updates bug fix

doc/CHANGELOG.md

@@ -161,6 +161,17 @@ Versions follow `MAJOR.MINOR.PATCH-REVISION_STAGE_N` (e.g. `3.99.1-4_rc_1`).
   processed twice; `@cert-authority` lines are never touched. `ssr` ignored an
   empty `SSH_DEFAULT_OPT` (documented as "no option") and now rejects an
   option given in place of the server.
+- `updates.sh`: the published version file, read from the network, was displayed
+  without checking (escape sequences could reach the terminal at every
+  startup): it is now validated, and compared as a version (an installed
+  development version was reported as outdated); in quiet mode errors are really
+  silent; `profile_upgrade --switch-to-git` left the user's `profile.conf` and
+  custom themes in the backup directory (they are now copied to the new
+  clone); `git pull` could create merge commits or conflict markers in the
+  installed scripts (now `--ff-only`); the branch name is validated; archives
+  with absolute or `..` paths are refused and extracted without their owners;
+  modules removed upstream and still loaded are reported; git operations no
+  longer change the shell's directory stack.
 - `compress.sh`: option flags and loop variables no longer leak into the
   interactive shell.