v2.3.0: migrate auto-update to Forgejo, add Arch build

- Switch auto-update from GitHub to Forgejo (generic provider)
- Dynamically resolve latest release URL via Forgejo API
- Add pacman target to Linux builds
- Hide direct upload URL in repository secret

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.github/workflows/release.yml

@@ -6,201 +6,117 @@ on:
       - 'v*'
   workflow_dispatch:
 
+env:
+  # Domain for small API calls (goes through Cloudflare - fine for <100MB)
+  FORGEJO_API: https://git.sanhost.net/api/v1
+  # Direct upload URL (bypasses Cloudflare for large files) - set in repo secrets
+  FORGEJO_UPLOAD: ${{ secrets.FORGEJO_UPLOAD_URL }}
+
 jobs:
-  build-windows:
-    runs-on: windows-latest
+  create-release:
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - name: Create Draft Release
+        run: |
+          curl -s -X POST "${FORGEJO_API}/repos/${GITHUB_REPOSITORY}/releases" \
+            -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\":\"${{ github.ref_name }}\",\"name\":\"${{ github.ref_name }}\",\"body\":\"Release ${{ github.ref_name }}\",\"draft\":true,\"prerelease\":false}" \
+            -o release.json
+          cat release.json
+          echo "RELEASE_ID=$(cat release.json | python3 -c 'import sys,json; print(json.load(sys.stdin)["id"])')" >> $GITHUB_ENV
+
+  build-windows:
+    needs: [create-release]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Wine for cross-compilation
+        run: |
+          sudo dpkg --add-architecture i386
+          sudo mkdir -pm755 /etc/apt/keyrings
+          sudo wget -O /etc/apt/keyrings/winehq-archive.key https://dl.winehq.org/wine-builds/winehq.key
+          sudo wget -NP /etc/apt/sources.list.d/ https://dl.winehq.org/wine-builds/ubuntu/dists/$(lsb_release -cs)/winehq-$(lsb_release -cs).sources
+          sudo apt-get update
+          sudo apt-get install -y --install-recommends winehq-stable
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
-          cache: 'npm'
       - run: npm ci
 
-      - name: Create Virtual .env File
-        # Because main.js needed physical env, we need to create virtual one to store it
-        run: |
-          $env_content = @"
-          HF2P_PROXY_URL=${{ secrets.HF2P_PROXY_URL }}
-          HF2P_SECRET_KEY=${{ secrets.HF2P_SECRET_KEY }}
-          "@
-          Set-Content -Path .env -Value $env_content
-      
       - name: Build Windows Packages
-        run: npx electron-builder --win --publish never
-      - uses: actions/upload-artifact@v4
-        with:
-          name: windows-builds
-          path: |
-            dist/*.exe
-            dist/*.exe.blockmap
-            dist/latest.yml
+        run: npx electron-builder --win --publish never --config.npmRebuild=false
+
+      - name: Upload to Release
+        run: |
+          RELEASE_ID=$(curl -s "${FORGEJO_API}/repos/${GITHUB_REPOSITORY}/releases/tags/${{ github.ref_name }}" \
+            -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" | python3 -c 'import sys,json; print(json.load(sys.stdin)["id"])')
+          for file in dist/*.exe dist/*.exe.blockmap dist/latest.yml; do
+            [ -f "$file" ] || continue
+            echo "Uploading $file..."
+            curl -s --max-time 600 -X POST "${FORGEJO_UPLOAD}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=$(basename $file)" \
+              -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" \
+              -F "attachment=@${file}" || echo "Failed to upload $file"
+          done
 
   build-macos:
+    needs: [create-release]
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
-          cache: 'npm'
       - run: npm ci
 
-      - name: Create Virtual .env File
-        run: |
-          cat << EOF > .env
-          HF2P_PROXY_URL=${{ secrets.HF2P_PROXY_URL }}
-          HF2P_SECRET_KEY=${{ secrets.HF2P_SECRET_KEY }}
-          EOF
-
       - name: Build macOS Packages
         env:
-          # Code signing
           CSC_LINK: ${{ secrets.CSC_LINK }}
           CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
-          # Notarization
           APPLE_ID: ${{ secrets.APPLE_ID }}
           APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: npx electron-builder --mac --publish never
-      - uses: actions/upload-artifact@v4
-        with:
-          name: macos-builds
-          path: |
-            dist/*.dmg
-            dist/*.zip
-            dist/*.blockmap
-            dist/latest-mac.yml
+
+      - name: Upload to Release
+        run: |
+          RELEASE_ID=$(curl -s "${FORGEJO_API}/repos/${GITHUB_REPOSITORY}/releases/tags/${{ github.ref_name }}" \
+            -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" | python3 -c 'import sys,json; print(json.load(sys.stdin)["id"])')
+          for file in dist/*.dmg dist/*.zip dist/*.blockmap dist/latest-mac.yml; do
+            [ -f "$file" ] || continue
+            echo "Uploading $file..."
+            curl -s --max-time 600 -X POST "${FORGEJO_UPLOAD}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=$(basename $file)" \
+              -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" \
+              -F "attachment=@${file}" || echo "Failed to upload $file"
+          done
 
   build-linux:
     runs-on: ubuntu-latest
+    needs: [create-release]
     steps:
       - uses: actions/checkout@v4
       - name: Install build dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y libarchive-tools
+          sudo apt-get install -y libarchive-tools rpm
 
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
-          cache: 'npm'
       - run: npm ci
 
-      - name: Create Virtual .env File
-        run: |
-          cat << EOF > .env
-          HF2P_PROXY_URL=${{ secrets.HF2P_PROXY_URL }}
-          HF2P_SECRET_KEY=${{ secrets.HF2P_SECRET_KEY }}
-          EOF
-
       - name: Build Linux Packages
+        run: npx electron-builder --linux AppImage deb rpm pacman --publish never
+
+      - name: Upload to Release
         run: |
-          npx electron-builder --linux AppImage deb rpm --publish never
-      - uses: actions/upload-artifact@v4
-        with:
-          name: linux-builds
-          path: |
-            dist/*.AppImage
-            dist/*.AppImage.blockmap
-            dist/*.deb
-            dist/*.rpm
-            dist/latest-linux.yml
-
-  build-arch:
-    runs-on: ubuntu-latest
-    container:
-      image: archlinux:latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          
-      - name: Install base packages
-        run: |
-          pacman -Syu --noconfirm
-          pacman -S --noconfirm \
-            base-devel \
-            git \
-            nodejs \
-            npm \
-            rpm-tools \
-            libxcrypt-compat
-
-      - name: Create build user
-        run: |
-          useradd -m builder
-          echo "builder ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
-
-      - name: Fix Permissions
-        run: chown -R builder:builder .
-
-      - name: Build Arch Package
-        run: |
-          sudo -u builder bash << 'EOF'
-          set -e
-          
-          cat << EOP > .env
-          HF2P_PROXY_URL=${{ secrets.HF2P_PROXY_URL }}
-          HF2P_SECRET_KEY=${{ secrets.HF2P_SECRET_KEY }}
-          EOP
-          
-          makepkg --printsrcinfo > .SRCINFO
-          makepkg -s --noconfirm
-          EOF
-
-      - name: Fix permissions for upload
-        if: always()
-        run: |
-          sudo chown -R $(id -u):$(id -g) .
-
-      - name: Upload Arch Package
-        uses: actions/upload-artifact@v4
-        with:
-          name: arch-package
-          path: |
-            *.pkg.tar.zst
-            .SRCINFO
-
-  release:
-    needs: [build-windows, build-macos, build-linux, build-arch]
-    runs-on: ubuntu-latest
-    if: |
-      startsWith(github.ref, 'refs/tags/v') || 
-      github.ref == 'refs/heads/main' || 
-      github.event_name == 'workflow_dispatch'
-
-    permissions:
-      contents: write
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Download all artifacts
-        uses: actions/download-artifact@v4
-        with:
-          path: artifacts
-
-      - name: Display structure of downloaded files
-        run: ls -R artifacts
-
-      - name: Get version from package.json
-        id: pkg_version
-        run: echo "VERSION=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
-
-      - name: Create Release
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ github.ref_name }}
-          files: |
-            artifacts/arch-package/*.pkg.tar.zst
-            artifacts/arch-package/.SRCINFO
-            artifacts/linux-builds/**/*
-            artifacts/windows-builds/**/*
-            artifacts/macos-builds/**/*
-          generate_release_notes: true
-          draft: true
-          prerelease: false
-          
+          RELEASE_ID=$(curl -s "${FORGEJO_API}/repos/${GITHUB_REPOSITORY}/releases/tags/${{ github.ref_name }}" \
+            -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" | python3 -c 'import sys,json; print(json.load(sys.stdin)["id"])')
+          for file in dist/*.AppImage dist/*.AppImage.blockmap dist/*.deb dist/*.rpm dist/*.pacman dist/latest-linux.yml; do
+            [ -f "$file" ] || continue
+            echo "Uploading $file..."
+            curl -s --max-time 600 -X POST "${FORGEJO_UPLOAD}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=$(basename $file)" \
+              -H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" \
+              -F "attachment=@${file}" || echo "Failed to upload $file"
+          done

backend/appUpdater.js

@@ -4,6 +4,10 @@ const logger = require('./logger');
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const https = require('https');
+
+const FORGEJO_API = 'https://git.sanhost.net/api/v1';
+const FORGEJO_REPO = 'sanasol/hytale-f2p';
 
 class AppUpdater {
   constructor(mainWindow) {
@@ -14,6 +18,34 @@ class AppUpdater {
     this.setupAutoUpdater();
   }
 
+  /**
+   * Fetch the latest non-draft release tag from Forgejo and set the feed URL
+   */
+  async _resolveUpdateUrl() {
+    return new Promise((resolve, reject) => {
+      https.get(`${FORGEJO_API}/repos/${FORGEJO_REPO}/releases?limit=5`, (res) => {
+        let data = '';
+        res.on('data', (chunk) => data += chunk);
+        res.on('end', () => {
+          try {
+            const releases = JSON.parse(data);
+            const latest = releases.find(r => !r.draft && !r.prerelease);
+            if (latest) {
+              const url = `https://git.sanhost.net/${FORGEJO_REPO}/releases/download/${latest.tag_name}`;
+              console.log(`Auto-update URL resolved to: ${url}`);
+              autoUpdater.setFeedURL({ provider: 'generic', url });
+              resolve(url);
+            } else {
+              reject(new Error('No published release found'));
+            }
+          } catch (e) {
+            reject(e);
+          }
+        });
+      }).on('error', reject);
+    });
+  }
+
   setupAutoUpdater() {
 
     // Configure logger for electron-updater
@@ -216,8 +248,10 @@ class AppUpdater {
   }
 
   checkForUpdatesAndNotify() {
-    // Check for updates and notify if available
-    autoUpdater.checkForUpdatesAndNotify().catch(err => {
+    // Resolve latest release URL then check for updates
+    this._resolveUpdateUrl().catch(err => {
+      console.warn('Failed to resolve update URL:', err.message);
+    }).then(() => autoUpdater.checkForUpdatesAndNotify()).catch(err => {
       console.error('Failed to check for updates:', err);
       
       // Network errors are not critical - just log and continue
@@ -245,8 +279,10 @@ class AppUpdater {
   }
 
   checkForUpdates() {
-    // Manual check for updates (returns promise)
-    return autoUpdater.checkForUpdates().catch(err => {
+    // Manual check - resolve latest release URL first
+    return this._resolveUpdateUrl().catch(err => {
+      console.warn('Failed to resolve update URL:', err.message);
+    }).then(() => autoUpdater.checkForUpdates()).catch(err => {
       console.error('Failed to check for updates:', err);
       
       // Network errors are not critical - just return no update available

dev-app-update.yml

@@ -1,3 +1,2 @@
-provider: github
-owner: amiayweb # Change to your own GitHub username
-repo: Hytale-F2P
+provider: generic
+url: https://git.sanhost.net/sanasol/hytale-f2p/releases/latest/download

package.json

@@ -1,6 +1,6 @@
 {
   "name": "hytale-f2p-launcher",
-  "version": "2.2.2",
+  "version": "2.3.0",
   "description": "A modern, cross-platform launcher for Hytale with automatic updates and multi-client support",
   "homepage": "https://github.com/amiayweb/Hytale-F2P",
   "main": "main.js",
@@ -118,9 +118,8 @@
       "createStartMenuShortcut": true
     },
     "publish": {
-      "provider": "github",
-      "owner": "amiayweb",
-      "repo": "Hytale-F2P"
+      "provider": "generic",
+      "url": "https://git.sanhost.net/sanasol/hytale-f2p/releases/latest/download"
     }
   }
 }