Validate auto-update downloads against release filenames

[beNative]

Summary

• add helpers that fetch official release asset names and align downloaded update files with the expected filenames
• validate auto-updater downloads before notifying the UI and surface detailed errors when filenames do not match
• block installation when filename validation fails to avoid running mismatched update artifacts

Testing

• npm run build

---

https://chatgpt.com/codex/tasks/task_e_68f36a6a12548332a531e5de288c5b4e

[chatgpt-codex-connector]

💡 Codex Review

git-automation/electron/main.ts

Lines 553 to 570 in f85308e

	// --- IPC handler to trigger restart & update ---
	ipcMain.on('restart-and-install-update', () => {
	if (!lastDownloadedUpdateValidation?.validated) {
	const errorMessage = lastDownloadedUpdateValidation?.error || 'Update filename validation has not completed successfully.';
	mainLogger.error('Preventing installation because the downloaded update failed filename validation.', {
	version: lastDownloadedUpdateValidation?.version,
	error: errorMessage,
	});
	mainWindow?.webContents.send('update-status-change', { status: 'error', message: `Cannot install update: ${errorMessage}` });
	return;
	}
	mainLogger.info('Proceeding with quitAndInstall after successful filename validation.', {
	version: lastDownloadedUpdateValidation.version,
	filePath: lastDownloadedUpdateValidation.filePath,
	expectedFileName: lastDownloadedUpdateValidation.expectedFileName,
	});
	autoUpdater.quitAndInstall();

Prevent auto-install when validation fails

The new guard in the restart-and-install-update handler stops a user-triggered install when lastDownloadedUpdateValidation is false, but electron-updater still installs downloaded updates automatically on process exit because autoInstallOnAppQuit remains at its default true. If filename validation fails (or has not completed) and the user simply closes the app or it crashes, the updater will still apply the artifact, bypassing the validation you just added and undermining the safety guarantees. Consider disabling autoInstallOnAppQuit until validation succeeds and only enabling it once lastDownloadedUpdateValidation.validated is true.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".