Diego Rodrigues de Sa e Souza 10f00ef274 fix(system): route in-app auto-update npm calls through the win32 shell helper (#5542) (#5797) ...

The in-app auto-update flow called execFileAsync("npm", ...) directly for the
version lookup (versionCheck.getLatestVersionFromNpmCli), dependency install,
global install, and native rebuild. On Windows npm is npm.cmd and Node >=24
refuses to execFile a .cmd without a shell (nodejs/node#52554), so those calls
threw 'spawn npm ENOENT'. Route them through buildNpmExecOptions (the same
win32-shell helper the embedded-services installer uses, fix #5379). The global
install spec is validated with SERVICE_VERSION_PATTERN before it is shell-joined
(Hard Rule #13). Not the pnpm/npx swap the issue proposed — that is the wrong
direction for an 'npm install -g' flow already solved elsewhere in-repo.

Regression guard: tests/unit/autoupdate-npm-win32-5542.test.ts.

2026-07-01 04:37:28 -03:00

..

app

fix(system): route in-app auto-update npm calls through the win32 shell helper (#5542) (#5797)

2026-07-01 04:37:28 -03:00

domain

fix(chat): harden non-streaming SSE aggregation (#5746)

2026-07-01 00:55:58 -03:00

hooks

Release v3.8.40

2026-06-29 08:40:06 -03:00

i18n

fix(providers): correct stale/broken provider metadata (#5487, #5461, #5534, #5470) (#5790)

2026-07-01 04:26:23 -03:00

lib

fix(system): route in-app auto-update npm calls through the win32 shell helper (#5542) (#5797)

2026-07-01 04:37:28 -03:00

middleware

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

mitm

Release v3.8.40

2026-06-29 08:40:06 -03:00

models

Release v3.8.33 (#4515)

2026-06-22 03:17:02 -03:00

scripts

feat(db): consolidate all database settings into SystemStorageTab (closes #1935) (#1947)

2026-05-04 19:25:41 -03:00

server

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

shared

fix(dashboard): neutral badge for unsupported validation + clickable OAuth error links (#5442, #5486) (#5795)

2026-07-01 04:34:22 -03:00

sse

docs(security): document full LOCAL_ONLY route set + GHSA-fhh6-4qxv-rpqj + audit path (#5599) (#5748)

2026-07-01 01:09:20 -03:00

store

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

types

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

instrumentation-node.ts

fix(thinking): wire Thinking-Budget boot hydration into live instrumentation path (#5312) (#5729)

2026-06-30 20:00:41 -03:00

instrumentation.ts

Add Claude prompt cache logging and exclude cache reads

2026-03-27 15:14:54 +09:00

proxy.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

server-init.ts

Release v3.8.41 (#5327)

2026-06-29 16:51:03 -03:00