He who was one with the spirit of this Earth has now merged with a fragment from another world. Planetfall, the Earthshaker Arcana, has landed. Available now in The International 2019 Battle Pass.

The Arcana includes an all-new model, custom Echo Slam, Enchant Totem, Blink Dagger, and Stun effects, a combo counter for showing your ability streaks, and over 500 new Arcana-exclusive voice lines. Earn 500 Kills or Assists with Echo slam to unlock the Burning Descent alternate style.

Learn more about Planetfall on the update website.

We are pleased to announce that we're now accepting submissions for the 2019 Dota 2 Short Film Contest. Filmmakers have until the morning of August 7, 2019 to submit their short film creations of 90 seconds or less to the Dota 2 Steam Workshop to be eligible for consideration.

As is tradition, we invite all fans to visit the Workshop to participate in the voting and discussion process to help us select the best entries to be showcased as part of The International 2019 broadcast. Upon review of the Workshop ratings and discussions, Valve will nominate the top entries to be featured in The International 2019 Battle Pass for a final voting process by the community to determine the winners.

As before, each finalist that places in the top ten will be guaranteed to win $500, and the top three selections will be awarded prizes of $25,000, $10,000, and $5,000 in recognition of their contributions to the Dota community.

More information and guidelines on the submission process can be found on the Dota 2 Short Film Contest site. Be sure to check in on the Workshop page regularly to help review the submissions you would like to see showcased at The International 2019.

The International Battle Pass has arrived. Prepare to cut a path into the final months of the DPC season and discover an abundance of new and classic features—including a new game mode, living towers, consumables, a Coach's challenge, and of course a host of exclusive rewards. As is custom, 25% of all Battle Pass sales go directly to The International prize pool.

Raise your Battle Level by embarking upon the Jungle Expedition, facing the upcoming Wrath of the Mo'rokai custom game, and completing other challenges and Achievements to unlock increasing amounts of mythic rewards. You can even use Wagering Tokens to score extra Battle Points from your weekly games to help you on your way. With reward line items like the custom 'Overgrown Empire' terrain, evolving courier, 'Majesty of the Colossus' Tiny Prestige Item, 'Planetfall' Earthshaker Arcana, weaponless 'Axe Unleashed' item set, and so much more, the yearly call to adventure begins now.

Head over to The International 2019 Battle Pass page for more information on everything included in this year's tribute to the biggest Dota event of the year.

With only one round of Major and Minor tournaments remaining before we turn our eyes to Shanghai, the next gameplay patch will arrive after the conclusion of the final Major and Minor DPC Qualifiers starting soon.

This list covers the releases between March 20 and April 11 that are each part of a series of security updates.

Larger changes:

• Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as 'connect', 'bind', 'quit' and certain cvars such as 'cl_filterstuffcmd' are now only executable by trusted sources.
  
• Setting 'cl_filterstuffcmd' to a value greater than zero (e.g. 'cl_filterstuffcmd 1') will set a number of commands that are potentially abusable, such as 'say', 'fps_max', and 'setinfo', to also be only executable by privileged sources.

Fixes:

• Fixed client incorrectly blocking download of custom sprays

Security fixes:

• All custom resources downloaded from a server now have their file name's checked for safety before being allowed to download
  
• Invalid file extensions are now prevented in several commands
  
• Dynamic libraries are no longer searched for in custom resource directories
  
• Added additional file extensions to custom resource blocked extensions list
  
• Fixed buffer overflow in message delta parsing
  
• Fixed RCE in weapon message handling
  
• Fixed RCE in model loading
  
• Fixed buffer overflows in TGA and BMP loading
  
• Fixed buffer overflow in demo playback
  
• Fixed buffer overflows in model name loading
  
• Fixed buffer overflow in detail texture loading
  
• Fixed buffer overflow in console map listing
  
• Fixed command chaining in cvar's that specified config files to be passed to the 'exec' command

This list covers the releases between March 20 and April 15 that are each part of a series of security updates.

Larger changes:

• Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as 'connect', 'bind', 'quit' and certain cvars such as 'cl_filterstuffcmd' are now only executable by trusted sources.
  
• Setting 'cl_filterstuffcmd' to a value greater than zero (e.g. 'cl_filterstuffcmd 1') will set a number of commands that are potentially abusable, such as 'say', 'fps_max', and 'setinfo', to also be only executable by privileged sources.

Fixes:

• Fixed intermittent double weapon firing
  
• Fixed client incorrectly blocking download of custom sprays

Security fixes:

• All custom resources downloaded from a server now have their file name's checked for safety before being allowed to download
  
• Invalid file extensions are now prevented in several commands
  
• Dynamic libraries are no longer searched for in custom resource directories
  
• Added additional file extensions to custom resource blocked extensions list
  
• Fixed buffer overflow in message delta parsing
  
• Fixed RCE in weapon message handling
  
• Fixed RCE in model loading
  
• Fixed buffer overflows in TGA and BMP loading
  
• Fixed buffer overflow in demo playback
  
• Fixed buffer overflows in model name loading
  
• Fixed buffer overflow in detail texture loading
  
• Fixed buffer overflow in console map listing
  
• Fixed command chaining in cvar's that specified config files to be passed to the 'exec' command

This list covers the releases between March 20 and April 11 that are each part of a series of security updates.

Larger changes:

• Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as 'connect', 'bind', 'quit' and certain cvars such as 'cl_filterstuffcmd' are now only executable by trusted sources.
  
• Setting 'cl_filterstuffcmd' to a value greater than zero (e.g. 'cl_filterstuffcmd 1') will set a number of commands that are potentially abusable, such as 'say', 'fps_max', and 'setinfo', to also be only executable by privileged sources.

Fixes:

• Fixed client incorrectly blocking download of custom sprays

Security fixes:

• All custom resources downloaded from a server now have their file name's checked for safety before being allowed to download
  
• Invalid file extensions are now prevented in several commands
  
• Dynamic libraries are no longer searched for in custom resource directories
  
• Added additional file extensions to custom resource blocked extensions list
  
• Fixed buffer overflow in message delta parsing
  
• Fixed RCE in weapon message handling
  
• Fixed RCE in model loading
  
• Fixed RCE in saved game loading
  
• Fixed buffer overflows in TGA and BMP loading
  
• Fixed buffer overflow in demo playback
  
• Fixed buffer overflows in sequence file loading
  
• Fixed buffer overflows in model name loading
  
• Fixed buffer overflow in music playlist loading
  
• Fixed buffer overflow in detail texture loading
  
• Fixed buffer overflow in console map listing
  
• Fixed command chaining in cvar's that specified config files to be passed to the 'exec' command

With today’s Steam update, we’re making a change to the Workshop submission process to address fake item scams. First-time submissions to the Dota workshop will now require email verification before the item can be listed publicly. For those of you that have previously submitted Workshop items, you shouldn't see any change in functionality.

What do we mean by fake item scams? If you browse the Workshop enough, you may have come across an item with an image of a rare skin, promising giveaways or free content. These items often contain phishing links that are used to compromise Steam accounts.



In the past, our moderation team would review Workshop items reported by players. Fake item scams would then be deleted and our team would reach out to the owner of the account and let them know that their account is likely compromised. The problem with this approach was that some items went unreported for quite a while, allowing them to appear to players and get in the way of real submissions.

With today's update, Steam will send an email to the account owner when a new item is posted for the first time, asking them to review and confirm the item they just posted. If an item was posted without their knowledge, this email provides an easy path to recover the account and change their password.

Our aim with this change is to reduce the potential for scams on the Steam platform, without creating unnecessary hassle for frequent Workshop creators.

Let us know if you have feedback.

With today’s Steam update, we’re making a change to the Workshop submission process to address fake item scams. First-time submissions to the CS:GO workshop will now require email verification before the item can be listed publicly. For those of you that have previously submitted Workshop items, you shouldn't see any change in functionality.

What do we mean by fake item scams? If you browse the Workshop enough, you may have come across an item with an image of a rare skin, promising giveaways or free content. These items often contain phishing links that are used to compromise Steam accounts.



In the past, our moderation team would review Workshop items reported by players. Fake item scams would then be deleted and our team would reach out to the owner of the account and let them know that their account is likely compromised. The problem with this approach was that some items went unreported for quite a while, allowing them to appear to players and get in the way of real submissions.

With today's update, Steam will send an email to the account owner when a new item is posted for the first time, asking them to review and confirm the item they just posted. If an item was posted without their knowledge, this email provides an easy path to recover the account and change their password.

Our aim with this change is to reduce the potential for scams on the Steam platform, without creating unnecessary hassle for frequent Workshop creators.

Let us know if you have feedback.

Today marks the release of a new Dota Plus feature designed to enhance your experience for every Dota Pro Circuit event.

Available now in the iOS App Store and the Google Play Store, the Dota Pro Circuit companion app lets you earn Shards by predicting the winners of DPC matches, compete for even more Shards in the Fantasy Challenge, and follow all of this season's DPC action in real time, all from the comfort and convenience of your mobile device.

You'll be able to wager your personal stash of Plus Shards to predict the winners of DPC matches, with winnings added to your in-game total. The Fantasy Challenge offers the chance for more Shards, as you compete against your friends and the entire world to put together the best roster of pro players at each event. In addition, you'll have access to a dynamic News Feed that features your personalized favorite teams and players, helping you stay on top of every DPC development along the road to The International.

Check out a full list of the app's features here.

Android customers who are unable to access the Google Play Store can find a direct download here.

The International 2019 is still over the horizon, but it's never too early to start exploring new treasure ideas for this year's event—which will have a theme focused on overgrown, enchanted jungle ruins. With that in mind, we invite all Dota 2 Workshop creators to venture into their flourishing imaginations on the hunt for new designs to include in this year's Collector's Cache to see what concepts bear fruit.

As a slight change this year, please keep in mind that while we're happy to see item sets that feel at home in overgrown jungle ruins, artists should not feel constrained to working only within this year’s event theme. We're interested to discover any high quality designs, regardless of motif. However, as in the past, we would still like to ask artists to avoid the use of any concepts that involve human skulls, blood, and gore.

Make sure to mark your submissions with the "Collector’s Cache 2019" tag when tendering items to the Workshop. All submissions must be on the Dota 2 Workshop by Sunday, May 12th. We encourage all Dota fans to regularly visit the Workshop and vote through the Queue to ensure your voices are heard in the selection process.

In the meantime, our merchandise partners are also ready to create some new designs for this year's Dota 2 merchandise release. If you've got a concept you think will resonate with fans, submit your design to the Workshop with the "Merchandise" tag and see how much community support springs up.