feat(updates): enhance backup functionality and improve update checks with error handling

Author: JoachimLK

Dockerfile

@@ -29,6 +29,9 @@ WORKDIR /app
 
 ENV NODE_ENV=production
 
+# PostgreSQL client tools for database backup via /api/updates/backup
+RUN apk add --no-cache postgresql16-client
+
 RUN addgroup -S reqcore && adduser -S reqcore -G reqcore
 
 # .output is fully self-contained (server, public assets)

app/components/AppTopBar.vue

@@ -204,6 +204,7 @@ onUnmounted(() => document.removeEventListener('click', onClickOutsideUser))
               ? 'text-brand-600 dark:text-brand-400 bg-brand-50 dark:bg-brand-950/40'
               : 'text-surface-500 dark:text-surface-400 hover:text-surface-700 dark:hover:text-surface-200 hover:bg-surface-100 dark:hover:bg-surface-800'"
             title="Updates & changelog"
+            aria-label="Updates & changelog"
           >
             <ArrowUpCircle class="size-4" />
           </NuxtLink>

app/pages/dashboard/updates.vue

@@ -233,24 +233,30 @@ function formatDate(dateString: string | null | undefined): string {
             class="flex items-center justify-center size-10 rounded-lg"
             :class="versionInfo?.updateAvailable
               ? 'bg-warning-50 dark:bg-warning-950 text-warning-600 dark:text-warning-400'
-              : 'bg-success-50 dark:bg-success-950 text-success-600 dark:text-success-400'"
+              : !versionInfo && !versionLoading
+                ? 'bg-surface-100 dark:bg-surface-800 text-surface-500 dark:text-surface-400'
+                : 'bg-success-50 dark:bg-success-950 text-success-600 dark:text-success-400'"
           >
             <ArrowUpCircle v-if="versionInfo?.updateAvailable" class="size-5" />
+            <AlertTriangle v-else-if="!versionInfo && !versionLoading" class="size-5" />
             <CheckCircle2 v-else class="size-5" />
           </div>
           <div>
             <h2 class="text-base font-semibold text-surface-900 dark:text-surface-100">
-              {{ versionInfo?.updateAvailable ? 'Update available' : 'Up to date' }}
+              {{ versionInfo?.updateAvailable ? 'Update available' : !versionInfo && !versionLoading ? 'Unable to check' : 'Up to date' }}
             </h2>
             <p class="text-sm text-surface-500 dark:text-surface-400">
               <template v-if="versionLoading">
                 Checking for updates…
               </template>
-              <template v-else-if="versionInfo?.updateAvailable">
+              <template v-else-if="!versionInfo">
+                Could not check for updates. Verify your network connection and try again.
+              </template>
+              <template v-else-if="versionInfo.updateAvailable">
                 Version {{ versionInfo.latestVersion }} is available (you're on {{ versionInfo.currentVersion }})
               </template>
               <template v-else>
-                You're running the latest version ({{ versionInfo?.currentVersion }})
+                You're running the latest version ({{ versionInfo.currentVersion }})
               </template>
             </p>
           </div>
@@ -550,6 +556,11 @@ function formatDate(dateString: string | null | undefined): string {
           Node.js {{ systemInfo.nodeVersion }}
         </div>
       </div>
+
+      <div v-else class="px-6 py-8 text-center">
+        <AlertTriangle class="size-5 mx-auto text-surface-400 mb-2" />
+        <p class="text-sm text-surface-500 dark:text-surface-400">Failed to load system information.</p>
+      </div>
     </section>
 
     <!-- Expand / Collapse controls -->

server/api/updates/backup.post.ts

@@ -22,11 +22,16 @@ interface BackupResult {
 export default defineEventHandler(async (event) => {
   await requirePermission(event, { organization: ['delete'] })
 
-  const { mkdir } = await import('node:fs/promises')
+  const { mkdir, writeFile, unlink } = await import('node:fs/promises')
+  const { join } = await import('node:path')
   const backupDir = '/data/backups'
   let effectiveDir = backupDir
   try {
     await mkdir(backupDir, { recursive: true })
+    // Probe actual write access — mkdir succeeds even on read-only mounts
+    const probe = join(backupDir, `.probe-${Date.now()}`)
+    await writeFile(probe, '')
+    await unlink(probe)
   }
   catch {
     // Fall back to /tmp if /data/backups is not writable (e.g. non-Docker)

server/api/updates/version.get.ts

@@ -27,6 +27,7 @@ export default defineEventHandler(async (event) => {
           'Accept': 'application/vnd.github.v3+json',
           'User-Agent': `Reqcore/${currentVersion}`,
         },
+        signal: AbortSignal.timeout(10_000),
       },
     )