Skip to content

GameVault v0.3.5

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 00:45
· 15 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.3.5
This tag was signed with the committer’s verified signature.
NouraldinFarge Nouraldin Farge
SSH Key Fingerprint: rYLAtymVM438tjPbA9iIgh3r46GclSPEBdjuTRNoU5Q
Verified
Learn about vigilant mode.
7f81f86
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Download and run

  1. Download GameVault-v0.3.5-windows-x64-portable.zip and GameVault-v0.3.5-windows-x64-portable.zip.sha256 below.
  2. Verify the ZIP in PowerShell with Get-FileHash .\GameVault-v0.3.5-windows-x64-portable.zip -Algorithm SHA256, then compare the result with the checksum file.
  3. Extract the ZIP to a writable folder and start GameVault.exe.

This is a portable Windows 10/11 x64 build, not an installer. Microsoft Edge WebView2 is required for the interface; an installed 7-Zip copy is needed only for archive intake.

Highlights

  • Hardened user-owned ZIP intake against traversal, links/reparse points, NTFS edge cases, case collisions, archive bombs, and insufficient staging space.
  • Made archive promotion and portable upgrades transactional, with rollback and preservation of databases, backups, settings, logs, Inbox packages, and managed games.
  • Added validated backup restore, portable-path migration, bounded redacted diagnostics, stricter launch/metadata inputs, and official Steam/GOG/Epic metadata boundaries.
  • Updated the supported toolchain and dependencies, including Rust 1.96, rfd 0.17.2, current React types, and Biome 2.5.7.
  • Added architecture/release documentation plus a required weekly locked-dependency audit.

Verification

Windows CI, CodeQL, locked Rust/JavaScript audits, 5 frontend tests, 35 Rust tests, an optimized portable build, renamed-executable/path-with-spaces probes, portable state-preservation tests, SPDX SBOM generation, and GitHub artifact provenance all passed.

Security and scope

GameVault organizes and launches local, user-owned game files. It does not download games, bypass DRM, or treat third-party package markers as trusted ownership evidence.

Known limitation: the portable executable is not yet Authenticode-signed; verify the published SHA-256 checksum and GitHub provenance.

Full changelog: v0.3.4...v0.3.5

Assets 6
Loading