[allenhouchins]

Related issue: NA

Checklist for submitter

• Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters.
• Timeouts are implemented and retries are limited to avoid infinite loops
• If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes

Testing

• Updated the pinned version in the policy's SQL query (verified only the version string changed via git diff).

AI

AI: Claude Code (claude-sonnet-5)

Summary

Bumps the claude-desktop version pin in the "Claude up to date (Linux)" dogfood policy from 2.9939.4 to 2.19675.1, matching the newest version currently published to Anthropic's apt repository for both supported architectures.

• Old pinned version: 2.9939.4
• New pinned version: 2.19675.1
• Newest amd64 observed: 2.19675.1 — https://downloads.claude.ai/claude-desktop/apt/stable/dists/stable/main/binary-amd64/Packages
• Newest arm64 observed: 2.19675.1 — https://downloads.claude.ai/claude-desktop/apt/stable/dists/stable/main/binary-arm64/Packages

This is dogfood GitOps configuration only (it-and-security/lib/linux/policies/update-claude.yml), so no changes file is needed.

https://claude.ai/code/session_01SRBbg8wav2Ks8WbxH8iMtw

---

Generated by Claude Code

Summary by CodeRabbit

• Chores
  • Updated the version cutoff used when checking the Claude package on Linux, changing it from 2.9939.4 to 2.19675.1. This changes which package versions meet the configured check; no other user-facing changes are noted.

[Copilot]

Copilot wasn't able to review any files in this pull request. Check your content exclusion settings, including inherited policies.