Skip to content

v3.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 04:19
· 14 commits to main since this release
v3.2.0
0e18153
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The biggest update since 3.1, and most of it is about knowing what you're installing.

New

  • Virus scans on every plugin. The registry scans each plugin's release ZIP with ClamAV and YARA (community rules, many written for Linux malware); VirusTotal and MetaDefender results show too when they exist. Discover cards get a badge (No threats, Threat found, Not fully scanned). A plugin's Manage window has a Virus scan box: one line per scanner with how long ago it ran, the version it's about, and a full Scan report (file, SHA-256, scanner versions). It only informs: Install is never blocked, and a clean result isn't proof of safety (the box says so). A ZIP that changed after its scan shows as not scanned, never as clean.
  • A friendlier Desktop Mode installer. Download one file, double-click it, and it lists every step before anything happens: Decky Loader is checked first (and installed with Decky's own installer if missing), then DeckyHub. It explains why the admin password is needed and collects nothing. It can also show a few hand-picked plugins (frame generation, themes...) one at a time with Skip as the default; nothing is installed until you confirm in DeckyHub. The manual ZIP / install-from-URL route is still there and needs no password.
  • Installed page: your installed plugins with download counts, stars and the same security badges.
  • More badges on every card (also on the Installed page): AI (the plugin's repository has instructions for AI coding assistants, so it was probably built with AI help; it says nothing about quality or safety), Runs as root, No release in a year, Fork, and warnings from an automated security audit of the release you'd install (reads private data, changes system startup, hidden code, code that isn't in its repo, and more). Tap More on the notice at the top of Discover to see what each one means.
  • Per-plugin pages on the website: every plugin has its own page on deckyhub.com/plugins with its safety information, audit warnings, scan results per scanner (file, SHA-256, when it was scanned) and links to its repository and releases.
  • Ukrainian home page and README (the app itself is in 18 languages).

Changed

  • A redesigned Manage window. The virus scan box comes first, DeckyHub's version sits beside its title, and What's new (release notes) reads to the end with the D-pad: long notes, descriptions and scan reports are all reachable without touching the screen.
  • Plugin download links that try to leave the plugin's own GitHub releases are refused.
  • Fresh screenshots, promo images and walkthrough GIF.

Fixed

  • Release notes written with Windows line endings ran their bullets together or showed big blank gaps; they're shown correctly now.
  • The Desktop installer showed no window on SteamOS (its dialogs used an option the Deck's zenity doesn't have) and its last "All done!" message never appeared; its dialogs now fit the Deck's screen too.

Under the hood

  • The release workflow's scans live in one reusable workflow, used for the plugin ZIP and the installer alike.
  • Tools to retake the screenshots on a real Deck, install a published ZIP on it, and run the whole Deck test suite with the D-pad only (36 tests, all passing on this release).

Try it on your Deck

  • Open a plugin's Manage window: check the Virus scan box, press Scan report, then read What's new to the end with the D-pad.
  • Open the Installed page and look for the security badges on your plugins.
  • Updating from 3.1.0 keeps all your settings, custom repositories and registries.
  • Prefer a window over the Deck's controls? Download Install-DeckyHub.desktop below and double-click it in Desktop Mode.

Full changelog: v3.1.0...v3.2.0

Security checks

  • Virus scan: ClamAV found no threats in DeckyHub-v3.2.0.zip (scan report).
  • VirusTotal: No engine flagged DeckyHub-v3.2.0.zip (0/66) — VirusTotal report.
  • MetaDefender: No engine flagged DeckyHub-v3.2.0.zip (0/21) — MetaDefender report.
  • Desktop installer (install-deckyhub.sh and its .desktop launcher): ClamAV: No threats found (scan report). VirusTotal: clean (0/61) — report. MetaDefender: clean (0/21) — report.
  • Code analysis: GitHub CodeQL checks the Python and TypeScript code on every change.
Assets 8
Loading