[dependabot]

Bumps github.com/mxcl/appupdater from 4.1.2 to 4.2.1.

Release notes

Sourced from github.com/mxcl/appupdater's releases.

4.2.1

Fixes release asset matching that could silently hide available updates.

• Short-version DMGs such as MyApp-2.1.dmg now match tags such as v2.1, using the same tolerant version parser.
• Prerelease identifiers retain their case: matching RC.1 tags and assets are accepted, while RC.1 and rc.1 remain distinct. Repository names still match case-insensitively.

Changes: mxcl/AppUpdater#28 and mxcl/AppUpdater#29

Full Changelog: mxcl/AppUpdater@4.2.0...4.2.1

4.2.0

Update failures now retain their diagnostic details and provide clearer alert messages.

• Non-2xx HTTPS responses throw AppUpdaterHTTPError, preserving the full HTTPURLResponse, including status and retry/rate-limit headers.
• AppUpdaterNetworkError.underlyingError retains the original URLError and its diagnostic context.
• Rate limits and server errors provide useful localized messages without exposing signed URLs in alert text.
• Existing HTTPS, validation, installation, cancellation, and verified TUF fallback behavior remains intact.

Error-handling compatibility

Non-2xx HTTPS responses now throw AppUpdaterHTTPError instead of AppUpdaterError.invalidHTTPResponse. Network timeouts now throw AppUpdaterNetworkError with code .timedOut instead of .operationTimedOut; process timeouts are unchanged. Retained response/error objects may contain sensitive URLs or headers; use localized error text for presentation.

Changes: mxcl/AppUpdater#27

Full Changelog: mxcl/AppUpdater@4.1.2...4.2.0

Commits

• a2b8989 Merge pull request #29 from mxcl/preserve-asset-prerelease-case
• 3526af2 Preserve prerelease case when matching release assets
• 662fcb2 Merge pull request #28 from kageroumado/match-asset-version-tolerantly
• d0fdea1 Match the asset's version the way the tag is parsed
• 685dff9 Merge pull request #27 from mxcl/codex/preserve-update-errors
• 00d7c6a Preserve HTTP responses and underlying update transport errors
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #90.