Updater 3.4 – Lifecycle Hardening (#28)
Production-ready updater lifecycle hardening with final-head checks, Windows PowerShell 5.1 compatibility, reproducible package generation, provenance validation, payload rollback protection and documented acceptance.
This commit was merged in pull request #28.
This commit is contained in:
Masterluke77
+74
-30
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema": "vendoo-release-manifest-v1",
|
||||
"version": "1.43.0",
|
||||
"updaterVersion": "3.3.0",
|
||||
"updaterVersion": "3.4.0",
|
||||
"mode": "overlay-with-explicit-removals",
|
||||
"requiredFiles": [
|
||||
"package.json",
|
||||
@@ -15,10 +15,14 @@
|
||||
"scripts/updater/Vendoo.Updater.Preflight.ps1",
|
||||
"scripts/updater/Vendoo.Updater.UI.ps1",
|
||||
"scripts/updater/Vendoo.Updater.Host.ps1",
|
||||
"scripts/updater/Vendoo.Updater.Worker.ps1",
|
||||
"tools/apply-release-manifest.mjs"
|
||||
"scripts/updater/Vendoo.Updater.Worker34.ps1",
|
||||
"tools/apply-release-manifest.mjs",
|
||||
"tools/updater-lifecycle-3.4.mjs",
|
||||
"tools/check-release-payload-3.4.mjs"
|
||||
],
|
||||
"removedFiles": [
|
||||
"scripts/updater/Vendoo.Updater.Worker.ps1"
|
||||
],
|
||||
"removedFiles": [],
|
||||
"files": [
|
||||
{
|
||||
"path": ".dockerignore",
|
||||
@@ -57,8 +61,8 @@
|
||||
},
|
||||
{
|
||||
"path": ".github/workflows/ci.yml",
|
||||
"sha256": "384990816ba3295cc6458d7d808422cc25cfc2e9cf9598b9052f7aadc7f70b6b",
|
||||
"size": 4233
|
||||
"sha256": "c0e80dbafb1d1491b851eb002dc323e52ea89e7e0456dde034f3303a8f4751c2",
|
||||
"size": 8173
|
||||
},
|
||||
{
|
||||
"path": ".github/workflows/release.yml",
|
||||
@@ -67,8 +71,8 @@
|
||||
},
|
||||
{
|
||||
"path": ".github/workflows/sync-release-manifest.yml",
|
||||
"sha256": "f25e9fe77a8d3c419b37b22f226f9d2e2ed69820894288be5b4bb09ac10bab1a",
|
||||
"size": 1342
|
||||
"sha256": "9067f929284d7a524013e41658a91d6da6993a931efce84530ecc05363fb0ca2",
|
||||
"size": 2495
|
||||
},
|
||||
{
|
||||
"path": ".github/workflows/vendoo-production-deploy.yml",
|
||||
@@ -690,6 +694,11 @@
|
||||
"sha256": "581e0d192e08a00d8f19b325320fecc3634c487fd3a75135852546fd6fc2cccc",
|
||||
"size": 584
|
||||
},
|
||||
{
|
||||
"path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_4.md",
|
||||
"sha256": "dc6ae417a4ec45ac4d65ac4f9d5f1eae45d1af2e4988fd124547113b265ff493",
|
||||
"size": 5724
|
||||
},
|
||||
{
|
||||
"path": "docs/architecture/CATALOG_MEDIA_MODULES_1_39_0.md",
|
||||
"sha256": "b39d2d892068e1313fc00c9345d54240b6d50caf8a940261a088e67d8778ac63",
|
||||
@@ -900,6 +909,11 @@
|
||||
"sha256": "9c8957ea1593b55e9fe6786fa87fbb156874c7be3e3a54e0987bd94d18fb6bf0",
|
||||
"size": 970
|
||||
},
|
||||
{
|
||||
"path": "docs/PRODUCTION_UPDATER_3_4.md",
|
||||
"sha256": "e6264636042b53ac1728614d0341f14c26264f3b73f52ffcba3fbd4f6f8fe179",
|
||||
"size": 8326
|
||||
},
|
||||
{
|
||||
"path": "docs/PUBLISH_CENTER_2026.md",
|
||||
"sha256": "4f74fef6877126d2579356b9731955e29f05ea8b55b59abb91569e47730a1c3f",
|
||||
@@ -2027,8 +2041,8 @@
|
||||
},
|
||||
{
|
||||
"path": "package.json",
|
||||
"sha256": "cbc637abe9c70f94b51daeeca2eba33be31a55327ee1b5da9e5cf12552aed666",
|
||||
"size": 4434
|
||||
"sha256": "cd21451f91312c33bc9bd5b808103c3428854587cc8e9b5ba3b2908085043344",
|
||||
"size": 4759
|
||||
},
|
||||
{
|
||||
"path": "platforms/ebay-de.mjs",
|
||||
@@ -2407,23 +2421,23 @@
|
||||
},
|
||||
{
|
||||
"path": "scripts/updater/Vendoo.Updater.Host.ps1",
|
||||
"sha256": "01f330e1bcd05ddf48685b9382057be7aa8e9329538d3c6e5044bb17129c53c4",
|
||||
"size": 5807
|
||||
"sha256": "f02c56bd0dc13eca7830f8cbd7de94a6cba8331504176694878834f43e6b3495",
|
||||
"size": 5828
|
||||
},
|
||||
{
|
||||
"path": "scripts/updater/Vendoo.Updater.Preflight.ps1",
|
||||
"sha256": "180adf209ea2c4f7d7a64594e231ecd5508dd44993cce15c0d871aa0a1b6e83a",
|
||||
"size": 3605
|
||||
"sha256": "ef91ccf925e7a8a1c8f27ddf2d1d7b997249798a63334f8fe1b5d27626eb525e",
|
||||
"size": 3607
|
||||
},
|
||||
{
|
||||
"path": "scripts/updater/Vendoo.Updater.UI.ps1",
|
||||
"sha256": "ddf685413aa052bbc7b150bd396ff796ba62b30d9db30fa25f2c47fa50c85ab1",
|
||||
"size": 28122
|
||||
"sha256": "b499570054f409310cbb8c4f89af7ce7e26b7f226b630a1f644aadbd2cee0fe4",
|
||||
"size": 28166
|
||||
},
|
||||
{
|
||||
"path": "scripts/updater/Vendoo.Updater.Worker.ps1",
|
||||
"sha256": "5b7ea5829d0f7499e418d546d0a05ef63557dd5a9a2b4ba60ac9f0e2c9617a51",
|
||||
"size": 30578
|
||||
"path": "scripts/updater/Vendoo.Updater.Worker34.ps1",
|
||||
"sha256": "0cae461ee0c1499314a9ad1eab2650f9c0a2d3e22d03b712d5a6164e93acc03c",
|
||||
"size": 35852
|
||||
},
|
||||
{
|
||||
"path": "SECURITY.md",
|
||||
@@ -2465,10 +2479,20 @@
|
||||
"sha256": "3ddece908ffdfb15c94852c0fcc554ce7de39725650b4d139d0afc2f59297a55",
|
||||
"size": 889
|
||||
},
|
||||
{
|
||||
"path": "tools/build-deterministic-zip.py",
|
||||
"sha256": "844ceacf2d3d90c5d948233b2ba1a51ae9f913c1b13a07eacc77888ebc2b7877",
|
||||
"size": 2101
|
||||
},
|
||||
{
|
||||
"path": "tools/build-release.mjs",
|
||||
"sha256": "fd35ee48f4c0ae1d14f7ffe9e9b27a5802305b6dfa7726f3df79e03a0e57335a",
|
||||
"size": 2368
|
||||
"sha256": "d00a8998e093d24ea3ff1cea88d9d00ed14a17d61ceb80517dc9b849b10a1190",
|
||||
"size": 3585
|
||||
},
|
||||
{
|
||||
"path": "tools/check-release-payload-3.4.mjs",
|
||||
"sha256": "f4fad67726a0926867652c5e5e0071d9191c51a4555c178ccec1a817b7edcd26",
|
||||
"size": 4038
|
||||
},
|
||||
{
|
||||
"path": "tools/check-syntax.mjs",
|
||||
@@ -2492,14 +2516,19 @@
|
||||
},
|
||||
{
|
||||
"path": "tools/release-manifest-lib.mjs",
|
||||
"sha256": "45dc394a9ef255c3acde855213e23ed727c280c23c1bdf41156048268f603368",
|
||||
"size": 10320
|
||||
"sha256": "9310d33f35823692e307dcfdc87f43218fd9b3c3a1c696d9839935d1641acc57",
|
||||
"size": 11400
|
||||
},
|
||||
{
|
||||
"path": "tools/test-runtime-cleanup.mjs",
|
||||
"sha256": "5bb59f8283122f6db66e94883f04246ceb108399f97f6e961831bfe5b6b10025",
|
||||
"size": 1002
|
||||
},
|
||||
{
|
||||
"path": "tools/updater-lifecycle-3.4.mjs",
|
||||
"sha256": "d5320924be6e18dfd656fdba717789e15e6aedbd8c5afbeaffc21e141272edae",
|
||||
"size": 9982
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-capability-graph-1.40.2.mjs",
|
||||
"sha256": "e3d8c6e8dfd566acbe037ad744edbf60816152d4994698c2a9c46d2b890e246a",
|
||||
@@ -2917,8 +2946,8 @@
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-powershell-parser.ps1",
|
||||
"sha256": "140cb2adc774612c43c8e8962b7ecdbe70ca0e7def42ac0dd71b86695697e570",
|
||||
"size": 1295
|
||||
"sha256": "205b0327719ffc39a97092d5e08336262d257a8273389458fde68343bd22b6b7",
|
||||
"size": 1748
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-powershell-static.mjs",
|
||||
@@ -2990,6 +3019,11 @@
|
||||
"sha256": "2c276876f6fde314a9a7cbc7f93d14cc6a378dce4eebaec7dc1af5b0e395a779",
|
||||
"size": 8753
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-production-updater-3.4.mjs",
|
||||
"sha256": "46f1b5a658f6b406f427686ca0961ee18bb18b18d0ca3e219bfbedcc9b1522f0",
|
||||
"size": 11063
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-release-1.24.0.mjs",
|
||||
"sha256": "551ec082e47dbb54ff8c942985face7dead33b684c9e50218ba31fe20ef7d8d4",
|
||||
@@ -3047,8 +3081,8 @@
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-release-manifest-staging-3.0.mjs",
|
||||
"sha256": "36111e35cb4b4a75376a028b2407678bbce0c40585c606965f1680d4aa46afca",
|
||||
"size": 5356
|
||||
"sha256": "f5fa6b4332cde9e461f3e986a61dab80dfb1aafeb76599fa1f10add93ff5331d",
|
||||
"size": 6550
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-security-1.31.0.py",
|
||||
@@ -3170,11 +3204,21 @@
|
||||
"sha256": "0f3f684019763a14f5fbaec42e42c680cf748d930d46cd607fc61eb413ca4553",
|
||||
"size": 2360
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-updater-ci-lifecycle-3.4.mjs",
|
||||
"sha256": "02a0e0d28bfcc3424fe6929ebbe79b0e8000e35d8d4d60aa8b83622baa6800d1",
|
||||
"size": 3709
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-updater-hang-hotfix-1.43.0.mjs",
|
||||
"sha256": "ae015616e289a4bfb371a2823c35e8e5a013cbdefd4005c47ac972c2e5df7516",
|
||||
"size": 46
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-updater-start-chain-3.4.mjs",
|
||||
"sha256": "de7d34580349ef64b8236590d491dfcfab9eebb3c934821867a52312f923f662",
|
||||
"size": 3186
|
||||
},
|
||||
{
|
||||
"path": "tools/verify-updater-status-ui-1.43.0.mjs",
|
||||
"sha256": "ae015616e289a4bfb371a2823c35e8e5a013cbdefd4005c47ac972c2e5df7516",
|
||||
@@ -3187,13 +3231,13 @@
|
||||
},
|
||||
{
|
||||
"path": "UPDATE_VENDOO.bat",
|
||||
"sha256": "aab80ea7612891502fe3e6e275c864fd3c0239b9ca91738252363706a5ee4a8a",
|
||||
"sha256": "d028f3c20dc26cdabd0db1cfcff5e0ecccd1fd457894ae1c41b7d896acf8f5f4",
|
||||
"size": 1294
|
||||
},
|
||||
{
|
||||
"path": "update-manifest.json",
|
||||
"sha256": "a080d7733b65715573b9936502ce5228a8bfccd59a1766115be8cda908fa3285",
|
||||
"size": 446
|
||||
"sha256": "eb5aaabc083a6c4f837dd396712c1a6708fbb25833d9cd79543d29152a481939",
|
||||
"size": 531
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user