mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-11 22:12:23 +00:00
rcourtman
f05f47f935
Fixed 12 critical issues in the update system: Critical bugs: - Cache invalidation when channel auto-detected vs explicitly provided - Data race on cache access (added proper RWMutex locking) - Incorrect error handling when already on latest version Security improvements: - Command injection prevention with version string validation - Symlink vulnerabilities in backup/restore (replaced cp with safe Go implementations) - SHA256 checksum verification for downloads - Improved backup completeness (now includes binary and VERSION file) Quality improvements: - Channel-keyed cache map instead of single cache value - Update history tracking with event IDs and rollback support - Cleanup of old temp directories (24+ hours) - Proper resource cleanup with Close() method