v3.1.0

New

• Security warnings on plugins. Discover and a plugin's Manage window now show what Decky Extended Plugins' automated audit found in the release you'd install, next to Runs as root: Reads private data, Changes system startup, Code not in its repo, Hidden code, Skips HTTPS checks, Runs downloaded scripts, Known vulnerabilities, or Blocked by audit (not recommended for installation). Routine things many plugins need, like sudo or mount, don't get a warning. A warning isn't proof of harm, and no warning isn't proof of safety.
• "What the badges on plugins mean", a notice at the top of Discover: tap More to read what every badge means, with a link to the audit.
• Fork badge. DeckyHub's list now includes forks that carry a plugin on after its original stopped (archived, gone, or no release since), but only while the fork is the active one. They show Fork, and the card names the original.
• Six more languages: Italian, Polish, Turkish, Dutch, Czech and Portuguese (Portugal), 17 in all. A system language set to Portuguese (Portugal) picks it automatically. Translations other than English are made automatically and may have mistakes; Settings → General says so.
• Hide DeckyHub's Quick Access tab: Settings → General → DeckyHub tab in Quick Access. With it off, open DeckyHub from Decky's plugin list; update notices still come.
• Registry Channel, in DeckyHub's own Manage window (Quick Access → DeckyHub → Manage): Pre-release shows plugins and list changes still being tested, and Discover and Updates say Pre-release registry while it's on. Stable stays the default, and DeckyHub falls back to it if the pre-release list can't be loaded.

Changed

• DeckyHub reads its plugin list from the registry's published releases, with the same list as before as a fallback, and accepts a bigger list (up to 4 MB) so it can keep growing.

Fixed

• The D-pad works again after opening a plugin's GitHub page. Coming back from Steam's browser (Manage → Repository, a card's Menu button, or the links in Settings), nothing had controller focus until you touched the screen. Focus now returns to the button you came from.

Under the hood

• Browser tests for the warnings, the Fork badge and the Registry Channel, and a test that every translation keeps its placeholders.
• Docs brought up to date, and DeckyHub is called a plugin hub, not a store.

Try it on your Deck

• Discover: tap More on "What the badges on plugins mean" and check every badge is explained; plugins with audit warnings show orange badges (red for Blocked).
• Open a plugin's Manage window, press Repository, then B: you're back on its Manage button and the D-pad works.
• Settings → General: pick one of the new languages, then turn DeckyHub tab in Quick Access off and on.
• Updating from 3.0.0 keeps all your settings, custom repositories and registries.