seal upgrade

seal upgrade updates the CLI binary itself. It is the only seal command that makes network requests.

Project commands such as init, pin, and verify never fetch remote content.

Synopsis

seal upgrade [--check]

Flag	Effect
`--check`	Report whether a newer release is available without installing it.

Determine the current version. Release binaries use the version stamped at build time; Go-installed binaries use Go module build metadata.
Fetch published releases from GitHub.
Ignore prereleases and select the newest stable vX.Y.Z release.
If the current version is already latest, print seal is already up to date and exit 0.
If --check is set and an update exists, report the available version and exit 0.
If the running binary appears to live under $GOBIN, $GOPATH/bin, or the default ~/go/bin, run:
Terminal window
```
go install github.com/SamyGhannad/seal-cli/cmd/seal@latest
```
Otherwise, download the matching release asset for the current OS and architecture, download its .sha256 sidecar, verify the checksum, and replace the local executable.
On Windows, seal upgrade downloads and verifies the new binary, then prints manual move instructions instead of replacing a running executable.

Prebuilt releases use one checksum sidecar per binary:

seal-darwin-arm64
seal-darwin-arm64.sha256

Each sidecar contains one line:

137fa12529c129974ad43563ebca864cb618e64623b4fafa8eb1489fc4368bbf  seal-darwin-arm64

The first field is the SHA-256 checksum. The second field is the asset filename.

Code	Meaning
`0`	Upgrade check completed, no update was needed, or the upgrade completed successfully.
`2`	Current version is not a stable release, release lookup failed, no matching asset exists, checksum verification failed, `go install` failed, replacement failed, or any other fatal condition occurred.

See exit codes for the full table across all subcommands.

Check without changing anything:

seal upgrade --check

Upgrade the current installation:

seal upgrade