dsh-git-update-notifier

dsh ships updates at a rapid pace, yet most existing update-checker plugins in the community only compare version numbers on the npm registry. For developers who run dsh from a source checkout, that approach both produces false positives (the local tree often lags several commits behind the latest tag) and risks corrupting the pnpm workspace by executing npm install inside the repository. dsh-git-update-notifier fills this gap: it first detects how dsh is actually deployed, then follows the matching detection and update path. For a source checkout it performs a git fetch with a fast-forward-only merge, never touching npm or node_modules; for npx-cached or npm-installed builds it compares registry versions and installs a locally verified package.\n\nOnce a day at local midnight (with a catch-up check on next start-up if dsh was not running), the plugin scans for updates and surfaces a card in the bottom-right corner of the Web GUI. You choose whether to update immediately, snooze for one day up to one month, or dismiss for the rest of the day. Downloads are resumable from a .part.json checkpoint, so a dropped connection or an intentional cancel does not waste progress. Every package is verified through three layers — sha512, shasum, and in-package identity — before installation. If the install step fails, you can retry using the already-verified local artifact or roll back to the pre-update commit or version, with the full diagnostic dump written to disk for copy-and-paste troubleshooting. The plugin also checks for its own updates, and proxy auto-detection covers standard environment variables as well as the Windows system proxy registry key, so no manual git configuration is needed.\n\nIt is well suited for engineers who develop or deeply customise dsh from source, for day-to-day users who install dsh via npx or npm and want verified, rollback-safe updates, and for environments that rely on proxies or mirror registries. A persistent update-status block on the Settings page shows the current state at a glance and offers a manual check button that bypasses the once-per-day schedule, so you are never locked out of triggering an update on demand.