Document public Gitea update mirror

README.md

@@ -82,10 +82,10 @@ https://github.com/neatstudio/tmux-browser-android/releases/latest/download/tmux
 https://github.com/neatstudio/tmux-browser-android/releases/latest/download/latest.json
 ```
 
-Those GitHub links are the stable public install/update channel. Gitea releases
-are mirrored for internal tracking, but the current Gitea org/repo visibility
-keeps anonymous release downloads behind login, so phones should use GitHub for
-no-login install and in-app updates.
+Those GitHub links are the primary public install/update channel. Gitea releases
+are mirrored as a second public source. This Gitea instance does not support the
+GitHub-style `/releases/latest/download/...` URL, so the app uses the Gitea
+Release API as the stable Gitea update entrypoint.
 
 Plain branch builds only create Actions artifacts; they are useful for CI
 verification, but releases are the stable download/update channel.
@@ -143,13 +143,19 @@ https://github.com/neatstudio/tmux-browser-android/releases/latest/download/tmux
 ```
 
 The app tries the selected update source first, then falls back to the GitHub
-manifest and the Gitea release API. GitHub is the reliable no-login source today.
-The Gitea API endpoint is:
+manifest and the Gitea release API. The Gitea API endpoint is:
 
 ```text
 https://gitea.neatcn.com/api/v1/repos/tmux/tmux-browser-android/releases/latest
 ```
 
+Gitea tag-specific assets are also public, for example:
+
+```text
+https://gitea.neatcn.com/tmux/tmux-browser-android/releases/download/v0.1.7/latest.json
+https://gitea.neatcn.com/tmux/tmux-browser-android/releases/download/v0.1.7/tmux-android.apk
+```
+
 In the app:
 
 - Tap `Update` on the main screen to check `latest.json`, download the APK,

app/src/main/java/com/neatstudio/tmuxandroid/MainActivity.java

@@ -962,8 +962,8 @@ public final class MainActivity extends Activity {
         text.append("Selected manifest:\n")
                 .append(prefs.getString("update_url", BuildConfig.DEFAULT_UPDATE_URL))
                 .append('\n');
-        text.append("GitHub manifest:\n").append(BuildConfig.DEFAULT_UPDATE_URL).append('\n');
-        text.append("Gitea release API:\n").append(BuildConfig.DEFAULT_GITEA_UPDATE_URL).append('\n');
+        text.append("GitHub primary manifest:\n").append(BuildConfig.DEFAULT_UPDATE_URL).append('\n');
+        text.append("Gitea public mirror API:\n").append(BuildConfig.DEFAULT_GITEA_UPDATE_URL).append('\n');
         text.append('\n');
         text.append("Network: manifest permission, no runtime grant required\n");
         if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {