[v18] Connect: dual installer mode on Windows, updates config in system registry, privileged updater service, no downgrade policy#65173

Open

gzdunek wants to merge 11 commits intobranch/v18from

gzdunek/backport-connect-windows-installer/v18

Commits on Mar 30, 2026

Make Windows Service setup reusable (#63132)
gzdunek
committed
Connect: switch Windows installer to dual mode (#62910)
gzdunek
committed
Connect: read automatic updates configuration from Windows registry (#63281)
gzdunek
committed
Connect: allow only version upgrades in automatic updates (#63187)
gzdunek
committed
Connect: add privileged updater service (#63572)
gzdunek
committed
Connect: install updates via privileged service, add signature verification (#63573)
gzdunek
committed
Connect: gracefully handle VNet service and app version mismatch (#64438)
gzdunek
committed
Connect: verify signature in privileged updater against hardcoded Windows signing cert (#64754)
gzdunek
committed
Backport docs link from #64905
gzdunek
committed
Connect: fix failing fresh silent NSIS installs (#65170)
gzdunek
committed

Commits on Apr 1, 2026

Connect: Improve docs about dual-mode installations (#65267)
gzdunek
committed