2026.11.2.1415 - Brotli security patch, alpha branches, Unity SDK UPM fix

Resonite · published · build 26392920

Hello everyone!

Got a small, but important update - there's a security vulnerability discovered in the Brotli compression library, which affects Resonite as well - specifically when saving & loading items & worlds.

To address this, we moved from the custom fork (which we'd have to update) to a built-in .NET version, which both simplifies things for us and makes security updates part of .NET itself - the fork was left-over from the Unity Mono times, but is no longer necessary.

This build is compatible with current, but updating ASAP is strongly recommended.

New Features:


- Enable Alpha branches for all engineering team members (issue #7417, implemented by @probableprime )
-- This will allow for additional testing and pre-release feature previews for the entire community

Security:


- Replaced Brotli implementation with built-in .NET version, rather than custom fork of a library
-- This is to address a Brotli security vulnerability CVE-2026-111497 (reported by TheAutopilot, security ticket #14388)
-- Make sure your .NET 10 install is up to date ( https://support.microsoft.com/en-us/servicing/dotnet/net-10/2026/net-10-0-update-october-25-2026 )


This update fixes the UPM package failing to install properly on some systems.

If you're having trouble, just update to latest package in the Package Manager in Unity Editor!

If you're installing the package to a new project, simply install it from Git using this url:
`https://github.com/Yellow-Dog-Man/Resonite.UnitySDK.git?path=/Packages/ResoniteSDK#upm`

Fixes:


- Fixed UPM installs failing on some systems due to Git LFS (reported by @cowardlycamper32, @karasutengu, @pyxaron, issue #134)