fix(hololake): bind updater trust into bundle config

product-source/hololake-native-desktop/scripts/foundation.test.mjs

@@ -22,6 +22,8 @@ test('HoloLake updater trust is product-owned and contains no inherited endpoint
   assert.deepEqual(trust.allowedReleaseHosts, ['guanghulab.com'])
   assert.equal(trust.state, 'PROVISIONED')
   assert.ok(trust.publicKey.length > 100)
+  assert.deepEqual(tauriConfig.plugins.updater.endpoints, trust.endpoints)
+  assert.equal(tauriConfig.plugins.updater.pubkey, trust.publicKey)
   for (const relative of [
     'foundation.json',
     'src-tauri/release-trust.json',

product-source/hololake-native-desktop/src-tauri/tauri.conf.json

@@ -24,6 +24,14 @@
       "csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'"
     }
   },
+  "plugins": {
+    "updater": {
+      "endpoints": [
+        "https://guanghulab.com/hololake/releases/latest.json"
+      ],
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDEzQkYzRTQ5QTE2MEFDMzEKUldReHJHQ2hTVDYvRTZNNDVqZDUxLzRZMmxuT1pSM2Q5RTRZbzRCZUZ0d0FxVVNidGJ0dUQyMnoK"
+    }
+  },
   "bundle": {
     "active": true,
     "targets": "all",