From 0481d5ccf733ecf74d2fe08724dc2158826308af Mon Sep 17 00:00:00 2001
From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com>
Date: Wed, 21 Jan 2026 16:30:55 +0100
Subject: [PATCH] fix(tools): sanitize version string for filename

Replace @ and / with _ in filename to avoid invalid paths like
papra-@papra/docker@26.0.0.tar.gz
---
 misc/tools.func | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/misc/tools.func b/misc/tools.func
index f730fd523..260fb9a03 100644
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -1768,7 +1768,10 @@ function fetch_and_deploy_gh_release() {
 
   ### Tarball Mode ###
   if [[ "$mode" == "tarball" || "$mode" == "source" ]]; then
-    filename="${app_lc}-${version}.tar.gz"
+    # Sanitize version for filename (remove/replace special chars)
+    local safe_version="${version//@/_}"
+    safe_version="${safe_version//\//_}"
+    filename="${app_lc}-${safe_version}.tar.gz"
     local download_success=false
 
     # For tags with special characters (@, /), use codeload.github.com directly