feat(updater): restore cached updates and verify package bytes (#3640)

* feat(updater): restore cached updates and verify package bytes

* fix(updater): keep cached update tests in the existing module

* require signed version, verify bytes, cleanup

* fix bump

* fmt

---------

Co-authored-by: Lucas Nogueira <lucas@tauri.app>
This commit is contained in:
t8y2andLucas Nogueira authored and GitHub committed 2026-10-10 14:12:13 -03:00
1 parent b53d198461
commit fce235c3fb
3 files changed
+342 -38

No files matched your search

+8
View File
@@ -0,0 +1,8 @@
---
updater: minor
updater-js: minor
---
Add `Updater::restore_update` to restore an update from cached release metadata, and `Update::verify` to verify package bytes using the configured signing key and signed-version policy. Restored updates always require the signature to bind the announced version.
`Update::install` now verifies the package bytes before installing them, and `Updater::check` resolves to `None` instead of a target error when the release is not an update and has no entry for the current target.