feat: check for updates and install them in the app

.github/workflows/release.yml

@@ -9,19 +9,37 @@ permissions:
   contents: write
 
 jobs:
+  preflight:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check that the updater signing secrets are set
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+        run: |
+          missing=0
+          for name in TAURI_SIGNING_PRIVATE_KEY TAURI_SIGNING_PRIVATE_KEY_PASSWORD; do
+            if [ -z "${!name}" ]; then
+              echo "::error::The repository secret $name is not set; the updater artifacts cannot be signed."
+              missing=1
+            fi
+          done
+          exit "$missing"
+
   release:
+    needs: preflight
     strategy:
       fail-fast: false
       matrix:
         include:
           - platform: macos-latest
-            args: --target aarch64-apple-darwin
+            args: --target aarch64-apple-darwin --config '{"bundle":{"createUpdaterArtifacts":true}}'
           - platform: macos-latest
-            args: --target x86_64-apple-darwin
+            args: --target x86_64-apple-darwin --config '{"bundle":{"createUpdaterArtifacts":true}}'
           - platform: ubuntu-22.04
-            args: ''
+            args: --config '{"bundle":{"createUpdaterArtifacts":true}}'
           - platform: windows-latest
-            args: ''
+            args: --config '{"bundle":{"createUpdaterArtifacts":true}}'
     runs-on: ${{ matrix.platform }}
     steps:
       - uses: actions/checkout@v4
@@ -37,12 +55,16 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
       - run: npm ci
+      # Also signs the update files and merges this platform's entries into the release's latest.json.
       - uses: tauri-apps/tauri-action@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         with:
           tagName: __VERSION__
           releaseName: 'tskdeck __VERSION__'
           releaseDraft: true
           prerelease: false
+          uploadUpdaterJson: true
           args: ${{ matrix.args }}

CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.1.0] - 2026-11-06
+
+### Added
+
+- Update checks: tskdeck looks for a newer release one minute after launch and then once a day, and a card at the foot of the sidebar installs it and relaunches the app, or hides it with Later until the app quits.
+- Check for Updates… in the app menu on macOS and in the command palette, and an Updates setting with Check Now in Settings → General.
+- Signed update files and a `latest.json` manifest on each GitHub release.
+
 ## [1.0.1] - 2026-11-05
 
 ### Changed
@@ -38,6 +46,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - A content security policy for the app's windows, and an absolute path required for the `tsk` binary in Settings.
 
-[Unreleased]: https://github.com/s3rgiosan/tskdeck/compare/1.0.1...HEAD
+[Unreleased]: https://github.com/s3rgiosan/tskdeck/compare/1.1.0...HEAD
+[1.1.0]: https://github.com/s3rgiosan/tskdeck/compare/1.0.1...1.1.0
 [1.0.1]: https://github.com/s3rgiosan/tskdeck/compare/1.0.0...1.0.1
 [1.0.0]: https://github.com/s3rgiosan/tskdeck/releases/tag/1.0.0

README.md

@@ -46,6 +46,10 @@ Download the installer for your platform from the [Releases](https://github.com/
 
 Releases are unsigned.
 
+### Updates
+
+tskdeck looks for a newer release one minute after launch, and then once a day. When it finds one, a card at the foot of the sidebar shows **Install and Relaunch** and **Later**. To check at once, choose **Check for Updates…** in the app menu on macOS, or in the command palette. To stop the automatic checks, clear **Check for updates automatically** in Settings → General.
+
 ### Opening the unsigned app on macOS
 
 Move `tskdeck.app` to `/Applications`, then either right-click it and choose Open, or remove the quarantine flag:
@@ -56,7 +60,7 @@ xattr -dr com.apple.quarantine /Applications/tskdeck.app
 
 ## Settings
 
-tskdeck keeps its settings (open-task mode, keymap, path to `tsk`) in `settings.json` inside the app config directory for the identifier `com.s3rgiosan.tskdeck`:
+tskdeck keeps its settings (open-task mode, keymap, path to `tsk`, update checks) in `settings.json` inside the app config directory for the identifier `com.s3rgiosan.tskdeck`:
 
 - macOS: `~/Library/Application Support/com.s3rgiosan.tskdeck/settings.json`
 - Linux: `$XDG_CONFIG_HOME/com.s3rgiosan.tskdeck/settings.json`, or `~/.config/com.s3rgiosan.tskdeck/settings.json` when `XDG_CONFIG_HOME` is unset

package.json

@@ -1,7 +1,7 @@
 {
   "name": "tskdeck",
   "private": true,
-  "version": "1.0.1",
+  "version": "1.1.0",
   "type": "module",
   "scripts": {
     "dev": "vite",