Beim Release v1.7.175 brach der Upload eines ~87MB-Assets transient ab (exit 4). Dank der
draft-first-Logik blieb das Release unsichtbar (kein kaputtes Live-Release), musste aber
manuell per curl nachgeladen + publiziert werden. Der Upload nutzte einen einmaligen
fetch-Stream ohne Retry.
Fix: je Asset bis zu 3 Versuche mit Backoff bei Netzwerk-Abbruch oder 5xx; pro Versuch ein
frischer createReadStream (konsumierter Stream ist nicht erneut sendbar). 4xx (ausser
409/422 = existiert bereits) brechen weiterhin sofort ab.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
User-Report: Auto-Update schlug mit "Setup-Asset nicht gefunden" fehl, wenn der Update-Check
waehrend des Asset-Uploads eines neuen Releases feuerte. Ursache: release:gitea pushte Tag +
erstellte das Release (draft:false) VOR dem Asset-Upload → das "latest"-Release war den ganzen
Upload ueber sichtbar, aber ohne latest.yml (Gitea-Assets haben keinen digest → der Updater
holt den Integritaets-Hash aus latest.yml, das zuletzt hochgeladen wird). Fix: Release als
draft:true anlegen → alle Assets hochladen → dann PATCH draft:false. Der Updater ueberspringt
Drafts und sieht das Release erst, wenn es komplett ist.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Fix ~70 issues across the entire codebase including security fixes,
error handling improvements, test stabilization, and code quality.
- Fix TLS race condition with reference-counted acquire/release
- Bind debug server to 127.0.0.1 instead of 0.0.0.0
- Add overall timeout to MegaWebFallback
- Stream update installer to disk instead of RAM buffering
- Add path traversal protection in JVM extractor
- Cache DdownloadClient with credential-based invalidation
- Add .catch() to all fire-and-forget IPC calls
- Wrap app startup, clipboard, session-log in try/catch
- Add timeouts to container.ts fetch calls
- Fix variable shadowing, tsconfig path, line endings
- Stabilize tests with proper cleanup and timing tolerance
- Fix installer privileges, scripts, and afterPack null checks
- Delete obsolete _upload_release.mjs
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Migrate deprecated updateRepo value (Sucukdeluxe/) to new default (Administrator/)
- Mask sensitive fields (tokens, passwords) in backup export with ***
- Preserve current credentials when importing backup with masked values
- Remove 22 obsolete release_v*.mjs scripts, release_codeberg.mjs, set_version_node.mjs
- Remove release:codeberg script from package.json
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Patch latest.yml during release to use actual filenames (spaces) instead of electron-builder's dashed names
- Add download size validation before SHA512 check to catch incomplete downloads
- Retry download on integrity mismatch (up to 3 passes) with API refresh
- Re-resolve digest from latest.yml on each retry pass
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
