electron-builder publishes to GitHub but the app has no autoUpdater — users never receive updates

[Kingvic300]

Description

desktop/package.json configures electron-builder to publish release artifacts to GitHub (build.publish, line 34 onward), which is the mechanism electron-updater's autoUpdater expects to check against for new releases. However, there is no electron-updater dependency and no autoUpdater code anywhere in the desktop app's source — the only main-process file, desktop/src/index.js, never imports or calls autoUpdater.

The net effect: releases are built and published to GitHub, but a running desktop app has no mechanism to discover, download, or prompt the user to install a new version. Every user is permanently stuck on whatever version they originally installed unless they manually check GitHub and reinstall — including for security-relevant fixes (e.g. the CSP/navigation hardening issues filed alongside this one).

Verified

$ grep -rn "autoUpdater" desktop/
(no output)
$ grep -n "electron-updater" desktop/package.json
(no output)
$ grep -n "publish" desktop/package.json
    "publish": {

desktop/package.json's build.publish block configures the GitHub provider for electron-builder's packaging/release step, but nothing consumes it at runtime.

Suggested fix

Add the electron-updater package, and wire a minimal autoUpdater.checkForUpdatesAndNotify() call (guarded to only run in packaged/production builds, not npm start dev mode) into desktop/src/index.js's app.whenReady() handler, matching the GitHub publish provider already configured in package.json.

Timeframe

Claim window: 96 hours. If this issue is claimed/assigned, please submit a fix within 96 hours of assignment — after that window it may be released back up for grabs.

Community

Questions about this issue or the campaign? Join https://t.me/txioCommunity

[EngrEOOnoja]

I'd like to take this on. I'll add electron-updater as a dependency and wire autoUpdater.checkForUpdatesAndNotify() into the app.whenReady() handler in desktop/src/index.js, guarded to only run in packaged/production builds so dev mode is unaffected.

[grantfox-oss]

🦊 GrantFox — @EngrEOOnoja has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes Txio-labs/txio-desktop#1)
2. Your PR will be reviewed by the Txio-labs maintainers

Good luck! Track your progress on GrantFox.

[Kingvic300]

For help and support, join our Telegram channel: https://t.me/txioCommunity

[Kingvic300]

📢 Need help or have questions on this issue? Join the Txio Telegram community for support: https://t.me/txioCommunity