Skip to content

updater v2.14.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Oct 19:17
updater-v2.14.0
44293a5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[2.14.0]

  • b6f39cc5 (#3688 by @followdarko) On Linux, installing an AppImage update no longer fails with Invalid cross-device link (os error 18) when the temp or cache directory is a separate mount of the AppImage's file system, such as a bind-mounted or private /tmp. The backup now moves on to the next location, ending with the AppImage's own directory.

  • f2af373b (#3696 by @lucasfernog) On Linux, reject an AppImage update that is neither an AppImage nor a compressed AppImage (or a compressed AppImage when the zip feature is disabled) before touching the installed app. Such payloads were written over the AppImage as-is, corrupting the app.

  • 24e6451b (#3693 by @lucasfernog) On Linux, try the next temporary directory location (the user cache directory, then the directory holding the AppImage) when a temporary directory cannot be created in the previous one, instead of failing the AppImage update right away. Also avoids a panic when the app path has no parent directory.

  • a819187e (#3690 by @lucasfernog) check(), Update.download() and Update.downloadAndInstall() no longer replace the headers of the options object they are given with an array.

  • 7b7c7c62 (#3691 by @lucasfernog) Calling Update.download() again now releases the bytes of the previous download instead of keeping them in memory until the webview is destroyed.

  • 4b1ba079 (#3695 by @lucasfernog) On Android and iOS, Update::install now returns Error::UnsupportedOs instead of reporting success without installing anything.

  • fce235c3 (#3640 by @t8y2) Add Updater::restore_update to restore an update from cached release metadata, and Update::verify to verify package bytes using the configured signing key and signed-version policy. Restored updates always require the signature to bind the announced version.

    Update::install now verifies the package bytes before installing them, and Updater::check resolves to None instead of a target error when the release is not an update and has no entry for the current target.

  • d057ec47 (#3694 by @lucasfernog) Log a warning when the download URL of an update does not use https and dangerousInsecureTransportProtocol is not enabled.

  • 21ebe1f5 (#3692 by @lucasfernog) On Windows, report why launching the installer failed from the ShellExecuteW return value (for example "Access is denied" when the user declines the UAC prompt) instead of an unrelated GetLastError message.

Cargo Publish

 
Updating crates.io index
   Packaging tauri-plugin-updater v2.14.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/updater)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 24 files, 329.7KiB (82.9KiB compressed)
   Uploading tauri-plugin-updater v2.14.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/updater)
    Uploaded tauri-plugin-updater v2.14.0 to registry `crates-io`
note: waiting for tauri-plugin-updater v2.14.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-updater v2.14.0 at registry `crates-io`
Assets 2
Loading