GameVault v0.3.5

Download and run

1. Download GameVault-v0.3.5-windows-x64-portable.zip and GameVault-v0.3.5-windows-x64-portable.zip.sha256 below.
2. Verify the ZIP in PowerShell with Get-FileHash .\GameVault-v0.3.5-windows-x64-portable.zip -Algorithm SHA256, then compare the result with the checksum file.
3. Extract the ZIP to a writable folder and start GameVault.exe.

This is a portable Windows 10/11 x64 build, not an installer. Microsoft Edge WebView2 is required for the interface; an installed 7-Zip copy is needed only for archive intake.

Highlights

• Hardened user-owned ZIP intake against traversal, links/reparse points, NTFS edge cases, case collisions, archive bombs, and insufficient staging space.
• Made archive promotion and portable upgrades transactional, with rollback and preservation of databases, backups, settings, logs, Inbox packages, and managed games.
• Added validated backup restore, portable-path migration, bounded redacted diagnostics, stricter launch/metadata inputs, and official Steam/GOG/Epic metadata boundaries.
• Updated the supported toolchain and dependencies, including Rust 1.96, rfd 0.17.2, current React types, and Biome 2.5.7.
• Added architecture/release documentation plus a required weekly locked-dependency audit.

Verification

Windows CI, CodeQL, locked Rust/JavaScript audits, 5 frontend tests, 35 Rust tests, an optimized portable build, renamed-executable/path-with-spaces probes, portable state-preservation tests, SPDX SBOM generation, and GitHub artifact provenance all passed.

Security and scope

GameVault organizes and launches local, user-owned game files. It does not download games, bypass DRM, or treat third-party package markers as trusted ownership evidence.

Known limitation: the portable executable is not yet Authenticode-signed; verify the published SHA-256 checksum and GitHub provenance.

Full changelog: v0.3.4...v0.3.5

GameVault v0.3.4 — Dependency maintenance

Highlights

• Updated Rust serialization and error-handling dependencies to current compatible patch versions.
• Updated Biome development tooling.
• Carries forward the latest GitHub Actions and npm dependency maintenance.
• Keeps the portable-relative managed library and safe default migration introduced in v0.3.2.

Verification

• All required repository checks passed before merge.
• The automated Windows release workflow produced the portable ZIP, SHA-256 checksum, SPDX SBOM, and provenance attestation.

GameVault v0.3.2 — Portable release reliability

Highlights

• The managed game library now relocates with the portable build instead of depending on its previous folder.
• Portable defaults are versioned with the release.
• The release workflow now creates required output directories and runs with the repository context it needs.

Included artifacts

• Windows x64 portable ZIP
• SHA-256 checksum
• SPDX software bill of materials

Verification

The published artifacts remain immutable and are tied to a verified commit signature.

GameVault 0.3.1 — Review-gated portable library

GameVault 0.3.1 is the first public portfolio release of the portable, local-first Windows game library.

Highlights

• Organize and launch games the user already owns without a cloud account.
• Test ZIP integrity before extraction and block path traversal, links/reparse entries, and modified-platform markers.
• Stage packages in isolation, surface executable and safety findings, and require explicit approval before promotion.
• Keep metadata optional and restricted to approved official Steam, GOG, and Epic hosts.
• Preserve portable SQLite state, update backups, prerequisites, quarantine, and audit reports.

Verification

The repository runs TypeScript, React, production-build, Rust formatting, Clippy, and 19 Rust authority tests on Windows. The release pipeline verifies the packaged runtime and rejects installer artifacts.

Windows portable ZIP SHA-256: 27e918902645364cf359bcc4acb2e97341d4e62741400f4e9a9b7a1e00884bdb

Product boundary

GameVault never downloads games, bypasses ownership or platform controls, or silently runs archive content.

Run

Extract the ZIP to a writable Windows folder and start GameVault.exe. Microsoft Edge WebView2 is required; 7-Zip is required for archive intake.