auto-update-systems

What problem does it solve?

This Skill prevents broken or malicious desktop app updates by requiring cryptographic signature verification, secure update transport, staged rollout safety, and automatic rollback to a known-good version.

Core Features & Use Cases

• Cryptographically signed update enforcement: Rejects unsigned or tampered update packages using signature verification guidance (e.g., Ed25519/minisign-style flows).
• Secure download and transport: Ensures updates are fetched over HTTPS with TLS 1.2+ and discourages certificate validation bypass.
• Reliability through staged rollouts and rollback: Adds deterministic rollout controls and rollback mechanics so users are not stranded on a faulty release.
• Version safety to stop downgrade attacks: Uses semantic version comparisons to block downgrade paths and enforce upgrade-only behavior.

Quick Start

Use the auto-update-systems skill when you are implementing or configuring a Tauri updater and want a production-grade update flow that verifies signatures, supports staged rollout, and can roll back automatically if verification or post-install checks fail.