upstream-rocketchat/apps/meteor/server/lib/cloud/version-check/functions/getNewUpdates.ts

import os from 'node:os';

import { Settings } from '@rocket.chat/models';
import { serverFetch as fetch } from '@rocket.chat/server-fetch';
import { check, Match } from 'meteor/check';

import { getWorkspaceAccessToken } from '../..';
import { Info } from '../../../../../app/utils/rocketchat.info';

/** @deprecated */

export const getNewUpdates = async () => {
	try {
		const uniqueID = await Settings.findOne('uniqueID');

		if (!uniqueID) {
			throw new Error('uniqueID not found');
		}

		const params = {
			uniqueId: String(uniqueID.value),
			installedAt: uniqueID.createdAt.toJSON(),
			version: Info.version,
			osType: os.type(),
			osPlatform: os.platform(),
			osArch: os.arch(),
			osRelease: os.release(),
			nodeVersion: process.version,
			deployMethod: process.env.DEPLOY_METHOD || 'tar',
			deployPlatform: process.env.DEPLOY_PLATFORM || 'selfinstall',
		};

		const token = await getWorkspaceAccessToken();
		const headers = {
			...(token && { Authorization: `Bearer ${token}` }),
		};
		const url = 'https://releases.rocket.chat/updates/check';
		const response = await fetch(url, {
			headers,
			params,
			// SECURITY: the URL is a default hardcoded value or an envvar/setting set by an admin. It's safe to disable this check.
			ignoreSsrfValidation: true,
		});

		const data = await response.json();

		check(
			data,
			Match.ObjectIncluding({
				versions: [
					Match.ObjectIncluding({
						version: String,
						security: Match.Optional(Boolean),
						infoUrl: String,
					}),
				],
				alerts: Match.Optional([
					Match.ObjectIncluding({
						id: String,
						title: String,
						text: String,
						textArguments: [Match.Any],
						modifiers: [String] as [StringConstructor],
						infoUrl: String,
					}),
				]),
			}),
		);

		return data as {
			versions: {
				version: string;
				security: boolean;
				infoUrl: string;
			}[];

			alerts: {
				id: string;
				priority: number;
				title: string;
				text: string;
				textArguments?: string[];
				modifiers: string[];
				infoUrl: string;
			}[];
		};
	} catch (error) {
		// There's no need to log this error
		// as it's pointless and the user
		// can't do anything about it anyways

		return {
			versions: [],
			alerts: [],
		};
	}
};