claude: Add version 0.14.10 #16950
claude: Add version 0.14.10 #16950
Conversation
WalkthroughA new Scoop manifest file for Anthropic Claude v0.14.10 is added to the bucket, containing architecture-specific download URLs, SHA-256 checksums, extraction configuration, executable shortcut mapping, version checking rules, and automatic update instructions. Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
All changes look good. Wait for review from human collaborators. claude
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Fix all issues with AI agents
In @bucket/claude.json:
- Around line 28-37: The autoupdate block lacks hash extraction for integrity
checks; update the autoupdate -> architecture entries for "64bit" and "arm64" to
add a "hash" object that points to the corresponding RELEASES file URL and uses
a regex to capture the SHA1 for the AnthropicClaude-$version-full.nupkg filename
(refer to the existing autoupdate, architecture, 64bit and arm64 entries and add
hash.url = the RELEASES URL and hash.regex to capture
^([A-Fa-f0-9]+)\s+AnthropicClaude-\$version-full\.nupkg so the autoupdate
process can automatically extract and verify the file hash).
📜 Review details
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (1)
bucket/claude.json
🧰 Additional context used
🧠 Learnings (3)
📓 Common learnings
Learnt from: o-l-a-v
Repo: ScoopInstaller/Extras PR: 16378
File: bucket/compactgui.json:20-22
Timestamp: 2025-10-19T13:58:23.389Z
Learning: In the ScoopInstaller/Extras repository, the CompactGUI manifest removed hash verification from the autoupdate block because the hash verification mechanism (scraping SHA-256 from release page HTML) is no longer available in newer CompactGUI releases. GitHub asset digests exist in beta releases but not in v3.8.0, and Scoop doesn't have built-in support for extracting from GitHub API asset digests.
Learnt from: Gitoffthelawn
Repo: ScoopInstaller/Extras PR: 16106
File: bucket/czkawka-gui.json:25-25
Timestamp: 2025-09-05T09:41:52.653Z
Learning: For czkawka-gui manifests in Scoop Extras, the correct upstream filename pattern for Windows GUI builds in recent versions uses "gtk46" (without underscore), not "gtk_46" (with underscore). The autoupdate URL should use "windows_czkawka_gui_gtk46.zip" format. This was confirmed by a working 10.0.0 update with valid hash.
Learnt from: haussmann
Repo: ScoopInstaller/Extras PR: 16863
File: bucket/browseros.json:15-17
Timestamp: 2025-12-21T13:49:44.001Z
Learning: In Scoop manifests, when a URL uses a fragment like `#/dl.7z`, Scoop automatically extracts the archive after download. For nested archives (like BrowserOS), the downloaded installer may contain another archive (e.g., `chrome.7z`) that requires explicit extraction via the installer script using `Expand-7zipArchive`. The installer script should reference the inner archive name, not the outer `dl.7z`.
Learnt from: Gitoffthelawn
Repo: ScoopInstaller/Extras PR: 16106
File: bucket/czkawka-gui.json:25-25
Timestamp: 2025-09-05T09:41:52.653Z
Learning: For czkawka-gui manifests in Scoop Extras, the correct upstream filename pattern for Windows GUI builds uses "gtk46" (without underscore), not "gtk_46" (with underscore). The autoupdate URL should use "windows_czkawka_gui_gtk46.zip" format.
Learnt from: o-l-a-v
Repo: ScoopInstaller/Extras PR: 16349
File: bucket/fvim.json:45-49
Timestamp: 2025-10-16T15:59:21.258Z
Learning: In Scoop manifests, the `autoupdate.url` and `autoupdate.architecture.<arch>.url` fields must be valid URIs according to the JSON schema (defined with `"format": "uri"`). Variables like `$matchUrlx64` that contain only path segments must be combined with a base URL (e.g., `https://github.com/.../releases/download/`) to form a complete valid URI.
Learnt from: mokosiy
Repo: ScoopInstaller/Extras PR: 16428
File: bucket/multidrive.json:8-8
Timestamp: 2025-10-27T13:19:16.982Z
Learning: For MultiDrive manifests in the ScoopInstaller/Extras repository: the direct download URL at dl.atola.com causes 403 errors due to Cloudflare Bot Fight Mode blocking the Scoop bot, so GitHub Releases URLs should be used instead (e.g., https://github.com/atola-technology/multidrive/releases/download/...).
📚 Learning: 2025-11-29T22:02:34.868Z
Learnt from: Ra2-IFV
Repo: ScoopInstaller/Extras PR: 16672
File: bucket/chromium-clang.json:12-12
Timestamp: 2025-11-29T22:02:34.868Z
Learning: In the chromium-clang.json manifest (bucket/chromium-clang.json), the extract_dir value "chrome-win32" is a fixed name determined by the upstream Chromium_Clang archive structure and should not be changed, even though the manifest targets 64-bit architecture.
Applied to files:
bucket/claude.json
📚 Learning: 2025-10-19T13:58:23.389Z
Learnt from: o-l-a-v
Repo: ScoopInstaller/Extras PR: 16378
File: bucket/compactgui.json:20-22
Timestamp: 2025-10-19T13:58:23.389Z
Learning: In the ScoopInstaller/Extras repository, the CompactGUI manifest removed hash verification from the autoupdate block because the hash verification mechanism (scraping SHA-256 from release page HTML) is no longer available in newer CompactGUI releases. GitHub asset digests exist in beta releases but not in v3.8.0, and Scoop doesn't have built-in support for extracting from GitHub API asset digests.
Applied to files:
bucket/claude.json
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
- GitHub Check: WindowsPowerShell
- GitHub Check: PullRequestHandler
🔇 Additional comments (4)
bucket/claude.json (4)
1-5: LGTM! Metadata matches PR objectives.The version, description, homepage, and license are all correctly specified and align with the linked issue #16949.
16-22: The extract directory and executable location are correct.The .nupkg archive contains the
lib\net45\directory withclaude.exe(205 MB) properly located. The shortcut configuration is valid and will correctly reference the extracted executable.
23-27: Checkver configuration is correct.The regex
([\\d.]+)-fullproperly extracts version numbers from the RELEASES file, and thereverse: trueflag appropriately selects the latest version (currently 0.14.10) when multiple releases are present. The configuration follows standard Squirrel.Windows patterns and works as intended.
6-15: Verify download URLs and hashes are correct.The architecture blocks include both 64-bit and ARM64 support with Google Cloud Storage URLs. The URLs are accessible (HTTP 200), but please verify:
- The SHA-256 hashes match the actual downloaded .nupkg files
- Both architecture-specific URLs continue to work as expected
| "autoupdate": { | ||
| "architecture": { | ||
| "64bit": { | ||
| "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/AnthropicClaude-$version-full.nupkg" | ||
| }, | ||
| "arm64": { | ||
| "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/AnthropicClaude-$version-full.nupkg" | ||
| } | ||
| } | ||
| } |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check if hashes are available in the RELEASES file for Claude
echo "=== Checking RELEASES file for 64bit ==="
curl -sL "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/RELEASES" 2>&1 | head -20
echo -e "\n=== Checking RELEASES file for arm64 ==="
curl -sL "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/RELEASES" 2>&1 | head -20
echo -e "\n=== Checking for SHA256SUMS file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/SHA256SUMS" 2>&1 | head -3
echo -e "\n=== Checking for checksums.txt file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/checksums.txt" 2>&1 | head -3
echo -e "\n=== Checking for HASHES file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/HASHES" 2>&1 | head -3Repository: ScoopInstaller/Extras
Length of output: 4567
🌐 Web query:
Claude Anthropic distribution Windows nupkg hash verification Scoop package manager
💡 Result:
Short answer — yes. Recommended workflow and commands:
-
Obtain the official Claude Windows nupkg from Anthropic (their downloads/docs). [1]
-
Compute the SHA256 of the downloaded .nupkg (PowerShell):
Get-FileHash .\claude-.nupkg -Algorithm SHA256
Copy the Hash value. [4] -
Create a Scoop manifest including that SHA256 in the "hash" field (Scoop uses SHA256 by default). Example minimal manifest:
{
"version": "x.y.z",
"url": "https://.../claude-x.y.z.nupkg",
"hash": "012345... (sha256)",
"bin": "claude.exe"
}
Scoop will verify the downloaded file against that hash on install. [2][3] -
(Optional) For autoupdate, use scoop's autoupdate.hash options to extract published hashes or let Scoop download+hash when building the manifest. [3]
Sources: Anthropic downloads/docs; Scoop app-manifest and autoupdate docs; PowerShell Get-FileHash. [1][2][3][4]
References:
[1] Anthropic Claude downloads/docs. (support.anthropic.com)
[2] Scoop App Manifests (hash field). (github.com)
[3] Scoop App Manifest Autoupdate (autoupdate.hash modes). (github.com)
[4] Get-FileHash (PowerShell) usage (SHA256). (pdq.com)
If you want, I can generate a complete manifest for a specific Claude nupkg URL + hash — paste the URL or the .nupkg hash.
Citations:
- 1: https://support.anthropic.com/en/articles/10065433-installing-claude-desktop?utm_source=openai
- 2: https://github.com/ScoopInstaller/Scoop/wiki/App-Manifests?utm_source=openai
- 3: https://github.com/ScoopInstaller/Scoop/wiki/App-Manifest-Autoupdate?utm_source=openai
- 4: https://www.pdq.com/powershell/get-filehash/?utm_source=openai
Add hash extraction to the autoupdate block.
The RELEASES file is available and contains SHA1 hashes for all versions. Hash extraction can be configured to automatically extract these hashes during autoupdate, enabling file integrity verification and reducing manual maintenance.
For each architecture, add hash extraction from the RELEASES file:
Recommended hash extraction configuration
"autoupdate": {
"architecture": {
"64bit": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/AnthropicClaude-$version-full.nupkg",
"hash": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/RELEASES",
"regex": "^([A-Fa-f0-9]+)\\s+AnthropicClaude-\\$version-full\\.nupkg"
}
},
"arm64": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/AnthropicClaude-$version-full.nupkg",
"hash": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/RELEASES",
"regex": "^([A-Fa-f0-9]+)\\s+AnthropicClaude-\\$version-full\\.nupkg"
}
}
}
}🤖 Prompt for AI Agents
In @bucket/claude.json around lines 28 - 37, The autoupdate block lacks hash
extraction for integrity checks; update the autoupdate -> architecture entries
for "64bit" and "arm64" to add a "hash" object that points to the corresponding
RELEASES file URL and uses a regex to capture the SHA1 for the
AnthropicClaude-$version-full.nupkg filename (refer to the existing autoupdate,
architecture, 64bit and arm64 entries and add hash.url = the RELEASES URL and
hash.regex to capture ^([A-Fa-f0-9]+)\s+AnthropicClaude-\$version-full\.nupkg so
the autoupdate process can automatically extract and verify the file hash).
1 participant
Closes #16949
or
Relates to #14926
Summary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings.