[dependabot]

Bumps github.com/mxcl/appupdater from 4.1.2 to 4.2.2.

Release notes

Sourced from github.com/mxcl/appupdater's releases.

4.2.2

Fixes an update relaunch hang when an app delegate returns .terminateLater and replies asynchronously from a Task or the main queue.

• Requests termination from the main run loop only when the main queue is free, including when another queued callback opens a modal loop.
• Adds regression coverage for nested modal loops and asynchronous termination replies.

Caller behavior: installAndRelaunch() now returns before the app quits, so code after await installAndRelaunch() can run. Complete application quiescing before calling it.

Thanks to @​kageroumado for the fix.

Changes: mxcl/AppUpdater#30

Full Changelog: mxcl/AppUpdater@4.2.1...4.2.2

4.2.1

Fixes release asset matching that could silently hide available updates.

• Short-version DMGs such as MyApp-2.1.dmg now match tags such as v2.1, using the same tolerant version parser.
• Prerelease identifiers retain their case: matching RC.1 tags and assets are accepted, while RC.1 and rc.1 remain distinct. Repository names still match case-insensitively.

Changes: mxcl/AppUpdater#28 and mxcl/AppUpdater#29

Full Changelog: mxcl/AppUpdater@4.2.0...4.2.1

4.2.0

Update failures now retain their diagnostic details and provide clearer alert messages.

• Non-2xx HTTPS responses throw AppUpdaterHTTPError, preserving the full HTTPURLResponse, including status and retry/rate-limit headers.
• AppUpdaterNetworkError.underlyingError retains the original URLError and its diagnostic context.
• Rate limits and server errors provide useful localized messages without exposing signed URLs in alert text.
• Existing HTTPS, validation, installation, cancellation, and verified TUF fallback behavior remains intact.

Error-handling compatibility

Non-2xx HTTPS responses now throw AppUpdaterHTTPError instead of AppUpdaterError.invalidHTTPResponse. Network timeouts now throw AppUpdaterNetworkError with code .timedOut instead of .operationTimedOut; process timeouts are unchanged. Retained response/error objects may contain sensitive URLs or headers; use localized error text for presentation.

Changes: mxcl/AppUpdater#27

Full Changelog: mxcl/AppUpdater@4.1.2...4.2.0

Commits

• c274ab3 Merge pull request #30 from kageroumado/relaunch-terminate-from-run-loop
• a7c59ba Terminate only when no main-queue job is on the stack
• 7ac9159 Say why termination runs from the run loop
• 992ce02 Wait for the calling job to return before terminating
• 7ba3e1c Terminate the old instance from the run loop so a terminateLater delegate can...
• a2b8989 Merge pull request #29 from mxcl/preserve-asset-prerelease-case
• 3526af2 Preserve prerelease case when matching release assets
• 662fcb2 Merge pull request #28 from kageroumado/match-asset-version-tolerantly
• d0fdea1 Match the asset's version the way the tag is parsed
• 685dff9 Merge pull request #27 from mxcl/codex/preserve-update-errors
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)