diff --git a/.github/workflows/build-version.yml b/.github/workflows/build-version.yml
index 6818313..7f1d727 100644
--- a/.github/workflows/build-version.yml
+++ b/.github/workflows/build-version.yml
@@ -52,6 +52,11 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
+      # The container runs as root while the checkout belongs to the runner's
+      # user, and Git refuses to read a repository owned by someone else.
+      - name: Let Git read the checkout
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
       - name: Select and export the matching packaging snapshot
         id: prepare
         env:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d2a82b..2332e27 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,12 @@ publishes a new Vortex version, taking any pending notes with it.
 
 ## Unreleased
 
+- Building the package, also with the 1.16.9 and 2.6.2 recipes, no longer
+  downloads QuickBMS from altervista.org: the server refuses the download and
+  on some networks the request hung until the build was interrupted. The
+  "Build a selected Vortex version" workflow works again on a fork; Git refused
+  to read the checkout inside the build container. (#24)
+
 ## 2.9.0-3 - 2026-10-23
 
 - A game added by hand, outside Steam and Heroic, runs in Wine's default
diff --git a/PKGBUILD b/PKGBUILD
index b97d519..82b06a2 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -232,6 +232,11 @@ prepare() {
     patch -Np1 -i "$srcdir/$compatibility_patch"
   done
 
+  # quickbms-support downloads QuickBMS from altervista.org while it builds. The
+  # server refuses the download anyway, and on some networks the request hangs
+  # until the build is interrupted. An existing dependencies folder skips it.
+  mkdir -p extensions/quickbms-support/dependencies
+
   node - "$pkgver" "$pkgver-$pkgrel" <<'NODE'
 const fs = require('node:fs');
 for (const file of ['src/main/package.json', 'packages/vortex-api/package.json']) {
diff --git a/recipes/1.16.9/PKGBUILD b/recipes/1.16.9/PKGBUILD
index e4521f5..e423523 100644
--- a/recipes/1.16.9/PKGBUILD
+++ b/recipes/1.16.9/PKGBUILD
@@ -153,6 +153,10 @@ prepare() {
   done
   printf 'export const LINUX_PACKAGE_VERSION: string = "%s-%s";\n' \
     "$pkgver" "$pkgrel" > src/extensions/updater/linuxBuild.ts
+  # quickbms-support downloads QuickBMS from altervista.org while it builds. The
+  # server refuses the download anyway, and on some networks the request hangs
+  # until the build is interrupted. An existing dependencies folder skips it.
+  mkdir -p extensions/quickbms-support/dependencies
   bash scripts/build-linux.sh prepare
 }
 
diff --git a/recipes/2.6.2/PKGBUILD b/recipes/2.6.2/PKGBUILD
index f0a6034..e448ee3 100644
--- a/recipes/2.6.2/PKGBUILD
+++ b/recipes/2.6.2/PKGBUILD
@@ -223,6 +223,11 @@ prepare() {
     patch -Np1 -i "$srcdir/$compatibility_patch"
   done
 
+  # quickbms-support downloads QuickBMS from altervista.org while it builds. The
+  # server refuses the download anyway, and on some networks the request hangs
+  # until the build is interrupted. An existing dependencies folder skips it.
+  mkdir -p extensions/quickbms-support/dependencies
+
   node - "$pkgver" "$pkgver-$pkgrel" <<'NODE'
 const fs = require('node:fs');
 for (const file of ['src/main/package.json', 'packages/vortex-api/package.json']) {