224
desktop auto-update
also Sparkle, Squirrel, electron-updater
Download a signed build, check it, and swap it on quit. Do not overwrite a running binary.
What is desktop auto-update?
A desktop updater fetches a manifest, downloads a package signed by the same identity, and applies it when the app quits or on the next launch. Windows cannot replace a running exe in place. A failed apply must leave the old version runnable.
Why does desktop auto-update matter when vibe coding?
The draft downloads a zip over HTTP and unpacks it on top of the install. There is no signature check and no way back. Or it tells the user to reinstall from a website.
How do you do desktop auto-update?
HTTPS manifest. Signature check before apply. Apply on quit. Ship a staged channel. Keep the previous version until the new one has started once.
How do you ask a model for desktop auto-update?
Auto-update (app) from a signed feed. Verify the signature before replacing files. Apply on quit, not over the running binary. If the new version fails to start, keep the old one.
What goes wrong with desktop auto-update?
An update URL that is a plain string the window can change. The page then points the updater at an attacker.