Updating
From the admin, with a backup first and a way back.
Look for a newer version
Open Updates in the admin. Boxlet asks GitHub for its releases, and only when you press the button. It downloads the one you pick and checks the file against the checksum GitHub publishes.
Or upload the ZIP yourself
On a server that can't reach GitHub, upload the release ZIP on the same screen.
Before anything changes
Boxlet makes a backup of the whole site. Visitors see a short “being updated” page while it runs. Your pictures, settings and uploads stay where they are, and so do your own lines in .htaccess.
Roll back
If something is wrong afterwards, Roll back puts the previous version back, together with the site as it was before the update.