13x updates itself from a single static HTTPS file you control, verifies every build against an embedded key, and falls back to silent when offline. No app store, no account, no telemetry.
Auto-Update keeps 13x current without app stores, accounts, or telemetry. On startup the app silently asks one static HTTPS endpoint for a version manifest; if a newer signed build exists, a slim bar offers Install & Restart. 13x then downloads the installer, verifies its minisign signature against a public key baked into the build, installs it, and relaunches. The only thing that leaves the machine is the request for the manifest file.
Every update payload is verified against a minisign public key embedded in the build (plugins.updater.pubkey) before it installs. An attacker who controls the manifest host still cannot push an unsigned or tampered binary.
The single deliberate network call is the HTTPS request for the version manifest. Nothing else is sent to the endpoint — consistent with the 13x no-telemetry, local-first stance.
The startup check runs as check(false): if the endpoint is missing or unreachable, the failure is swallowed and status falls back to idle. A dead or placeholder endpoint can never break launch.
There is no background auto-download and no scheduled polling. 13x checks once at startup and on manual click, and never downloads or installs without your explicit Install & Restart.
The endpoint is just a static HTTPS JSON file, so GitHub Releases, S3/R2, Netlify, Vercel, or your own server all work by swapping one string. Update metadata never goes through a third-party app store.
The signed -setup.exe is both the first-install installer and the auto-update payload. Enabling createUpdaterArtifacts is all it takes — there is no separate updater build to maintain.
Silent check on launch
App startup fires one quiet check against the manifest endpoint. If a newer signed build exists it raises the update bar; otherwise it stays invisible and swallows any network error.
A slim bar offers the update
When an update is available the monochrome bar reads UPDATE AVAILABLE — 13x v<version>, with release notes pulled from the manifest body. Idle and checking states stay quiet in the TopBar version button instead of nagging.
Install & Restart
Click Install & Restart and 13x downloads the installer with a live progress fill, verifies its signature, installs it (passive on Windows), then relaunches into the new version.
Check manually any time
Click the version tag (e.g. v0.3.8) at the far right of the TopBar to force a check that surfaces up-to-date and error states the silent check hides. It shows CHECKING… and disables itself while busy.
Not fully. The updater is wired end to end — signing, signature verification, download, install, and relaunch all work — but tauri.conf.json still ships plugins.updater.endpoints as a https://REPLACE_ME/... placeholder. Until a real manifest host is configured, no live updates flow.
Only the HTTPS request for the version manifest. Nothing else is sent to the endpoint, and there is no telemetry. The update check is the one deliberate, minimal network call 13x makes.
No. Every update is verified against the minisign public key baked into the build before installation, so a compromised manifest host cannot push an unsigned or tampered binary.
No. There is no background auto-download and no scheduled re-checks. 13x checks once at startup and on manual click, and never installs without your explicit Install & Restart. There is also no in-app rollback or version pinning — the flow only moves forward.
13x is local-first and free of telemetry — your code, commands and shells never leave the machine. Join the waitlist for the next build.