feat: add self updater

Author: dancixx

.github/workflows/release.yml

@@ -65,9 +65,15 @@ jobs:
           APPLE_API_KEY_P8: ${{ secrets.APPLE_API_KEY_P8 }}
           WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
           WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
+          TAURI_UPDATER_PUBLIC_KEY: ${{ secrets.TAURI_UPDATER_PUBLIC_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
           TAURI_SIGNING_RPM_KEY: ${{ secrets.TAURI_SIGNING_RPM_KEY }}
           APPIMAGETOOL_SIGN_PASSPHRASE: ${{ secrets.APPIMAGETOOL_SIGN_PASSPHRASE }}
         run: |
+          [ -n "$TAURI_UPDATER_PUBLIC_KEY" ] || { echo "Missing TAURI_UPDATER_PUBLIC_KEY secret."; exit 1; }
+          [ -n "$TAURI_SIGNING_PRIVATE_KEY" ] || { echo "Missing TAURI_SIGNING_PRIVATE_KEY secret."; exit 1; }
+
           case "$PLATFORM" in
             macos-latest)
               [ -n "$APPLE_CERTIFICATE" ] || { echo "Missing APPLE_CERTIFICATE secret."; exit 1; }
@@ -171,6 +177,9 @@ jobs:
           APPLE_API_KEY_PATH: ${{ env.APPLE_API_KEY_PATH }}
           WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
           WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
+          TAURI_UPDATER_PUBLIC_KEY: ${{ secrets.TAURI_UPDATER_PUBLIC_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
           SIGN: ${{ matrix.platform == 'ubuntu-22.04' && '1' || '' }}
           APPIMAGETOOL_FORCE_SIGN: ${{ matrix.platform == 'ubuntu-22.04' && '1' || '' }}
           SIGN_KEY: ${{ secrets.SIGN_KEY }}

README.md

@@ -95,6 +95,8 @@ yarn tauri build
 
 The release workflow (`.github/workflows/release.yml`) is configured to sign platform artifacts on macOS, Windows, and Linux.
 
+Updater support is now wired into the app runtime as well. The app checks GitHub Releases via `https://github.com/rust-dd/rsql/releases/latest/download/latest.json`, and the packaged build enables a manual "Check for Updates" action plus a silent startup check.
+
 macOS (Developer ID + notarization):
 
 - `APPLE_CERTIFICATE` (base64-encoded `.p12` Developer ID Application certificate)
@@ -116,4 +118,16 @@ Linux (AppImage + RPM signing):
 - `APPIMAGETOOL_SIGN_PASSPHRASE`
 - Optional: `SIGN_KEY` (specific GPG key id/fingerprint for AppImage signing)
 
+Updater (required for self-updates):
+
+- `TAURI_UPDATER_PUBLIC_KEY` (public key content generated by `yarn tauri signer generate`)
+- `TAURI_SIGNING_PRIVATE_KEY` (path or content of the private updater signing key)
+- Optional: `TAURI_SIGNING_PRIVATE_KEY_PASSWORD`
+
+Notes:
+
+- `bundle.createUpdaterArtifacts` is enabled, so release builds will generate signed updater artifacts and `latest.json`.
+- The updater uses the latest published GitHub release. Draft releases are not visible to clients until you publish them.
+- If you build locally without `TAURI_UPDATER_PUBLIC_KEY`, the app still builds, but the updater plugin stays disabled for that build.
+
 After secrets are configured, pushing a tag like `v1.0.1` builds signed artifacts for all platforms.

package.json

@@ -21,6 +21,8 @@
     "@tauri-apps/plugin-dialog": "^2.6.0",
     "@tauri-apps/plugin-fs": "^2.4.5",
     "@tauri-apps/plugin-opener": "^2",
+    "@tauri-apps/plugin-process": "^2.3.1",
+    "@tauri-apps/plugin-updater": "^2.10.0",
     "@types/leaflet": "^1.9.21",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",