Skip to content

Update Vortex to 2.9.0 - #19

Merged
Arkazzae merged 5 commits into
masterfrom
update-vortex-2.9.0
Oct 19, 2026
Merged

Arkazzae merged 5 commits into
masterfrom
update-vortex-2.9.0

Conversation

@Arkazzae

Copy link
Copy Markdown
Owner

Updates to Vortex 2.9.0 and fixes #16 and #18.

Closes #17.

Vortex now ships node-loot with a Linux libloot, so patch 0020 only maps
plugin and local paths for it and the Rust libloot build is gone.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-19T20:38:01.978386Z 2bbfaa2 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Comment on lines +153 to +164
+async function move(source: string, target: string, isDirectory: boolean): Promise<void> {
+ const existing = await fs.stat(target).catch(() => undefined);
+ if (isDirectory && existing?.isDirectory()) {
+ for (const child of await fs.readdir(source, { withFileTypes: true })) {
+ await move(path.join(source, child.name), path.join(target, child.name), child.isDirectory());
+ }
+ await fs.rmdir(source);
+ return;
+ }
+ await fs.mkdir(path.dirname(target), { recursive: true });
+ await fs.rename(source, target);
+}

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2bbfaa2dc0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +145 to +146
+ const target = path.join(directory, ...parts);
+ await move(source, target, entry.isDirectory());

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Prevent symlink traversal while moving backslash entries

When the extracted tree contains a symlink such as escape -> /some/writable/path and an entry named escape\\payload, the target's parent is followed by mkdir/rename, so the payload is moved outside root and can overwrite a file there. Filtering .. does not prevent this; reject or safely resolve symlinked target components before moving archive entries.

Useful? React with 👍 / 👎.

Comment on lines +585 to +587
+ mods = updatedState.persistent.mods?.[gameId] ?? {};
+ const updatedModPaths = game.getModPaths(gameDiscovery.path);
+ validateProfileDeploymentTargets(api, game, profile, mods, updatedModPaths);

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Refresh the profile after will-deploy handlers

When a will-deploy handler updates the profile through a normal Redux dispatch, it replaces the profile record in state, but this block refreshes only mods and still filters through the pre-event profile object. A mod enabled by that handler can therefore bypass the target validation and be silently skipped when its target is unavailable; reload and validate the profile from updatedState as well.

Useful? React with 👍 / 👎.

Comment on lines +153 to +163
+async function move(source: string, target: string, isDirectory: boolean): Promise<void> {
+ const existing = await fs.stat(target).catch(() => undefined);
+ if (isDirectory && existing?.isDirectory()) {
+ for (const child of await fs.readdir(source, { withFileTypes: true })) {
+ await move(path.join(source, child.name), path.join(target, child.name), child.isDirectory());
+ }
+ await fs.rmdir(source);
+ return;
+ }
+ await fs.mkdir(path.dirname(target), { recursive: true });
+ await fs.rename(source, target);
@Arkazzae
Arkazzae merged commit d601ce1 into master Oct 19, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CI] Automatic Vortex update failed Certain mods with backslashes in their archives fail to install

2 participants