Open anan474 opened 1 year ago
The thing is, how am I supposed to know, from a trust perspective, that https://api.github.com/repos/mongodb-js/ equals https://www.mongodb.com/download-center/compass?
Well, sure, how about https://www.mongodb.com/docs/compass/current/page-data/install/page-data.json from XHR request in https://www.mongodb.com/docs/compass/current/install/ page ?
We can get the download link as provided in the download page like this :
curl https://www.mongodb.com/docs/compass/current/page-data/install/page-data.json | jq | grep -E "https.*amd64.deb" | cut -d'"' -f4 | cut -d' ' -f2
which return : https://downloads.mongodb.com/compass/mongodb-compass_1.39.0_amd64.deb
I have build the AppImage with this and it work Ok.
ps. I have checked the mongodb compass repository and while I can put the url pattern for their internal update checking url here I can't find the correct API endpoint url.
The current recipes try to get latest version from dead link and failed, fixing it by fetching from MongoDB Compass github release instead.