, silhouette-studio, simpledemviewer, sketchup, skim,
sonos-s1-controller, sonos, studio-3t, subethaedit, sunsama, superlist,
swift-quit, swift-shift, switch, synologyassistant, systhist,
tableau-public, tresorit.
- **6 winget scripts** not referenced by any winget input's
`install_script_path`/`uninstall_script_path`:
`google_chrome_{install,uninstall}.ps1`,
`msteams_{install,uninstall}.ps1`,
`okta_verify_{install,uninstall}.ps1`.
No `apps.json` entries, inputs, or referenced files are touched. 28
files
removed, deletions only.
# Checklist for submitter
- [x] Changes file not required (no user-visible behavior change;
removes unused files only).
## Testing
- [x] Verified each removed `darwin.json` has no `apps.json` entry and
no `inputs/homebrew/*.json`.
- [x] Verified each removed script is referenced by 0 winget inputs.
- [x] Diff is deletions only (943 lines across 28 files); no
entries/inputs affected.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Removals**
* Removed installation and uninstallation scripts for Windows
applications: Chrome, MSTeams, and Okta Verify.
* Removed macOS application configurations for approximately 20
applications including Salesforce CLI, Sonos, Studio 3T, SketchUp,
Tableau Public, Tresorit, and others.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds Windows Fleet-maintained apps for apps that already exist as macOS
FMAs and ship in winget as a machine-scope MSI/WiX installer:
Bitwig Studio, Clockify, CMake, eM Client, Epic Games Launcher, Mixxx,
NAPS2, PDFsam Basic, Topaz Gigapixel AI, Topaz Photo AI, Transmission,
Zulip.
Identity fields verified against the real MSI (msiinfo) per new-fma
rules:
- fuzzy_match_name for version-bearing DisplayNames (Bitwig,
Transmission)
- program_publisher overrides where registry Publisher != winget locale
(Clockify -> CAKE.com Inc., eM Client -> eM Client s.r.o.)
- eM Client is x86-only (no x64 in winget)
Adds 25 Fleet-maintained app(s) whose cask token starts with 'N':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 24 new apps (Nagstamon, Name Mangler, NAPS2, NDI
Tools, NeoFinder, Netiquette, NetNewsWire, Netron, NetSpot, Nextcloud
Talk Desktop, Nightfall, Nitro PDF Pro, Nocturnal, NordLayer, NoSQL
Workbench, NotchNook, Notepad.exe, Notesnook, NotesOllama, Noun Project,
Novabench, Nucleo, Numi, NVIDIA GeForce NOW) with
install/uninstall/version metadata.
* **UI Changes**
* Added icons and name→icon mappings for the new applications and
expanded the software icon registry.
* **Updates**
* Expanded and reordered the maintained apps listing to include the new
entries.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Adds 43 Fleet-maintained app(s) whose cask token starts with 'A':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 50+ macOS applications including Acorn, Affinity
Suite, AirDroid, Anytype, Audio Hijack, and more
* Applications now include automated installation and management
capabilities with version tracking
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds 23 Fleet-maintained app(s) whose cask token starts with 'L':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 24 new macOS applications (Lapce, Lasso, Last Window
Quits, Latest, LaunchBar, LightBurn, LinearMouse, Lingon X, lo‑rain,
Local, LocalSend, LocationSimulator, Logseq, LookAway, Loop, Loopback,
LosslessCut, Low Profile, Lunacy, Lunar, LunaSea, Lunatask, Lychee
Slicer).
* Added corresponding app icons and installer/management entries to the
software catalog for in‑app discovery and installation.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Remove stale "frozen" flags from several input manifests and update
metadata and scripts for multiple apps. Bump package versions, installer
URLs, checksums and script references for Adobe Acrobat Pro, Backblaze,
Cloudflare WARP (Windows) and FileMaker Pro; add improved
install/uninstall scripts and more robust quit/relaunch and uninstall
handling. Also adjust minor manifest fields (categories/paths) and
refactor several script refs for reliability.
Adds 47 Fleet-maintained app(s) whose cask token starts with 'T':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 40+ new macOS apps (Tabby, Tableau Prep/Public,
Taskade, Termius, Topaz suite, TradingView, Tresorit, Trezor Suite,
Typora, and more) with install/uninstall manifests and versioned package
entries.
* **UI**
* Added icons for all newly supported apps and expanded name→icon
mappings.
* **Updates**
* Catalog/output data refreshed to include new entries and reorder
affected listings.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
JetBrains NSIS installers write the build number (e.g. 252.28238.7) as
the registry DisplayVersion, while the winget PackageVersion is the
marketing version (e.g. 2025.2.5). The auto-generated patch policy
compared osquery's programs.version (build number) against the marketing
version, so up-to-date installs always failed the policy and queued
unnecessary reinstalls.
Opt the 12 JetBrains IDE FMAs into use_display_version_for_patch so the
patch policy compares against the build number published in the winget
manifest's AppsAndFeaturesEntries. JetBrains Toolbox is excluded: its
manifest has no DisplayVersion and it is not affected.
Fixes#47478
Add support for the OpenAI Codex desktop app: create Homebrew input
(ee/maintained-apps/inputs/homebrew/codex-app.json) and a new app output
entry (ee/maintained-apps/outputs/codex-app/darwin.json) containing
version, installer URL, sha256 and install/uninstall scripts that handle
quitting/relaunch/trashing. Also add the Codex entry to
ee/maintained-apps/outputs/apps.json. Frontend assets: add a Codex SVG
icon component and update the icons index
(frontend/pages/SoftwarePage/components/icons/...), and include the PNG
app icon (website/assets/images/app-icon-codex-app-60x60@2x.png). These
changes register Codex (bundle id com.openai.codex) as a maintained
developer tool and provide installation/uninstallation logic and UI
assets.
<!-- Add the related story/sub-task/bug number, like Resolves#123, or
remove if NA -->
**Related issue:** Resolves#47462
Adds 32 Fleet-maintained app(s) whose cask token starts with 'F':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 40+ macOS apps (e.g., Fantastical, Far2L, Farrago,
Fastmail, Framer, Franz, FreeFileSync, Focusrite Control 2).
* App icons added to the software catalog for improved visual browsing.
* **Chores**
* Added packaged installer/uninstaller metadata and scripted
install/uninstall flows for the new apps to simplify management and
upgrades.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Adds 43 Fleet-maintained app(s) whose cask token starts with 'D':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 40+ new macOS applications (e.g., DaisyDisk,
Dangerzone, DarkModeBuddy, DataSpell, Deezer, DuckDuckGo, and many more)
so users can discover, install, update, and remove them via the
platform.
* Added application-specific installer/uninstaller behaviors to improve
safe installs and clean removals.
* Added UI icons for all newly supported applications for clearer visual
identification.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Add a new macOS installer script
(ee/maintained-apps/inputs/homebrew/scripts/webex_install.sh) that
handles dmg extraction, quitting/relaunching the app, backing up
existing /Applications/Webex.app, and removing stale Webex upgrade
bundles. Update the homebrew input (webex.json) to reference the new
install script path and update the darwin output
(ee/maintained-apps/outputs/webex/darwin.json) to point to the new
install_script_ref (d105863f) which contains the new script content.
<!-- Add the related story/sub-task/bug number, like Resolves#123, or
remove if NA -->
**Related issue:** Resolves#47440
Adds 55 Fleet-maintained app(s) whose cask token starts with 'P':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 40+ macOS applications to the software catalog
(productivity, utilities, browsers, developer tools — e.g., Pacifist,
Pale Moon, Paletro, Pastebot, PDF Expert, PixelSnap, Plex, Proton apps,
and more).
* **New Icons**
* Added app icons for the newly listed applications so they appear in
the Software page.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Add support for Logi Tune: include a Homebrew input manifest and
install/uninstall scripts, add a transformer to override the installer
URL to Logitech's enterprise PKG (and set SHA256 to "no_check"), and
register the app in outputs. Also add darwin output refs with version,
installer URL and embedded script refs, update apps.json to list Logi
Tune, and add a frontend icon component + PNG asset and icon map entry.
The PKG override is used because the Homebrew DMG contains a GUI-only
installer without a silent mode; version is still sourced from Homebrew.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
## Release Notes
* **New Features**
* Added Logi Tune application support on macOS, including installation,
removal, and visual identification in the software catalog.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds 38 Fleet-maintained app(s) whose cask token starts with 'R':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 38+ new macOS apps (Radio Silence → RunJS) across
Productivity, Developer Tools, Security, and Utilities.
* Added installer/update manifests for these apps so they appear in app
listings and can be installed/updated.
* Added new app icons for all newly supported apps to improve UI display
and recognition.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Delete Dell Display Manager from the codebase: remove winget input (app
definition) and installer/uninstaller scripts, remove the app's outputs
(windows.json) and its entry in ee/maintained-apps/outputs/apps.json,
and remove the frontend icon component and image. Also update the icons
index to drop the import and mapping for "dell display manager".
Add Jamf PPPC Utility to maintained apps: create input metadata
(homebrew token), add app entry to apps list, and provide darwin output
with version 2.0.0, installer URL, sha256, and installer/uninstaller
script refs. Also add frontend SVG icon, update icon index, and include
the app PNG asset. This integrates PPPC Utility into the installer
catalog and UI under the Developer tools category.
Adds 21 Fleet-maintained app(s) whose cask token starts with 'E':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for 20+ macOS applications including productivity tools,
utilities, communication apps, and development software with automated
installation, updating, and removal capabilities.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds 34 Fleet-maintained app(s) whose cask token starts with 'B':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added 34 new applications to the platform including Background Music,
Balsamiq Wireframes, Bambu Studio, Bitwig Studio, BoltAI, and others.
* Added visual icons for all new applications.
* Expanded macOS application management with installer and uninstaller
support for each new app.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Hi Folks!
## Problem
Suspicious Package has the wrong `unique_identifier` used to match the
install on hosts, this would cause fleet to incorrectly detect the app
as installed.
## Fix
Corrected `unique_identifier` to `com.mothersruin.SuspiciousPackageApp`,
the actual `CFBundleIdentifier` of the app.
Verified against the installed app:
```
ross.derewianko@Rosss-MacBook-Pro ~ % defaults read "/Applications/Suspicious Package.app/Contents/Info.plist" CFBundleIdentifier
com.mothersruin.SuspiciousPackageApp
```
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Bug Fixes**
* Corrected the application identifier configuration for Suspicious
Package in the Homebrew manifest.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds 48 Fleet-maintained app(s) whose cask token starts with 'C':
inputs, outputs, app icons (TSX + website PNG), and the matching
index.ts and apps.json entries.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
## New Features
* Added support for 50+ new macOS applications including Cacher,
Caffeine, CodeEdit, Commander One, Clocker, CursorSense, and many others
across Developer Tools, Utilities, Productivity, and Communication
categories.
* Added UI components and installation/uninstallation support for all
newly supported applications.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Adds two winget-sourced Windows FMAs:
- R (RProject.R) -> 'R for Windows', Inno Setup exe, machine scope
- Git (Git.Git) -> 'Git', Inno Setup exe, machine scope
Both use custom Inno install/uninstall scripts (no MSI ProductCode) with
registry-UninstallString-based uninstall and fuzzy name matching, since
their ARP DisplayName embeds the version ('R for Windows <ver>', 'Git
version <ver>').
test-fma-windows-pr-only.yml: add has_r/has_git detection and removal of
the runner's pre-installed R and Git. Git for Windows provides the Git
Bash 'bash' the workflow uses, so the apps.json filtering is split into
its own step that runs before Git removal, and validation runs 'go run
-buildvcs=false' (so Go does not invoke the now-removed git for VCS
stamping).
SSMS was investigated but intentionally skipped: SSMS 21/22 is a Visual
Studio online bootstrapper (no MSI ProductCode, multi-GB network
install), which is a fragile FMA candidate, and the runner has no
standalone SSMS to uninstall.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for Git (Windows) with automated install/uninstall and
UI icon.
* Added support for R for Windows with automated install/uninstall and
UI icon.
* Windows testing workflow now detects and conditionally prepares
environments when Git or R are present.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Add Ableton Live Suite to maintained apps and frontend. Creates a
homebrew input
(ee/maintained-apps/inputs/homebrew/ableton-live-suite.json) and a
darwin output
(ee/maintained-apps/outputs/ableton-live-suite/darwin.json) with version
12.4.1, installer URL, sha256, and installer/uninstaller script refs.
Update apps index (ee/maintained-apps/outputs/apps.json) to include the
new app. Add a React SVG icon component and PNG asset, and register the
icon in the icons index so the UI displays the new app.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for Ableton Live Suite app installation and management
on macOS, including automatic backup of existing installations.
* Added UI icon for Ableton Live Suite in the software catalog.
* **Improvements**
* Enhanced shell command escaping to safely handle special characters
and paths in app uninstall operations.
* **Tests**
* Added comprehensive unit tests for shell escaping functionality,
including apostrophe handling in uninstall scripts.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
This pull request improves the handling of version comparisons for
Windows application patch policies in the `winget` ingester,
specifically to support installers (like python.org) where the
registry's `DisplayVersion` does not match the package's marketing
version. It introduces a new option to compare against the
`DisplayVersion`, adds robust test coverage for this logic, and onboards
Python 3.13 and 3.14 as maintained apps with correct install/uninstall
scripts.
**Patch policy improvements:**
* Added a `UseDisplayVersionForPatch` field to `inputApp` and supporting
logic in the ingester to optionally compare patch policy versions
against the registry `DisplayVersion` instead of the package version,
with error handling if no display version is found.
[[1]](diffhunk://#diff-eb6c4ae7be41e61a2292c4240de750809d40c0686fb01f80f52df056ebc9c2a8R414-R434)
[[2]](diffhunk://#diff-eb6c4ae7be41e61a2292c4240de750809d40c0686fb01f80f52df056ebc9c2a8R566-R571)
* Introduced the helper function `firstDisplayVersion` and extended the
`appsAndFeaturesEntries` struct to include `DisplayVersion`.
[[1]](diffhunk://#diff-eb6c4ae7be41e61a2292c4240de750809d40c0686fb01f80f52df056ebc9c2a8R448-R458)
[[2]](diffhunk://#diff-eb6c4ae7be41e61a2292c4240de750809d40c0686fb01f80f52df056ebc9c2a8R612)
**Test coverage:**
* Expanded test cases in `ingester_test.go` to cover the new
`UseDisplayVersionForPatch` logic, including both positive and negative
scenarios.
[[1]](diffhunk://#diff-c68f0564df3c6e38ad333d4ca6e1040305eb079eb0d168d29c95b1b250463055R347)
[[2]](diffhunk://#diff-c68f0564df3c6e38ad333d4ca6e1040305eb079eb0d168d29c95b1b250463055R374-R424)
[[3]](diffhunk://#diff-c68f0564df3c6e38ad333d4ca6e1040305eb079eb0d168d29c95b1b250463055L410-R470)
* Updated test server config and fixtures to support `DisplayVersion`
for accurate test simulation.
[[1]](diffhunk://#diff-c68f0564df3c6e38ad333d4ca6e1040305eb079eb0d168d29c95b1b250463055R482)
[[2]](diffhunk://#diff-c68f0564df3c6e38ad333d4ca6e1040305eb079eb0d168d29c95b1b250463055L447-R503)
**New maintained apps:**
* Added onboarding for Python 3.13 and Python 3.14 as maintained apps,
each with a `use_display_version_for_patch` flag, install/uninstall
scripts, and appropriate configuration.
[[1]](diffhunk://#diff-8a640dba0d8cc9ee50cef0397c5efce6655957dde836df94e6d5fb536f422fecR1-R15)
[[2]](diffhunk://#diff-e25e77b6c53c5fcc80a6d7589547873b5007dbcca660decbff3c9579c057b0fbR1-R15)
[[3]](diffhunk://#diff-fca224dfb5a7262b0b4ad68061b06552dc5291aeb8e2409fd5c9c6f8d8022dacR1-R32)
[[4]](diffhunk://#diff-b2bd0383162063c7923532a2be6b7014310a79fe3b0c681d1647bcd0fa6e3fe8R1-R147)
These changes ensure that patch policies correctly flag outdated
installs for apps where the registry version format differs from the
package version, and Python installs are now robustly managed via Fleet.
<!-- Add the related story/sub-task/bug number, like Resolves#123, or
remove if NA -->
**Related issue:** Resolves#37326
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements), JS
inline code is prevented especially for url redirects, and untrusted
data interpolated into shell scripts/commands is validated against shell
metacharacters.
- [ ] Timeouts are implemented and retries are limited to avoid infinite
loops
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
## Testing
- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)
- [ ] QA'd all new/changed functionality manually
For unreleased bug fixes in a release candidate, one of:
- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed
## Database migrations
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
## New Fleet configuration settings
- [ ] Setting(s) is/are explicitly excluded from GitOps
If you didn't check the box above, follow this checklist for
GitOps-enabled settings:
- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled
## fleetd/orbit/Fleet Desktop
- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Added support for Python 3.13 and Python 3.14 on Windows Fleet,
including install/uninstall workflows and manifests
* Option to use installer-displayed version for patch comparisons
* **Improvements**
* Normalized Windows-reported Python version strings for consistent
inventory and vulnerability matching
* Added icons for Python 3.13 and 3.14 in the software catalog
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Add support for Pd (Pure Data) on macOS: new Homebrew input manifest and
installer script, outputs and apps entry, frontend icon and image, and a
version transformer.
- Add ee/maintained-apps/inputs/homebrew/pd.json and install script
scripts/pd-install.sh that unzip the Homebrew archive, mount the
embedded DMG, copy the .app, and handle quitting/relaunching the app.
- Add ee/maintained-apps/outputs/pd/darwin.json with version, installer,
hashes, and embedded install/uninstall script refs; add app entry to
ee/maintained-apps/outputs/apps.json.
- Register Pd in Homebrew external refs mapping and add
PdVersionTransformer to convert Homebrew version strings like "0.56-3"
to the dotted macOS bundle_short_version form "0.56.3" so
version_compare and patch detection work correctly.
- Add frontend icon component and PNG asset, and update the icon index
to include Pd.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* Pure Data (Pd) now supported on macOS with automated installation,
uninstallation, and relaunch functionality.
* Pd icon added to the software page interface for visual
identification.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Add a new winget maintained-app entry for SQL Server Management Studio
(SSMS) 22. Includes input JSON (Microsoft.SQLServerManagementStudio.22)
and two PowerShell scripts: an installer wrapper that runs the Visual
Studio bootstrapper (vs_SSMS.exe) with --quiet --norestart --wait, and
an uninstaller that looks up the ARP entry for SSMS 22.x and invokes the
Visual Studio Installer uninstall verb with silent switches. Also update
outputs: add the app to apps.json and add version metadata (installer
URL, sha256, and embedded script refs) in
outputs/sql-server-management-studio/windows.json.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **New Features**
* SQL Server Management Studio 22 is now supported for installation and
management on Windows platforms, providing database developers and
administrators with essential tools for development and administration
* **Improvements**
* Extended Windows script execution timeout to support installation of
large and complex applications with substantial installation payloads
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
## New Features
* CapCut application now supported with macOS integration, including
installation, uninstallation, and version management capabilities.
* CapCut application icon added to the software library interface.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
