feat: add in-app updates and IDE detection

Author: b45632

.github/workflows/release.yml

@@ -49,6 +49,21 @@ jobs:
           node-version: ${{ env.NODE_VERSION }}
           package-manager-cache: false
 
+      - name: Updater-Signierschlüssel prüfen
+        shell: bash
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+        run: |
+          if [ -z "$TAURI_SIGNING_PRIVATE_KEY" ]; then
+            echo "::error::Repository secret TAURI_SIGNING_PRIVATE_KEY fehlt. Siehe docs/updater-setup.md."
+            exit 1
+          fi
+          if [ -z "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" ]; then
+            echo "::error::Repository secret TAURI_SIGNING_PRIVATE_KEY_PASSWORD fehlt. Siehe docs/updater-setup.md."
+            exit 1
+          fi
+
       - name: Tag und App-Versionen prüfen
         shell: bash
         run: |
@@ -262,12 +277,17 @@ jobs:
         uses: tauri-apps/tauri-action@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         with:
           releaseId: ${{ needs.prepare-release.outputs.release_id }}
           tagName: ${{ env.RELEASE_TAG }}
           releaseDraft: true
           prerelease: ${{ contains(env.RELEASE_TAG, '-') }}
           retryAttempts: 2
+          uploadUpdaterJson: true
+          uploadUpdaterSignatures: true
+          updaterJsonPreferNsis: true
           releaseAssetNamePattern: "Code-Deck_[version]_[platform]_[arch][setup][ext]"
           uploadWorkflowArtifacts: true
           workflowArtifactNamePattern: "Code-Deck_[version]_[platform]_[arch]_[bundle]"

.gitignore

@@ -27,3 +27,6 @@ Thumbs.db
 *.njsproj
 *.sln
 *.sw?
+*.key
+*.key.pem
+updater-private*

CHANGELOG.md

@@ -23,6 +23,23 @@ The project follows [Semantic Versioning](https://semver.org/).
 
 ### Security
 
+## [0.2.2]
+
+### Added
+
+- Secure in-app updates from signed GitHub Release artifacts.
+- Automatic update checks on application startup.
+- Manual update checks and an update preference in Settings.
+- Download and installation progress inside the update dialog.
+- Automatic IDE detection on the first application launch.
+- Broader IDE detection for common Windows, macOS and Linux installations.
+- A test action for every saved IDE that opens the Desktop folder.
+
+### Changed
+
+- Fresh installations no longer assume that VS Code or Cursor is installed.
+- Release builds now create signed updater artifacts and `latest.json`.
+
 ## [0.2.1]
 
 ### Added
@@ -83,8 +100,8 @@ The project follows [Semantic Versioning](https://semver.org/).
 - Imported commands are never started automatically.
 - Project inspection does not modify project source files.
 
-[Unreleased]: https://github.com/JadnK/CodeDeck/compare/v0.2.1...HEAD
+[Unreleased]: https://github.com/JadnK/CodeDeck/compare/v0.2.2...HEAD
+[0.2.2]: https://github.com/JadnK/CodeDeck/compare/v0.2.1...v0.2.2
+[0.2.1]: https://github.com/JadnK/CodeDeck/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/JadnK/CodeDeck/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/JadnK/CodeDeck/releases/tag/v0.1.0
-
-[0.2.1]: https://github.com/JadnK/CodeDeck/compare/v0.2.0...v0.2.1

docs/README.md

@@ -24,3 +24,7 @@ This guide explains the app page by page. The names in bold match the current Ge
 - A **template** is a folder used as the starting point for a new project.
 
 Code Deck keeps its own configuration locally. Adding a project does not move the project folder, and opening a project does not change its source files.
+
+## Maintainer setup
+
+- [Signed in-app updater](updater-setup.md)

docs/updater-setup.md

@@ -0,0 +1,35 @@
+# In-app updater setup
+
+CodeDeck uses Tauri's signed updater and GitHub Releases. The public verification key is committed in `src-tauri/tauri.conf.json`. The private signing key must never be committed.
+
+## One-time GitHub setup
+
+Open the repository and go to:
+
+```text
+Settings → Secrets and variables → Actions → New repository secret
+```
+
+Create these secrets:
+
+| Secret | Value |
+|---|---|
+| `TAURI_SIGNING_PRIVATE_KEY` | Complete contents of the generated private key file |
+| `TAURI_SIGNING_PRIVATE_KEY_PASSWORD` | Password belonging to that private key |
+
+Keep an offline backup of both values. Losing the key or password prevents future releases from updating existing installations.
+
+## Publishing an update
+
+1. Increase the same version in `package.json`, `src-tauri/Cargo.toml` and `src-tauri/tauri.conf.json`.
+2. Update `CHANGELOG.md`.
+3. Commit and push the changes.
+4. Create and push a matching tag, for example `v0.2.3`.
+5. Let the Release workflow finish.
+6. Publish the generated draft release.
+
+The workflow uploads normal installers, signed updater bundles, signature files and `latest.json`. The app only sees a new update after the GitHub Release has been published.
+
+## Testing
+
+Version `0.2.2` is the first CodeDeck build containing the updater. Install it manually once. To test the update flow, publish a higher version such as `0.2.3`, then start `0.2.2` again.

package.json

@@ -1,7 +1,7 @@
 {
   "name": "code-deck",
   "private": true,
-  "version": "0.2.1",
+  "version": "0.2.2",
   "type": "module",
   "scripts": {
     "dev": "vite",
@@ -14,6 +14,8 @@
   "dependencies": {
     "@tauri-apps/api": "^2.8.0",
     "@tauri-apps/plugin-dialog": "^2.4.0",
+    "@tauri-apps/plugin-process": "^2.3.1",
+    "@tauri-apps/plugin-updater": "^2.10.1",
     "react": "^19.1.0",
     "react-dom": "^19.1.0"
   },