Skip to content

chore: remove automatic update check and in-app self-update - #125

Merged
BaaRai merged 1 commit into
BaaRai:mainfrom
stevenAthompson:chore/remove-self-update
Oct 23, 2026
Merged

BaaRai merged 1 commit into
BaaRai:mainfrom
stevenAthompson:chore/remove-self-update

Conversation

@stevenAthompson

Copy link
Copy Markdown
Contributor

The update source was hard-coded to Autumn-27/artex, which no longer exists, and the release checksums were unsigned.

Removed:

  • selfupdate/ package and the /api/update/check|apply|rollback|stream handlers
  • the top-bar badge that queried api.github.com on every page load
  • the "Version & Updates" settings card, its API methods, and types
  • the exit-75 swap protocol in start.sh / start.bat (crash backoff remains)

Docs: README update section and CHANGELOG updated. install.sh, update.sh, and the release workflow are unchanged.

Verification: go build ./..., go vet ./..., npx tsc --noEmit.

The update source is hard-coded to a repository that no longer exists and the release checksums are unsigned. Removes the selfupdate package and the /api/update/* endpoints, the top-bar check that queried GitHub on every page load, the Version & Updates card, and the exit-75 swap protocol in the start scripts.
@BaaRai
BaaRai merged commit 3a5e7ff into BaaRai:main Oct 23, 2026
@BaaRai

BaaRai commented Oct 23, 2026

Copy link
Copy Markdown
Owner

Thanks for this, merged.

You are right about the update source: it was pinned to a repository that no longer exists, and the checksums came from the same release, so a reclaimed owner name would have meant a fully attacker-controlled update channel. Removing the whole chain is the right call for this fork, which upgrades through git plus a rebuild.

I verified the branch locally before merging: go build, go vet and tsc clean, no leftover references to the package or the endpoints, and the test suite behaves exactly like main. The README and CHANGELOG updates are accurate too.

Appreciated, feel free to send more.

BaaRai added a commit that referenced this pull request Oct 23, 2026
chore: remove automatic update check and in-app self-update
murilosoave pushed a commit to murilosoave/ARTEX that referenced this pull request Oct 25, 2026
* fix: 精简审查背景并区分人工消息与调度输入

* fix: 模型审查仅提交当前调用与选定背景

* feat: 审批来源定位原会话并移除 Worker 审查背景
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants