FragGuard

26.2-3-rc.1

Added

• Added committed Gradle dependency locking with CI validation that the lock state remains current.
• Added regression coverage for duration overflow, retention-limit parsing, and malformed or overflowing radius values.
• Added regression coverage for same-tick bonemealed structure/fertilization overlap, selective coordinate filtering, and tick-scoped deduplication expiry.
• Added weekly Dependabot version-update checks for Gradle and GitHub Actions, grouping routine updates while keeping Paper and SQLite upgrades in separate pull requests for dedicated server validation.

Changed

• Pinned the Paper API used for compilation and tests to the exact tested 26.2.build.62-beta release instead of a moving 26.2.build.+ selector.
• Hardened GitHub Actions by pinning every third-party action to a reviewed full commit SHA and separating the read-only release build from the write-enabled release upload job.
• Limited GH_TOKEN exposure to the release-inspection and release-upload steps that require it.
• Marked the committed Gradle wrapper executable, added SHA-256 verification for the Gradle 9.3.0 distribution, and updated build documentation to use the repository wrapper and the current 26.2-3 JAR name.
• Kept bonemealed StructureGrowEvent coordinates authoritative when Paper emits the paired same-tick BlockFertilizeEvent, while preserving generic fertilization logging for non-overlapping blocks.
• Updated SQLite JDBC from 3.49.1.0 to 3.53.2.1, Shadow from 9.4.2 to 9.6.1, and SLF4J NOP from 2.0.16 to 2.0.18, with the Gradle lock state refreshed to the resolved versions.

Fixed

• Fixed #10 by making dependency resolution reproducible while retaining read-only push and pull-request compilation, test, JAR-content, version, and checksum verification.
• Fixed #11 by removing repository write permission and GH_TOKEN from release build steps; only the isolated upload job can write release assets.
• Fixed #12 by storing gradlew as executable, verifying the wrapper distribution checksum, and correcting the README's obsolete wrapper/build-output instructions.
• Fixed #13 by using exact arithmetic for duration tokens, converting overflow into a validation error, stopping as soon as the configured retention limit is exceeded, and rejecting malformed lookup radii instead of silently falling back to radius 15.
• Fixed #36 by preventing a paired BlockFertilizeEvent from relabeling bonemealed trees, mushrooms, and other generated structures from STRUCTURE_GROW to generic FERTILIZE history.
• Fixed #18 by bringing the identified outdated runtime/build dependencies current and adding ongoing Dependabot maintenance without grouping Paper or SQLite into routine dependency batches.
• Fixed #19 by updating SQLite JDBC to 3.53.2.1 and locking the resolved dependency state.
• Fixed #20 by updating the Shadow plugin to 9.6.1 and validating the shaded plugin build through CI.

What's Changed

• Dev/cleanup rc1 by @mccreeper1318 in https://github.com/mccreeper1318/fragguard/pull/37
• 36 avoid relabeling bonemealed structures as fertilization by @mccreeper1318 in https://github.com/mccreeper1318/fragguard/pull/38

Full Changelog: https://github.com/mccreeper1318/fragguard/compare/26.2-3-beta.4...26.2-3-rc.1

[!WARNING] Release Candidate (RC) Build

This is a pre-release version intended for final testing before a stable release. While it is expected to be mostly complete, bugs, regressions, or unexpected behavior may still occur.

Back up your server and important data before installing. Use this build in production at your own risk, and please report any issues you encounter.