snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/lib/cloud/version-check/functions/getNewUpdates.ts

@@ -0,0 +1,97 @@
+import os from 'node:os';
+
+import { Settings } from '@rocket.chat/models';
+import { serverFetch as fetch } from '@rocket.chat/server-fetch';
+import { check, Match } from 'meteor/check';
+
+import { getWorkspaceAccessToken } from '../..';
+import { Info } from '../../../../../app/utils/rocketchat.info';
+
+/** @deprecated */
+
+export const getNewUpdates = async () => {
+	try {
+		const uniqueID = await Settings.findOne('uniqueID');
+
+		if (!uniqueID) {
+			throw new Error('uniqueID not found');
+		}
+
+		const params = {
+			uniqueId: String(uniqueID.value),
+			installedAt: uniqueID.createdAt.toJSON(),
+			version: Info.version,
+			osType: os.type(),
+			osPlatform: os.platform(),
+			osArch: os.arch(),
+			osRelease: os.release(),
+			nodeVersion: process.version,
+			deployMethod: process.env.DEPLOY_METHOD || 'tar',
+			deployPlatform: process.env.DEPLOY_PLATFORM || 'selfinstall',
+		};
+
+		const token = await getWorkspaceAccessToken();
+		const headers = {
+			...(token && { Authorization: `Bearer ${token}` }),
+		};
+		const url = 'https://releases.rocket.chat/updates/check';
+		const response = await fetch(url, {
+			headers,
+			params,
+			// SECURITY: the URL is a default hardcoded value or an envvar/setting set by an admin. It's safe to disable this check.
+			ignoreSsrfValidation: true,
+		});
+
+		const data = await response.json();
+
+		check(
+			data,
+			Match.ObjectIncluding({
+				versions: [
+					Match.ObjectIncluding({
+						version: String,
+						security: Match.Optional(Boolean),
+						infoUrl: String,
+					}),
+				],
+				alerts: Match.Optional([
+					Match.ObjectIncluding({
+						id: String,
+						title: String,
+						text: String,
+						textArguments: [Match.Any],
+						modifiers: [String] as [StringConstructor],
+						infoUrl: String,
+					}),
+				]),
+			}),
+		);
+
+		return data as {
+			versions: {
+				version: string;
+				security: boolean;
+				infoUrl: string;
+			}[];
+
+			alerts: {
+				id: string;
+				priority: number;
+				title: string;
+				text: string;
+				textArguments?: string[];
+				modifiers: string[];
+				infoUrl: string;
+			}[];
+		};
+	} catch (error) {
+		// There's no need to log this error
+		// as it's pointless and the user
+		// can't do anything about it anyways
+
+		return {
+			versions: [],
+			alerts: [],
+		};
+	}
+};