Polaris v1.3.4

Polaris v1.3.4

Polaris v1.3.4 is a maintenance release that adds a dedicated SteamOS 3.8 package lane and tightens Linux package, path, setup, and import safety.

Highlights

• Adds a dedicated SteamOS 3.8 x86_64 package built against Valve's versioned repositories.
• Adds fail-closed packaged-binary path validation with explicit source-prefix remapping and retained validation receipts.
• Adds secure Bazzite support for the /home to var/home layout without broad path canonicalization.
• Dispatches setup-host early and standardizes public host-integration commands on sudo -H polaris --setup-host.
• Makes ImageMagick discovery locale-safe during Steam cover import.
• Keeps npm audit --audit-level=high mandatory and excludes the forbidden webtransport-go v0.10.0 dependency.

Packages

The supported binary release assets are exactly:

• Arch Linux: Polaris-arch-x86_64.pkg.tar.zst
• Fedora 44: Polaris-fedora44-x86_64.rpm
• SteamOS 3.8: Polaris-steamos3.8-x86_64.pkg.tar.zst
• Ubuntu 24.04: Polaris-ubuntu24.04-x86_64.deb

SteamOS installation and startup validation cover SteamOS 3.8 in Desktop Mode. The SteamOS package is not interchangeable with the rolling Arch package.

Validation

The approved candidate tree was merged unchanged into master. Exact pull-request and merged-master CI covered Web checks, public hygiene, CodeQL, Arch, Fedora 44, Ubuntu 24.04, SteamOS 3.8, and Clang ASan/UBSan tests. The SteamOS package also passed package identity, dependency closure, linkage, reviewed namcap, payload, path-safety, and provenance checks.

Known validation limits

This release does not claim physical Steam Deck gameplay, Steam Game Mode, OLED 90 Hz presentation, suspend and resume, or package persistence across SteamOS operating-system updates. SteamOS root-filesystem updates may remove installed packages.

The release was not deployed to the live Polaris service during preparation, so no production gameplay or deployment smoke is claimed.

See the full changelog.