DarwinRelay 0.6.5
DarwinRelay 0.6.5 adds the supported manual release-to-release updater for source-first installations.
Highlights:
scripts/update.shupdates the Git checkout and installed menu app as one transaction instead of updating only the.app;- updates only from a clean exact stable release tag on the canonical
dcierra/darwinrelayorigin; - refuses dirty/development checkouts, split app/runtime versions, moved tags, signing-identity changes, destructive Git cleanup, and downgrades;
- stops DarwinRelay fail-closed before replacing source files, installs through the existing atomic rollback-aware app path, regenerates autostart, restarts, waits for
/healthz, and requires the authenticated doctor to returnCORE VERDICT: READY; - attempts to restore both the previous checkout and retained rollback app if activation fails;
- README and agent docs now define this as the canonical manual update path from v0.6.5 onward;
doctor.shnow detects a connected but stale unpacked Chrome extension version after an update and reports it asOPTIONAL / ACTION REQUIRED.
Existing installations on v0.6.4 or older need one final manual source-first upgrade/reinstall to v0.6.5; after that, future releases can use ./scripts/update.sh.
Validation:
- PR and post-merge CI/JavaScript CodeQL are clean;
- full local
npm testcompleted successfully; - integrity verified for 112/112 tracked regular files;
- build-only
DarwinRelay.appsmoke produced bundle version 0.6.5 and passed deep strict codesign verification; - gitleaks reported no leaks;
- zero open GitHub code-scanning alerts at release time.