Netscoot.Core/Public/Test-NetscootUpdate.ps1

function Test-NetscootUpdate {
    <#
    .SYNOPSIS
        Check GitHub for a newer netscoot release and report whether the installed version is
        behind. On-demand and read-only: It never updates anything itself.
 
    .DESCRIPTION
        netscoot does not update automatically, however it is installed (PowerShell Gallery,
        installer, or a clone). This is the pull-based check: It GETs the latest GitHub release
        and compares its tag (the "available" version) against the installed module's ModuleVersion
        (the "installed" version). It prints what to do when behind, but performs no update - an
        agent or user runs it when they want to know.
 
        Needs network access to api.github.com. Honors -ErrorAction if the request fails (offline,
        rate-limited, or no releases yet).
 
        A plain Test-NetscootUpdate always checks. -Auto is the automation/SessionStart entry point:
        It runs the check only when the update policy is Enabled (see Set-NetscootUpdatePolicy), and
        is a silent no-op otherwise. So a hook can call it unconditionally; nothing happens until the
        policy is opted in, and an administrator can disable it fleet-wide. Either way it never
        updates - it only reports.
 
    .PARAMETER Repository
        owner/name of the GitHub repository to check. Defaults to the project repository.
 
    .PARAMETER Auto
        Run as the automatic check (for a SessionStart hook or other automation): proceed only when
        the update policy is Enabled, otherwise do nothing. Still read-only - it never updates.
 
    .OUTPUTS
        Netscoot.Update - none (writes a non-terminating error) when the release cannot be fetched,
        and nothing at all when -Auto is set but the update policy is not Enabled.
 
    .EXAMPLE
        # Compare the installed module to the latest GitHub release
        Test-NetscootUpdate
        # Check a fork or a different repository (owner/name)
        Test-NetscootUpdate -Repository myfork/netscoot
        # SessionStart hook: checks only when the update policy is Enabled
        Test-NetscootUpdate -Auto
    #>

    [CmdletBinding()]
    [OutputType('Netscoot.Update')]
    param(
        [ValidatePattern('^[^/]+/[^/]+$')]
        [string]$Repository = 'kappasims/netscoot',
        [switch]$Auto
    )

    # Automatic check: do nothing unless the update policy is Enabled. Manual is the default, so a
    # hook calling -Auto stays quiet until someone opts in via Set-NetscootUpdatePolicy.
    if ($Auto -and (Get-NetscootUpdatePolicy).State -ne 'Enabled') {
        Write-Verbose 'Auto-update check skipped: the update policy is not Enabled.'
        return
    }

    # The version of the module that exports this function (all netscoot manifests share it).
    $installed = $MyInvocation.MyCommand.Module.Version
    if (-not $installed) { $installed = (Get-Module Netscoot.Core | Select-Object -First 1).Version }

    $uri = "https://api.github.com/repositories/$Repository/releases/latest"
    $release = $null
    try {
        $release = Invoke-RestMethod -Uri $uri -Headers @{ 'User-Agent' = 'Netscoot'; 'Accept' = 'application/vnd.github+json' } -ErrorAction Stop
    } catch {
        Write-Verbose "Release check request failed: $($_.Exception.Message)"   # reported by the null-check below
    }
    if ($null -eq $release -or [string]::IsNullOrWhiteSpace("$($release.tag_name)")) {
        $PSCmdlet.WriteError([System.Management.Automation.ErrorRecord]::new(
                [System.Exception]::new("Could not get the latest release from $uri (offline, rate-limited, or no release yet)."),
                'UpdateCheckFailed', [System.Management.Automation.ErrorCategory]::ConnectionError, $uri))
        return
    }

    $tag = "$($release.tag_name)"
    $latest = $null
    if ($tag -match '(\d+\.\d+\.\d+)') { $latest = [version]$Matches[1] }

    $available = ($null -ne $latest -and $null -ne $installed -and $latest -gt $installed)
    $result = [pscustomobject]@{
        Installed       = $installed
        Latest          = $latest
        Tag             = $tag
        UpdateAvailable = $available
        Url             = "$($release.html_url)"
    }

    if ($available) {
        Write-Host "netscoot $tag is available (installed $installed)." -ForegroundColor Yellow
        Write-Host "Update from your clone: git pull, then ./build.ps1 -Task Install" -ForegroundColor Yellow
        Write-Host $result.Url -ForegroundColor DarkGray
    } else {
        Write-Host "netscoot is up to date (installed $installed, latest $tag)." -ForegroundColor Green
    }
    $result
}