Skip to content

fix(update): replace active binary during self-update#84

Open
ysyneu wants to merge 1 commit into
feat/ai-srefrom
audit-fix/audit-20260714-update-active-bin
Open

fix(update): replace active binary during self-update#84
ysyneu wants to merge 1 commit into
feat/ai-srefrom
audit-fix/audit-20260714-update-active-bin

Conversation

@ysyneu

@ysyneu ysyneu commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • install self-updates over the currently executing binary path on Unix
  • verify the same absolute binary reports the expected release before declaring success
  • keep Windows behavior and messaging unchanged

Audit evidence

Production session sess_6cLDsewKHez6eMaGjU5BDT ran fduty update, but the installer wrote ~/.local/bin/flashduty while the active entry remained ~/.flashduty/bin/fduty v1.3.6.

Verification

  • make GOLANGCI_LINT=/tmp/fc-safari-audit-tools/golangci-lint-current (fmt, lint, race tests, build)
  • go test -race ./internal/cli -run 'TestRunInstaller(UpdatesInvokedBinary|RejectsShadowedInstall)' -count=1\n- /simplify --uncommitted\n- /review-to-main --uncommitted\n- /review-to-main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant