feat: Add security warning for non-GitHub built versions and update download confirmation

Author: Ayideyia

frontend/src/lang/locale/en.ts

@@ -586,6 +586,8 @@ export default {
       stable: 'Stable version',
       alpha: 'Alpha version',
       grant: 'Grant Privileges',
+      risk: 'This version is not auto-built by GitHub and may pose a security risk.',
+      stillDownload: 'Still download',
     },
     userAgent: {
       name: 'User-Agent',

frontend/src/lang/locale/zh.ts

@@ -585,6 +585,8 @@ export default {
       stable: '稳定版',
       alpha: '内测版',
       grant: '授予特权',
+      risk: '该版本非GitHub自动构建，有安全风险。',
+      stillDownload: '仍要下载',
     },
     userAgent: {
       name: '用户代理(User-Agent)',

frontend/src/views/KernelView/components/AlphaBranch.vue

@@ -2,7 +2,7 @@
 import { useI18n } from 'vue-i18n'
 import { computed, ref } from 'vue'
 
-import { useMessage } from '@/hooks'
+import { useConfirm, useMessage } from '@/hooks'
 import { useAppSettingsStore, useEnvStore, useKernelApiStore } from '@/stores'
 import {
   GrantTUNPermission,
@@ -47,6 +47,7 @@ const needUpdate = computed(() => remoteVersion.value && localVersion.value !==
 
 const { t } = useI18n()
 const { message } = useMessage()
+const { confirm } = useConfirm()
 const envStore = useEnvStore()
 const appSettings = useAppSettingsStore()
 const kernelApiStore = useKernelApiStore()
@@ -77,6 +78,13 @@ const downloadCore = async () => {
     const asset = assets.find((v: any) => v.name === assetName)
     if (!asset) throw 'Asset Not Found:' + assetName
 
+    if (asset.uploader.type !== 'Bot') {
+      await confirm('common.warning', 'settings.kernel.risk', {
+        type: 'text',
+        okText: 'settings.kernel.stillDownload',
+      })
+    }
+
     const tmp = `data/core-alpha${suffix}` // data/core-alpha.zip or data/core-alpha.gz
 
     await Makedir('data/mihomo')
@@ -123,7 +131,7 @@ const downloadCore = async () => {
 
     downloadSuccessful.value = true
 
-    message.success('Download Successful')
+    message.success('common.success')
   } catch (error: any) {
     console.log(error)
     message.error(error)

frontend/src/views/KernelView/components/StableBranch.vue

@@ -2,7 +2,7 @@
 import { useI18n } from 'vue-i18n'
 import { computed, ref } from 'vue'
 
-import { useMessage } from '@/hooks'
+import { useConfirm, useMessage } from '@/hooks'
 import { CoreWorkingDirectory } from '@/constant'
 import { useAppSettingsStore, useEnvStore, useKernelApiStore } from '@/stores'
 import {
@@ -45,6 +45,7 @@ const needUpdate = computed(() => remoteVersion.value && localVersion.value !==
 
 const { t } = useI18n()
 const { message } = useMessage()
+const { confirm } = useConfirm()
 const envStore = useEnvStore()
 const appSettings = useAppSettingsStore()
 const kernelApiStore = useKernelApiStore()
@@ -75,6 +76,13 @@ const downloadCore = async () => {
     const asset = assets.find((v: any) => v.name === assetName)
     if (!asset) throw 'Asset Not Found:' + assetName
 
+    if (asset.uploader.type !== 'Bot') {
+      await confirm('common.warning', 'settings.kernel.risk', {
+        type: 'text',
+        okText: 'settings.kernel.stillDownload',
+      })
+    }
+
     const tmp = `data/core${suffix}` // data/core.zip or data/core.gz
 
     await Makedir('data/mihomo')
@@ -119,7 +127,7 @@ const downloadCore = async () => {
 
     downloadSuccessful.value = true
 
-    message.success('Download Successful')
+    message.success('common.success')
   } catch (error: any) {
     console.log(error)
     message.error(error)

frontend/tsconfig.node.json

@@ -5,7 +5,8 @@
     "vitest.config.*",
     "cypress.config.*",
     "nightwatch.conf.*",
-    "playwright.config.*"
+    "playwright.config.*",
+    "eslint.config.*"
   ],
   "compilerOptions": {
     "composite": true,