FaynoSync
Deployment AutomationA self-hosted, open-source API server for managing automatic and on-demand updates of cross‑platform desktop applications
Features
- Provides a REST API for clients to check for and download application updates
- Supports multiple storage backends (AWS S3, MinIO, Google Cloud Storage, DigitalOcean Spaces)
- Integrates with MongoDB for metadata persistence and Redis for performance caching
- Allows configurable update channels such as stable, beta, or nightly
Recent releases
View all 15 releases →
v1.5.12
Breaking risk
Breaking changes
- MongoDB migrations decoupled from API startup; must run `./faynoSync migrate up`/`down` explicitly.
Notable features
- Added GET /tuf/v1/metadata/targets and GET /tuf/v1/metadata/delegated endpoints
- Added tuf TypeScript example
Full changelog
Improvements
- Decoupled MongoDB migrations from API startup: the server now starts with
./faynoSynconly, and migrations run explicitly via./faynoSync migrate upor./faynoSync migrate down.
Features
- Added
GET /tuf/v1/metadata/targetsandGET /tuf/v1/metadata/delegatedendpoints to retrieve TUF metadata for targets and delegated roles. - Added tuf typescript example.
Fixes
- Fixed telemetry period aggregation for
range=weekandrange=monthto deduplicate repeatedclient_idvalues across days instead of summing daily set sizes. - Updated telemetry integration coverage to validate that
unique_clients,clients_using_latest_version, andclients_outdatedremain deduplicated at period level.
v1.5.11
New feature
Notable features
- Added `POST /tuf/v1/bootstrap/recovery` endpoint to rebuild Redis settings from persisted TUF metadata
- Asynchronous `bootstrap_recovery` task flow with lock protection, prechecks, timeout support, and status reporting
Full changelog
Features
- Added
POST /tuf/v1/bootstrap/recoveryto rebuild bootstrap Redis settings from persisted TUF metadata for already initialized repositories. - Added asynchronous
bootstrap_recoverytask flow with lock protection, recovery prechecks, timeout support, and task status reporting.
Security & Access Control
- Added RBAC edit permission checks for TUF task status, artifact publish, and artifact delete endpoints.
- Added owner resolution middleware for team users so TUF artifact operations run under resolved owner context.
Reliability
- Unified bootstrap settings persistence and recovery via a shared Redis save path, including delegated role expirations and
ROOT_SIGNINGinitialization.
API Tooling
- Updated Postman collection with bootstrap recovery API request examples.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
go
Platforms
linux
macos
windows