• Special needs platform, curseforge, gets its own special build that uses ugly AWT only for file-related operations. Other platforms are unaffected.
• Improved Lunix folder opening fallback

• Fixed Referer-based bypass in the HTTP port reverse proxy that let attackers reach arbitrary paths on upstream ports
• Fixed path traversal in the HTTP port reverse proxy via .. / percent-encoded variants escaping the mounted route prefix
• HTTP port reverse proxy now forwards only an allow-list of request headers to upstreams, preventing header smuggling (Authorization, Cookie, X-Forwarded-*, etc.) to localhost services
• Added support for modern and HD skins to ClientUtil.drawPlayerFace (moved over from Wawel Auth)

• Added possibility to reorder Server entries in the Multiplayer menu while holding shift
• Added own gif decoding implementation, phasing out skrimage dependency
• Shadowing me.saharnooby:qoi-java now. Support for server-icon.qoi
• Idem, support for webp. Shadowing com.twelvemonkeys.imageio:imageio-webp
• Moved config to fentlib subfolder
• Added fishing loot table system
• Normalized publicBaseUrl as a shared public base URL for compat mods
• Debug config to display opened GUI classes
• Added client sound utilities to set custom max attenuation distances without increasing sound volume

Нет описания изменений