Updates

Why apply isn't a button

Silent auto-upgrades are explicitly not a feature. meridian-nip upgrade is a supervised CLI command that takes a snapshot first and refuses to proceed if any preflight check fails. The portal helps you prepare an upgrade; it does not perform one.

Tabs

• Pending — live apt list --upgradable. Security updates highlighted.
• Drift — installed versions vs version_manifest. Warn / block severities — blocks are where the installed version is outside the pinned min/max range and may break the app.
• Snapshots — pg_dump + config tarballs from prior pre-update-snapshot job runs.
• Manifest — the pinned version table for this release.
• History — apt + manifest changes, timestamps, notes.

Rescan button

Runs apt-get update -qq + reloads the summary. On a host with fresh mirrors this is < 1 s. The button shows a toast so you know it ran even when nothing changed.