CocoVaults Lite

UPDATE 5.0.0-LITE-LEGACY The Rebuild

CocoVaults Lite Legacy - Released September 28th, 2026 ---

COMPLETE REWRITE

CocoVaults Lite Legacy was rebuilt from scratch to close every duplication and data-loss path of CocoVaults 4, for Minecraft 1.8.8 - 26.2. Your vaults, names, icons and settings are kept, and vaults can now live in an embedded H2 database. ---

New: H2 Database

- Embedded H2 Database - Set Storage-Mode: H2 and every vault lives in one local database file (storage/data.mv.db, H2-Name in Settings.yml). Nothing to install and no database server to run: H2 comes inside the plugin, and the file is a standard H2 database that H2's own tools can open - Strictly Local - The H2 file belongs to this server alone: H2 locks it while the server runs and its network modes are never used - Crash-Safe Writes - Every save is on disk before it counts as done, so a server that is killed right after a save keeps it. Big vaults have no size limit - Same File on Every Version - CocoVaults Lite 5 opens this H2 database as it is (both editions write the same format), so it moves with the server across 26.2 and 26.3

Duplication & Data-Loss Fixes

- One Shared Live Inventory - The owner and staff now look at the very same live inventory. CocoVaults 4 gave every viewer a copy and merged them back, which duplicated items - Unreadable Vaults Stay Closed - A vault whose data cannot be read is never opened or overwritten. CocoVaults 4 opened it empty and saved over the real items - Safe Serialization Changes - The item format is detected when reading, so changing Serialization-Type no longer makes existing vaults unreadable - Ordered, Crash-Safe Saves - Each player's saves run in order on dedicated threads from deep-copied snapshots; files go to a temporary file, are flushed and moved into place, always in UTF-8 - No Silent Failures - Failed saves are reported and retried instead of being ignored, and empty vaults are saved too - Shutdown & World Saves - Vaults still open when the server stops are written before it closes, and every world save writes the pending vaults - Vault Size Fixes - The selector no longer loads vaults at 54 slots (a permission bypass); shrinking a vault moves the items into the free slots and keeps extra rows until they are emptied - No Main-Thread Stalls - Players leaving the server no longer freeze it while their vaults are saved - Blacklist Can't Be Bypassed - Shift-clicks, number keys, off-hand swaps and drags are all checked, including items hidden inside shulker boxes and bundles; blocked items are only handed back after a successful save - Safe Vault Names - Vault names can use colors and styles but never click, hover or insertion tags

New Features

- Backups & Restore - Automatic backups (interval and how many to keep), /cv admin backup, and /cv admin restore <file> [player] into any storage. A backup is taken before every destructive action - Audit Log - Daily files with every staff action and, optionally, what players move in and out of their vaults - Admin Toolkit - /cv admin list, inspect (read-only), delete, clear, purge empty|inactive and info; admin commands also run from the console; /cv <player> <vault> shortcut; one permission per admin command and cocovaults.admin.edit - /cv sort - Merges stacks and sorts a vault by item - Smart Blacklist - Rules by material, regex:, name:, lore:, model: and enchant:, plus a WHITELIST mode - Restrictions - Disabled worlds, blocked game modes and an open cooldown, with a bypass permission - Ender Chest Access - Right-clicking an ender chest can open the vault selector - Better Selector - Filler items, locked-vault previews, date format, configurable navigation slots and lore placeholders ({items}, {free}, {size}, {last_access}) - PlaceholderAPI - %cocovaults_max_vaults%, _available_vaults, _used_vaults, _size_<n>, _items_<n>, _free_<n> and _name_<n>, and PlaceholderAPI placeholders inside every message - Sounds & Update Checker - Open, close, denied and page sounds, and a notice to the console and admins when a new version is out - MiniMessage Everywhere - MiniMessage, & codes and &#RRGGBB in every message - Importers - PlayerVaultsX (even when it is no longer installed), AxVaults, EnderVaults, FairyVaults and CocoVaults 3 (JSON/YAML data) - Migrations - Move vaults between JSON, YAML and H2 with three confirmations, a progress bar and a backup first; switch storage live with /cv admin reload

Built for 1.8.8 - 26.2

- Java 8 Ready - One jar for Spigot and Paper 1.8.8 up to 26.2, running on Java 8 and every newer Java - Modern Names Everywhere - Materials and sounds use their modern names on every version (BLACK_STAINED_GLASS_PANE, block.chest.open) and are translated for old servers; old names work too - Items Survive Minecraft Upgrades - Vaults remember the data version they were saved with, and items are upgraded with Mojang's own converters when the server is updated: 1.8 potions and spawn eggs, the 1.13 flattening and every later rename - Exact Item Copies - Items are stored as binary NBT, which keeps names, lore and books exactly (quotes and brackets included) on every version - Old-Version Details - The 32-character title limit of 1.8 is handled, hex colors are used from 1.16 (the nearest classic color before), and off-hand and bundle checks apply where they exist - Every Command Works on 1.8 - Commands such as /cv icon work on 1.8 (CocoVaults 4 answered with an internal error there) - Easy Move to 26.3+ - CocoVaults Lite 5 shares the folder and the data format, and reads these vaults as they are

Important Changes

- Minecraft Version - This edition targets Minecraft 1.8.8 - 26.2 on Paper and Spigot. On 26.3+ use CocoVaults Lite 5 (a warning is shown at startup) - Settings.yml Updated Automatically - Every value you set is kept and the previous file is saved in old-configs/ - Data Compatible - CocoVaults Lite 4 data (JSON and YAML) is read as it is - CocoVaults 3 - A CocoVaults 3 configuration is kept as Settings-v3.yml; bring the vaults over with /cv admin import CocoVaults3 - Folia - Folia is not supported

Update Instructions

1. BACKUP YOUR DATA - copy plugins/CocoVaults-Lite before updating 2. Stop your server 3. Replace the old jar with CocoVaults-Lite-Legacy-5.0.0-LITE-LEGACY.jar 4. Start your server and check the console: Settings.yml is updated keeping your values 5. Coming from CocoVaults 3? Run /cv admin import CocoVaults3

Technical Details

For server administrators interested in the technical details: - Same code as CocoVaults Legacy without the database features - Compiled against Spigot 1.8.8 for Java 8; Adventure 4.26.1, NBT-API 2.16.1, XSeries 13.7.1 and Gson 2.14.0, relocated - H2 2.2.224 (the same in every edition) travels packed with XZ, is unpacked on first use into plugins/CocoVaults-Lite/libraries/ (checked by SHA-256) and loads apart from the server, without its web console and TCP/PG servers. The jar is 2.9 MB - Tested with bot players on Paper 1.8.8 and 1.21.11, with JSON and with H2 (including a server killed right after a save) - Reads the vaults of CocoVaults Lite 4 as they are --- Thank you for using CocoVaults Lite Legacy!

UPDATE 4.0.2 Security Hotfix

CocoVaults Lite - Released February 16th, 2026 ---

CRITICAL SECURITY UPDATE

This update patches multiple item duplication exploits and data integrity vulnerabilities. All servers should update immediately. ---

Critical Security Fixes

- Race Condition Dupe Fixed - Fixed race condition where delayed click tasks could overwrite vault saves on close, causing item duplication or loss - Blacklist Save Failure Exploit Fixed - Blacklisted items are now only returned to players after successful save, preventing duplication on save failures

Data Integrity Improvements

- Thread-Safe Vault Data - VaultData now uses proper synchronization to prevent corruption from concurrent access - Thread-Safe Active Vaults - Fixed non-thread-safe ArrayList causing potential crashes in ACTIVE_VAULTS registry - Async Save Performance - Vault close saves are now fully async, eliminating main thread blocking during slow I/O operations

Additional Fixes

- Event Priority Corrected - InventoryCloseEvent changed from MONITOR to HIGH priority to properly handle state modifications - Debounced Save Race Fixed - Fixed race condition where async removal could delete newly scheduled saves - Click Task Leak Fixed - Pending click/drag delayed tasks are now properly cancelled when vaults close

Update Instructions

1. BACKUP YOUR VAULT DATA - Always backup your plugins/CocoVaults folder before updating 2. Stop your server 3. Replace the old CocoVaults.jar with version 4.0.2 4. Start your server 5. Monitor console for any errors during startup

Critical Notes

- UPDATE IMMEDIATELY - Multiple critical duplication exploits have been patched - No configuration changes required - Fully compatible with existing vault data (JSON/YAML) - Improves stability and prevents item loss - All async operations now properly synchronized

Technical Details

For server admins & developers: - VaultData fields now use volatile for thread visibility - Synchronized access methods prevent data races - CopyOnWriteArrayList used for concurrent vault tracking - Async saves with proper completion callbacks - Race condition guards in close/save pipeline - Defensive copies prevent external modification --- Questions? Support at fruitforge.com/discord**

CocoVaults Lite — Update (Aligned with Official Version 4.0.1)

Released: January 8th, 2026 ---

What's New

- Full Version Alignment — Lite version updated to match the official plugin version.

Bug Fixes

- Vault Saving Fixes — Important corrections applied to vault saving. - Known Issues Resolved — All known errors have been fixed. - Dependencies Updated — All dependencies have been refreshed.

Important Changes

- Incompatible with Previous Files — Older version files (items and configuration) are not compatible; a clean reinstall is recommended. - This compatibility reset will not change again moving forward.

Update Instructions

1. Stop your server. 2. Remove previous Lite plugin files. 3. Place the new Lite .jar and fresh configuration. 4. Start your server. ⚠️ Important Notes: - Perform a clean reinstall due to incompatibility with prior versions. - Back up any data you wish to preserve before replacing files.

<div align="center">

🔄 UPDATE 2.4-ALPHA 🔄

CocoVaults Lite - Released August 24, 2025

</div> ---

✅ What's New

- Hotfix for plugin.yml dependencies - Fixed an inconsistency affecting dependencies - MiniMessage Dependency Updated - Updated to the latest version - Unused Dependencies Removed - Freed up storage by removing unused dependencies

📥 Update Instructions

1. Stop your server 2. Replace the old .jar file with the new one 3. Start your server

⚠️ Important Notes:

- This update requires a server restart

- The update improves plugin stability and reduces storage usage

---

<div align="center">

🔄 UPDATE 2.3-ALPHA 🔄

CocoVaults Lite - Released August 22, 2025

</div> ---

✅ What's New

- PlayerVaultsX Importer Fixed - Importer now works as expected - Cache Responsibilities Improved - Separated and optimized for better performance - Storage Methods Refactored - Partial refactor (except YAML) with up to 60% performance boost - Fixed /cv 0 Bug - Command no longer allows usage with zero as vault number

📥 Update Instructions

1. Stop your server 2. Replace the old .jar file with the new one 3. Start your server

⚠️ Important Notes:

- This update requires a server restart

- Configuration files are compatible with previous versions

---

<div align="center">

🔄 UPDATE 2.2-ALPHA 🔄

CocoVaults Lite - Released July 20, 2025

</div> ---

✅ What's New

- Minecraft 1.21.8 BETA Support - Be aware of update notes and report bugs on Discord - CocoVaults Premium Permission - Added permission to unlock specific vaults - Individualized GUI Permission - Main GUI opening permission now editable in Settings.yml

📋 Development Status

When will we leave ALPHA versions?

When the deprecations in the plugin's storage methods are resolved and support for Minecraft 1.21.8 is totally stable. (An update from NBT-API (@tr7zw/Item-NBT-API) is expected)

📥 Update Instructions

1. Stop your server 2. Replace the old .jar file with the new one 3. Start your server

⚠️ Important Notes:

- This update requires a server restart

- Configuration files are compatible with previous versions

- BETA support for MC 1.21.8 - Please report any issues

---

<div align="center">

🔄 UPDATE 2.1-ALPHA 🔄

CocoVaults Lite - Released July 8, 2025

</div> ---

✅ What's New

- Minecraft 1.21.6/7 Support - Full compatibility with the latest Minecraft versions

🔧 Improvements

- Updated dependencies to latest versions

🐛 Bug Fixes

- Fixed errors when disabling the server

📥 Update Instructions

1. Stop your server 2. Replace the old .jar file with the new one 3. Start your server

⚠️ Important Notes:

- This update requires a server restart

- Configuration files are compatible with previous versions

---

<span style="color:#FF5733;">CocoVaults Plugin - Major Update</span>

<span style="color:#E74C3C;">Critical Update Notice</span>

<span style="color:#E74C3C;">WARNING: DESTRUCTIVE UPDATE AHEAD!</span> <span style="color:#E74C3C;">BACKUP YOUR DATA BEFORE UPDATING!</span> --- We've completely redesigned our data storage and management system. We acknowledge the recent issues and have worked hard to address them.

<span style="color:#3498DB;">What's New</span>

<span style="color:#27AE60;">Storage Improvements:</span> - 100% optimization of JSON storage mechanisms - Fixed a critical write operation bug that was consuming excessive resources - Enhanced YAML writing capabilities - Implemented a robust caching system making operations light as a feather <span style="color:#9B59B6;">Data Protection:</span> - Fixed corruption issues that occurred during server shutdowns - Introduced a comprehensive backup and restoration system

<span style="color:#F39C12;">Upgrade Instructions</span>

1. BACKUP YOUR EXISTING DATA 2. Disable the current plugin 3. Delete the old version 4. Install the new version 5. Restart your server Thank you for your continued support. - TeoremalDev

Finally, support for version 1.21.5 is here, packed with new improvements! Please shut down your server, install the update, and then start it up. Do not use Plugin Loaders. Fixes: - Fixed error writing data to JSON - Fixed JSON corruption and malformation when writing in bulk - Fixed error writing to YAML when shutting down the server Improvements: - General optimization applied to all storage types - Massive optimization when loading and saving data - Now vaults that receive no modifications are not saved - Dependencies updated - Added a “Maximum Vaults” setting in the configuration

Hotfix:

- Corrected fatal error that caused inconsistencies in the plugin cache

Improvements:

- Now, command messages are nullable - Refactored LogManager class for greater efficiency - SplashX updated with better design

New Features:

- NEW Vault Renaming System, applicable with /cv rename

Fixes:

- Fixed an issue where names were not displayed on the page navigation arrows in the /cv gui. - Fixed a critical bug that allowed abuse of the Blacklist. - Updated Dependencies - Fixed Update Checker

New Features:

- NEW version detection system that automatically configures your plugin and adds missing keys. WE RECOMMEND DELETING YOUR OLD CONFIGURATION FILE. - NEW internal placeholders to indicate the available or occupied space in your Vaults. - NEW cooldown system to prevent command abuse. - NEW sounds added when opening/closing Vaults. - NEW system that allows you to specify whether closing a Vault should reopen the main GUI or not.

Please delete your old configuration file!! Changes: - Minecraft 1.21.4 Support - Fixed NBT bug that caused casual problems in the main GUI of the /cv gui command - Fixed a serious error detected when reloading the plugin - Fixed maximized compatibility with Minecraft 1.8.8 - New libraries implemented for maximum compatibility of materials and design - Implemented new fields to edit more data from the /cv gui, such as materials and lore - Implemented new methods for improvements in error handling - Refactored methods responsible for Deserialization and Serialization [Experimental] - Deprecated YAML STORAGE, Migrate your data to another storage mode such as JSON

Changes: - Added full support for 1.8.8 - 1.21.3

Changes: - Support for Minecraft 1.21.3 - Fixed YAML support, data will no longer be lost - Methods, classes and functions refactored and optimized to avoid lag - Fixed icon function in /coco gui - Hidden attributes for /coco gui icons

Changes: - Fixed known bug when saving some data when restarting the server - Removed unused dependencies

Changes: - Minecraft 1.21.1 Supports

Changes: - Fixed a bug that did not allow some players to open Vaults

Changes: - Added loader version - Added full compatibility with legacy versions - Dependencies corrected and added to Jar