Migrate CI to Gitea and improve live map diagnostics

launcher/src-tauri/src/updater.rs

@@ -1,4 +1,4 @@
-//! Self-update via GitHub Releases: find a newer `*-setup.exe`, download
+//! Self-update via Gitea Releases: find a newer `*-setup.exe`, download
 //! it and hand over to the installer.
 
 use crate::state::build;
@@ -42,14 +42,12 @@ pub fn is_newer(candidate: &str, current: &str) -> bool {
 
 pub async fn check(http: &reqwest::Client) -> Result<Option<UpdateInfo>> {
     let Some(repo) = build::REPO.filter(|r| !r.is_empty()) else { return Ok(None) };
-    let release: Release = http
-        .get(format!("https://api.github.com/repos/{repo}/releases/latest"))
-        .header("Accept", "application/vnd.github+json")
-        .send()
-        .await?
-        .error_for_status()?
-        .json()
-        .await?;
+    let repo = reqwest::Url::parse(repo).context("invalid release repository URL")?;
+    if repo.scheme() != "https" {
+        anyhow::bail!("release repository must use HTTPS");
+    }
+    let api = format!("{}/api/v1/repos{}/releases/latest", repo.origin().ascii_serialization(), repo.path());
+    let release: Release = http.get(api).header("Accept", "application/json").send().await?.error_for_status()?.json().await?;
     if release.draft || release.prerelease || !is_newer(&release.tag_name, env!("CARGO_PKG_VERSION")) {
         return Ok(None);
     }
@@ -68,7 +66,9 @@ pub async fn check(http: &reqwest::Client) -> Result<Option<UpdateInfo>> {
 
 /// Download the installer and start it. The caller exits the app afterwards.
 pub async fn download_and_run(http: &reqwest::Client, url: &str) -> Result<()> {
-    if !url.starts_with("https://github.com/") && !url.starts_with("https://objects.githubusercontent.com/") {
+    let expected = reqwest::Url::parse(build::REPO.unwrap_or_default()).context("invalid release repository URL")?;
+    let actual = reqwest::Url::parse(url).context("invalid update URL")?;
+    if actual.scheme() != "https" || actual.origin() != expected.origin() {
         anyhow::bail!("refusing to download an update from an unexpected host");
     }
     let dest = std::env::temp_dir().join("scopenet-launcher-setup.exe");