Automatic updates for v4.1 — bayanat update + admin UI + opt-in patch auto-apply#320

Open

level09 wants to merge 37 commits into

mainfrom

auto-update-simplified

Commits on Apr 17, 2026

Commits on Apr 18, 2026

fix(cli): preserve v-prefix on git tags; strip only for comparison
level09
committed
fix(cli): generate POSTGRES_* in .env + add fallback defaults in pg helpers
level09
committed
fix(tasks): read AUTO_APPLY_PATCH_UPDATES via settings.Config + wire through serialize/validation
level09
committed
docs(runbook): use sudo for update/snapshots/restore (require_root)
level09
committed
fix(installer): use pg socket by default, self-install CLI to /usr/local/bin, exempt /health from setup redirect
level09
committed
fix(cli): use socket peer auth for pg_dump/psql/pg_restore when localhost+no-password (matches backup_utils.py)
level09
committed
fix(cli): chown cloned release to bayanat so _install_deps (uv sync) can write .venv
level09
committed
fix(cli): redirect snapshot log to stderr so STATE_SNAPSHOT captures only filename
level09
committed
fix(security): copy CLI from release (not $0) and require fresh auth for update start
level09
committed
fix(security): safe .env parser (no eval) + correct snapshots-UI restore command
level09
committed
test: add end-to-end auto-update test script for Hetzner VMs
level09
committed

Commits on Apr 19, 2026