Lucas Fernandes Nogueira 690dcfd694 Merge commit from fork ...

* feat(updater): verify the version an update was signed for

The endpoint response is fetched over TLS but is not signed, and the signature
only covers the artifact, so a crafted response could pair an inflated version
with an older release's url and signature to force a downgrade to a genuine
but outdated build.

Read the version back from the signature's trusted comment and reject an
update whose announced version differs. Signatures carrying no version are
only rejected under the new requireSignedVersion option, since older CLIs did
not record one.

* fix tests

2026-09-19 20:57:51 -03:00

..

icons

feat(updater): add plugin (#350)

2023-05-11 13:33:24 -03:00

src

fix(updater): linux not retaining AppImage permissions, enhance tests (#1636)

2024-08-12 14:59:53 -03:00

tests

Merge commit from fork

2026-09-19 20:57:51 -03:00

.gitignore

chore: update to tauri beta.3

2024-02-19 17:10:49 -03:00

build.rs

feat: use tauri next branch, fix tests, MSRV 1.65 (#354)

2023-05-12 17:16:50 -03:00

Cargo.toml

chore: remove outdated prod features (#3525)

2026-08-04 15:45:25 +08:00

tauri.conf.json

feat(updater): option to not restart after install (#3299)

2026-07-21 18:25:16 +08:00