ende upgrade

Examples

Upgrade to the latest version

Use this command without any options to upgrade Ende to the latest release, the one named in https://dl.ende.sh/release-latest.txt:

ende upgrade

Upgrade to a specific version

You can specify a particular release to upgrade to:

ende upgrade 2026.10.14

Check available upgrade without installing

Use the --dry-run flag to see what would be upgraded without actually performing the upgrade:

ende upgrade --dry-run
Current Ende version: v2026.10.14
Looking up latest version

Found latest version v2026.10.17

--quiet flag

The --quiet flag suppresses diagnostic output during the upgrade process. When used with ende upgrade, it will hide progress indicators, download information, and success messages.

ende upgrade --quiet

This is useful for scripting environments or when you want cleaner output in CI pipelines.

Cached downloads

Downloaded Ende binaries are cached in $ENDE_DIR/dl/. If you reinstall the same version later, the cached archive is reused instead of re-downloading.

Checksum verification

Use the --checksum flag to verify a downloaded binary against a known SHA-256 hash. This protects against tampering in CI environments and security-sensitive setups:

ende upgrade --checksum=<sha256-hash> 2026.10.17

SHA-256 checksums are published as .sha256sum files alongside release archives on GitHub:

curl -sL https://github.com/theende/ende/releases/download/v2026.10.17/ende-x86_64-unknown-linux-gnu.zip.sha256sum

Delta updates

ende upgrade downloads small binary patches (deltas) instead of the full release archive when upgrading between recent stable releases. This typically reduces the download from tens of megabytes to a few megabytes.

Deltas are applied automatically when available, there is nothing to opt into. If a patch is missing or fails verification, ende upgrade transparently falls back to downloading the full archive.

To force a full download (for example, in environments that cache release archives) pass --no-delta:

ende upgrade --no-delta

Each delta patch and the resulting binary are verified against the SHA-256 checksums published with the release before being installed.

Install a build from a pull request

ende upgrade pr <number> downloads the binary built by CI for a specific ende PR and installs it. This is handy when you need to verify a fix before it has shipped in a release.

# Install the binary built by CI for PR #12345
ende upgrade pr 12345

# A `#` prefix is also accepted
ende upgrade pr '#12345'

# Write to a path instead of replacing the current binary
ende upgrade --output ./ende-test pr 12345

# See what would be downloaded without replacing
ende upgrade --dry-run pr 12345

This subcommand requires the gh CLI to be installed and authenticated. ende upgrade uses gh to look up the PR's CI run and download the matching {profile}-{os}-{arch}-ende artifact (for example release-linux-x86_64-ende), preferring release builds and falling back to debug. The downloaded binary is verified to run before it replaces the current executable.

Command line usage:

upgrade

Upgrade ende executable to given version

Options

--branch

--cert

Load certificate authority from PEM encoded file.

--checksum

Verify the downloaded archive against the provided SHA256 checksum.

--dry-run

Perform all checks without replacing old exe.

--force, -f

Replace current exe even if not out-of-date.

--no-delta

Disable delta updates and always download the full archive.

--output, -o

The path to output the updated version to.

--pr

--unsafely-ignore-certificate-errors

DANGER: Disables verification of TLS certificates.

--version

The version to upgrade to.