GithubActions
GithubActions copied to clipboard
[Bug] Manifest consistency not checked before/after autoupdate
Description
Manifest consistency check is not performed after a real force update (running checkver.ps1).
It only ensures that the update runs successfully, but does not guarantee that the manifest remains the same before and after execution.
This can lead to situations where incorrect manifests go unnoticed, potentially causing installation or autoupdate issues.
Steps to Reproduce
For instance, create a PR which incorrectly modify autoupdate.hash without running checkver:
- https://github.com/z-Fng/Scoop-Extras/pull/12
Related PRs
- https://github.com/ScoopInstaller/Extras/pull/16054 See: https://github.com/ScoopInstaller/Extras/pull/16054#issuecomment-3407674010
- https://github.com/ScoopInstaller/Extras/pull/15575 https://github.com/ScoopInstaller/Extras/pull/15767
- https://github.com/ScoopInstaller/Extras/pull/16533