Once a day the shop asks extago.com/uds/torgash/ whether there’s a new version, and the bell in the admin tells you about it. The update is installed from System → Updates, where the update server’s address can also be changed.
A package is installed only if its Ed25519 signature matches a key built into the shop’s own code. The update server is trusted with availability, never with code: even a hijacked server can’t make the shop install someone else’s package. Versions only ever go forward.
The database is backed up before installing. If anything fails, the previous version comes back by itself. To go back after the update is in, use the server’s console:
php artisan torgash:update-rollback
If artisan itself won’t start, php storage/app/update/rollback.php does the same rollback without booting the application.