🗡️Neo Angband v0.31.0

Security

• The desktop updater no longer accepts a download URL or checksum from the renderer. The main process re-reads the named release from GitHub and resolves the platform asset’s URL, digest, and size itself; redirects are followed manually with a host check on every hop, and extraction now enforces archive size, entry count, and expansion-ratio limits.
• A content patch path such as __proto__.x no longer reaches Object.prototype. Every path-walking entry point in the patch and compose modules now rejects __proto__, prototype, and constructor and reads only a container’s own properties.
• Repository mod downloads and imported .neochar saves now decompress within the same resource limits the local mod importer already enforced, instead of expanding an untrusted archive or save with no ceiling.
• The game window no longer navigates away from its own origin on a same-window navigation. The check that decides what counts as the game’s own address now parses the URL instead of matching a string prefix.
• Three dependencies pinned to versions with published advisories (fast-uri, js-yaml, nanoid) are updated.