Lucas Fernandes Nogueira 690dcfd694 Merge commit from fork ...

* feat(updater): verify the version an update was signed for

The endpoint response is fetched over TLS but is not signed, and the signature
only covers the artifact, so a crafted response could pair an inflated version
with an older release's url and signature to force a downgrade to a genuine
but outdated build.

Read the version back from the signature's trusted comment and reject an
update whose announced version differs. Signatures carrying no version are
only rejected under the new requireSignedVersion option, since older CLIs did
not record one.

* fix tests

2026-09-19 20:57:51 -03:00

..

autostart

docs: cargo features (#3527)

2026-08-05 15:48:11 +08:00

barcode-scanner

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

biometric

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

cli

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

clipboard-manager

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

deep-link

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

dialog

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

fs

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

geolocation

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

global-shortcut

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

haptics

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

http

publish new versions (#3567)

2026-09-16 12:17:22 +08:00

localhost

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

log

refactor(log): log webview location after double colon (#3574)

2026-09-17 16:33:47 +08:00

nfc

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

notification

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

opener

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

os

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

persisted-scope

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

positioner

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

process

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

shell

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

single-instance

fix(single-instance): let the first instance come to front on Windows (#3592)

2026-09-18 01:23:13 +08:00

sql

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

store

publish new versions (#3567)

2026-09-16 12:17:22 +08:00

stronghold

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

updater

Merge commit from fork

2026-09-19 20:57:51 -03:00

upload

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

websocket

publish new versions (#3509)

2026-08-31 19:17:31 +08:00

window-state

chore: exclude dev-only files from published crates (#3518)

2026-07-29 09:35:15 +02:00

mirrors.txt

Remove authenticator plugin (#1723)

2024-09-03 02:41:19 +03:00