-
v2.0.1
StableForge Announce / Post changelog to Hellion Forge (push) Successful in 8sSecurity Scan (reusable) / Security Scan (push) Failing after 24sSecurity / scan (push) Failing after 24sBuild / Build (Release) (push) Successful in 34sRelease / Build and attach release ZIP (push) Successful in 30sreleased this
2026-08-19 20:46:17 +00:00 | 24 commits to main since this releasev2.0.1 — Hotfix (2026-08-19)
A same-day follow-up to 2.0.0 with no user-facing changes. Install it if you picked up 2.0.0 in the first hour; there is nothing new to look at, it just carries a dependency update the 2.0.0 archive was built without.
- MessagePack raised from 3.1.4 to 3.1.7. It handles the payload serialisation behind the message database. The advisories are a recursion-depth limit in
Skipand a fault in LZ4 decompression, both reachable only through crafted input — this plugin writes and reads its own bytes in a local file, so the practical exposure needs someone who already has write access to it. Lifted anyway, because it costs nothing. - The release workflow publishes through the Gitea API directly. The 2.0.0 build succeeded and then failed to attach its own archive, which is why that release had to be completed by hand.
How to install
This release is distributed via the HellionChat custom repository, not the Dalamud main plugin repo.
To install:- In XIVLauncher: Settings → Experimental → Custom Plugin Repositories
- Add the URL:
https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json - Enable, save, then
/xlplugins→ search Hellion Chat → install
Project documents
- README
— features, architecture, build - Privacy notice
— what the plugin stores and sends - Third-party notices
— dependencies and licences - Security policy
— vulnerability reporting - Support
— bug reports, questions, contact paths
Licence
Downloads
- MessagePack raised from 3.1.4 to 3.1.7. It handles the payload serialisation behind the message database. The advisories are a recursion-depth limit in