tui-update v0.3.1

tui-update 0.3.1

• The pre/post snapshot pair around an upgrade now completes: the post snapshot is created with the number the pre snapshot printed, and the preview shows where it goes. If the pre snapshot fails, the upgrade does not run; if a later step fails, the pre snapshot's number and the command that removes it are shown.
• The snapshot commands now select the snapper configuration correctly (snapper -c root create ...). Before, root was taken as the snapshot's cleanup algorithm.
• apt and dpkg progress lines that redraw in place show only their final state in the apply pane instead of every state glued together.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• c278593 0.3.1: pair the snapper post snapshot by number; clean apt progress in the apply pane (#25)

tui-update v0.3.0

tui-update 0.3.0

tui-kit v0.4.4 runs every command in a session with no terminal, so a program that asks a question fails at once instead of hanging behind the screen. The two upgrades that could ask are now handled.

• apt upgrades ask nothing. The upgrade runs as sudo -n env DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get -y -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold upgrade (or dist-upgrade). debconf takes its defaults, needrestart restarts the services left on replaced libraries, and a config file changed on the machine keeps the local version (the package's version is left beside it as .dpkg-dist). The confirm dialog shows the full command line and explains all three parts.
• Omarchy Server's updater gets the terminal. omarchy-server-update run --no-reboot is interactive by design, so it no longer runs as a background step. After the same preview and confirm, tui-update hands the terminal over to it (tea.Exec). When it exits, the screen comes back, the sequence continues and the machine is read again. It is previewed and run with sudo rather than sudo -n, because it has a terminal where sudo can ask for a password.
• --demo-machine ubuntu|omarchy runs both paths on a sample machine (the default is fedora). On the Omarchy sample machine, the hand-off shows on the real terminal what would run there and waits for Enter.
• README: new section "Nothing asks behind the screen", two new screenshots (confirm-apt, confirm-omarchy), and the install snippet now points at 0.3.0.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• 9e2a37e Non-interactive apt upgrades; Omarchy's updater as a hand-off (#21) (#22)

tui-update v0.2.2

tui-update 0.2.2: tui-kit v0.4.4

tui-update 0.2.2 moves to tui-kit v0.4.4: every package manager step now runs in its own session without a controlling terminal, so a step that would prompt fails at once instead of hanging behind the UI, and a failed step reports its meaningful line, cleaned of escape codes. Command previews are POSIX shell-quoted (the dnf and rpm query formats now read quoted), --check keeps emitting no null now that kit commands carry an Env list, the README screenshots are re-rendered with continuous box borders, and the README banner now carries the kit's stability markers.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• 614c88d 0.2.2: tui-kit v0.4.4 (#20)
• e9ffe64 Bump anchore/sbom-action/download-syft in the github-actions group (#18)
• 33a9dda Bump the github-actions group with 4 updates (#19)
• a2d8ca1 README: link the tool's page on tui.tools (#17)
• eac0a70 README: point the install snippet at the current release (#16)

tui-update v0.2.1

tui-kit v0.3.0: the dialogs wrap and scroll instead of clipping the
command preview, and the picker filters as you type.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• a449f95 Bump tui-kit to v0.3.0 (#15)

tui-update v0.2.0

Manage, not view (wave 3): create what does not exist, edit what does; lab-validated.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• 1c308b1 A code of conduct that fits on one screen (#11)
• dd66fdd Add --report, and a bug form that asks for it (#12)
• 4b4f68d Carry the OpenSSF Best Practices badge (#9)
• a3c836b Fixtures from nobody's machine (#3)
• a7d445d Let the kit detect the manager, and keep only the update-specific half (#2)
• 4702686 Pin what CI runs, fuzz the parsers, and say the releases are signed (#4)
• e0b3c06 Point the screenshot manifest at the frame that exists (#13)
• b667616 Print the whole tag message, not only its body (#8)
• 3571ba8 Say beta once, and fetch the tag annotation before releasing (#7)
• 1b57822 Security-only upgrades, snapshot toggle, package holds (#14)
• e2d1e8b Take the govulncheck note back out of ci.yml (#6)
• d618c77 Take tui-kit v0.2.8: hashed pip install, provenance bundle on the release (#10)

Changelog

• f0b4702 Drop cross-repo dispatch; the package repo and the site poll releases
• 37bfa30 Gate the release on a security job, and sign what it publishes (#1)
• 636a0a2 Stop telling readers the packages are unpublished

Changelog

• 6e872cc Packages are available from pkgs.tui.tools
• 250cde4 Re-pin the kit at v0.2.3
• d9c3ed1 Read the pending list on a machine checkupdates cannot run on
• 043fce7 Read the version banners from the captured fixtures
• 43d2b76 Ship the tool as a .deb, an .rpm and a pacman package
• 4f49f0f Show the apply screen the README was missing

Changelog

• 7429a1b Initial commit
• 30753be Make tui-update the machine's update screen