[allenhouchins]

Related issue: NA

Bumps the pinned claude-desktop version in the "Claude up to date (Linux)" dogfood policy from 3.1623.0 to 3.6556.2, matching the newest version published to Anthropic's apt repository for both supported architectures.

• Newest amd64 version observed: 3.6556.2 (Packages index)
• Newest arm64 version observed: 3.6556.2 (Packages index)

NEW is the lower of the two newest per-architecture versions (here, both are the same), so the policy never demands a version one architecture cannot install yet.

This supersedes #56356, which targeted the older 3.6556.1 version.

Checklist for submitter

• Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters.

Testing

• QA'd all new/changed functionality manually (diffed the single changed line; policy query still matches the fleetctl policy schema and ends with < 0);)

AI

AI: Claude Code (claude-sonnet-5)

https://claude.ai/code/session_01BxC79QNhQaNspu2jq19tth

---

Generated by Claude Code

Summary by CodeRabbit

• Bug Fixes
  • Linux policy checks now flag Claude Desktop versions earlier than 3.6556.2, updating the minimum version threshold from 3.1623.0. This helps ensure version checks identify installations that are behind the current requirement.

[Copilot]

Copilot wasn't able to review any files in this pull request. Check your content exclusion settings, including inherited policies.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Source mode: Auto
• Repository: fleetdm/fleet
• Branch: bump-claude-desktop-linux-3.6556.2
• File: .coderabbit.yaml
• Commit: 7b8f6e3
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: b79198fb-1415-4120-80a7-95b130200bd0

📥 Commits

Reviewing files that changed from the base of the PR and between 2ee817f and 7b8f6e3.

📒 Files selected for processing: 1

• it-and-security/lib/linux/policies/update-claude.yml

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.

Walkthrough

The Linux Claude policy now checks whether any installed claude-desktop package version is below 3.6556.2, replacing the previous threshold of 3.1623.0.

Possibly related PRs

• fleetdm/fleet#56433: Updates the Darwin maintained-app record for the same Claude Desktop release, including its version threshold and installer metadata.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to 7b8f6

No actionable merge-blocking risk remains.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly and concisely describes the main change: updating the Linux Claude Desktop policy version to 3.6556.2.
Description check		The description explains the version change, architecture rationale, superseded pull request, manual testing, and AI usage. It is sufficiently complete for this one-line policy update; omitted checkli…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the version change, architecture rationale, superseded pull request, manual testing, and AI usage. It is sufficiently complete for this one-line policy update; omitted checklist items are not applicable or non-critical.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}