Update script to get latest positron server version

Author: ateucher

ci/install-positron.sh

@@ -1,14 +1,34 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-# Download Positron server to temporary directory
-# Note: this is the url for x64 architecture machines
-curl -L "https://cdn.posit.co/positron/releases/server/x86_64/positron-server-linux-x64-2026.05.0-179.tar.gz" -o /tmp/positron-server.tar.gz
+GITHUB_API="https://api.github.com/repos/posit-dev/positron/releases/latest"
+CDN_BASE="https://cdn.posit.co/positron/releases"
+DEST="/tmp/positron-server.tar.gz"
 
-# Create directory
-mkdir -p /opt/positron-server
+# Find latest Positron release
+release=$(wget -qO- "$GITHUB_API" | python3 -c "import json,sys; print(json.load(sys.stdin)['tag_name'])")
+
+# Get the checksums for the latest release
+checksum_url="${CDN_BASE}/checksums/positron-${release}-checksums.json"
+checksums=$(wget -qO- "$checksum_url")
+
+filename="positron-server-linux-x64-${release}.tar.gz"
+expected=$(echo "$checksums" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d['${filename}'])")
+
+download_url="${CDN_BASE}/server/x86_64/${filename}"
 
-# Unpack Positron Server into newly created directory
-tar -xzf /tmp/positron-server.tar.gz -C /opt/positron-server --strip-components=1
+wget -q "$download_url" -O "$DEST"
 
-rm /tmp/positron-server.tar.gz
+# Verify SHA256 checksum
+actual=$(sha256sum "$DEST" | awk '{print $1}')
+
+if [ "$actual" != "$expected" ]; then
+  echo "Checksum MISMATCH: expected $expected, got $actual" >&2
+  rm -f "$DEST"
+  exit 1
+fi
+
+# Install Positron Server
+mkdir -p /opt/positron-server
+tar -xzf "$DEST" -C /opt/positron-server --strip-components=1
+rm "$DEST"