SSoggySouls for Hardcore

deps: bump net.neoforged.moddev (#565) Bumps the gradle-dependencies group with 1 update: net.neoforged.moddev. Updates net.neoforged.moddev from 2.0.147 to 2.0.148 --- updated-dependencies: - dependency-name: net.neoforged.moddev dependency-version: 2.0.148 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: carrier tracking, world boundaries, admin death flow, and trust revocation (#564) * fix(paper): fix skull pickup carrier tracking and cancel checks in PlayerItemEvents and GhostModeEvents * fix(paper): fix ritual height boundary checks and death coordinate clamping * fix(paper): apply death transition to online players when lives set to zero in AdminCommand * fix(common,paper): demote reciprocal friendship to trusted on revoke in trust services * fix(paper): reject negative timer values in RPConfigCommand and use root locale in SetLimboSpawnCommand

fix: resolve limbo release loops, ghost state edge cases, and ritual permissions (#563) * fix(paper): untrack revived players in LimboCheckTask to prevent duplicate release executions * fix(paper): clear deathholder in PlayerStateEvents on player revive * fix(paper): show own death immediately and null-check world in ObituariesCommand * fix(platform): safely skip corrupt UUID keys when loading GhostState NBT * fix(paper): restore spectators and remove dropped heads in SetLivesCommand when lives restored * fix(neoforge,forge): prevent ghosts from triggering revival structures in RevivalStructureListener

perf(paper): optimize tab completion player name filtering (#560) - Eliminate redundant player.getName() invocations per player in TabCompleteUtil - Hoist safePrefix.length() calculation outside iteration loop

fix: resolve storage, revival, bounds, and social command edge cases (#558) * fix(common): prevent data loss with atomic save in DlcStorage * fix(common): correct error message when self-targeting in DlcTrustService * fix(paper): skip corrupt UUID entries in RPSocial getRelationsToAll * fix(paper): provide fallback fence materials for unbootstrapped tag values in RPConfig * fix(paper): add maxHeight bounds check in ReviveHelper ritual pattern matcher * fix(paper): clear death holder state on revival and prevent duplicate social error messages

test(common): add unit tests for DatabaseInitializationException and DlcRelation (#554)

perf(fabric): use dedicated DB_EXECUTOR for command async operations (#551)

security(paper): enforce Limbo OP security in SetLimboSpawnCommand (#547)

test(paper): add unit tests for ExtraLifeManager recipe registration (#510) * test(paper): add unit tests for ExtraLifeManager recipe registration - Add unit tests for ExtraLifeManager.registerRecipe(), unregisterRecipe(), and createExtraLifeItem(). - Cover recipe registration with default fallback ingredients and custom YAML ingredients. - Verify warning logs when invalid recipe keys or materials are provided. - Verify recipe unregistration and extra life item creation with custom and fallback materials. * test(paper): add unit tests for ExtraLifeManager recipe registration - Add unit tests for ExtraLifeManager.registerRecipe(), unregisterRecipe(), and createExtraLifeItem(). - Cover recipe registration with default fallback ingredients and custom YAML ingredients. - Verify warning logs when invalid recipe keys or materials are provided. - Verify recipe unregistration and extra life item creation with custom and fallback materials. * test(paper): add unit tests for ExtraLifeManager recipe registration - Add unit tests for ExtraLifeManager.registerRecipe(), unregisterRecipe(), and createExtraLifeItem(). - Cover recipe registration with default fallback ingredients and custom YAML ingredients. - Verify warning logs when invalid recipe keys or materials are provided. - Verify recipe unregistration and extra life item creation with custom and fallback materials. * test(paper): add unit tests for ExtraLifeManager recipe registration - Add unit tests for ExtraLifeManager.registerRecipe(), unregisterRecipe(), and createExtraLifeItem(). - Cover recipe registration with default fallback ingredients and custom YAML ingredients. - Verify warning logs when invalid recipe keys or materials are provided. - Verify recipe unregistration and extra life item creation with custom and fallback materials. * docs(paper): add Javadocs to ExtraLifeManager test setup and test cases * fix(paper): use lowercase plugin namespace for extra life keys and improve unit tests * test(paper): verify itemMeta is applied in testCreateExtraLifeItem --------- Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

deps: bump the gradle-dependencies group with 5 updates (#508) * deps: bump the gradle-dependencies group with 5 updates Bumps the gradle-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [de.siegmar:fastcsv](https://github.com/osiegmar/FastCSV) | 2.0.0 | 4.4.0 | | [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | 8.0.33 | 26.7.0 | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | 5.23.0 | 5.24.0 | | [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | 5.23.0 | 5.24.0 | | [gradle-wrapper](https://github.com/gradle/gradle) | 9.7.1 | 9.8.0 | Updates de.siegmar:fastcsv from 2.0.0 to 4.4.0 - [Release notes](https://github.com/osiegmar/FastCSV/releases) - [Changelog](https://github.com/osiegmar/FastCSV/blob/main/CHANGELOG.md) - [Commits](https://github.com/osiegmar/FastCSV/compare/v2.0.0...v4.4.0) Updates com.mysql:mysql-connector-j from 8.0.33 to 26.7.0 - [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHA… - [Commits](https://github.com/mysql/mysql-connector-j/compare/8.0.33… Updates org.mockito:mockito-core from 5.23.0 to 5.24.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.2… Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.2… Updates gradle-wrapper from 9.7.1 to 9.8.0 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](https://github.com/gradle/gradle/compare/v9.7.1...v9.8.0) --- updated-dependencies: - dependency-name: de.siegmar:fastcsv dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: com.mysql:mysql-connector-j dependency-version: 26.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.mockito:mockito-core dependency-version: 5.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: gradle-wrapper dependency-version: 9.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * chore(forge): align neoforge mysql jarjar versions --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

fix(paper): add null safety and edge case handling for sendInteractiveUsage * test(paper): add null safety and edge case tests for sendInteractiveUsage - Handle null usageText and suggestCmd safely in CommandUtil.sendInteractiveUsage - Add test cases in CommandUtilTest for null inputs with Player and CommandSender * fix(paper): remove incompatible ClickEvent.value calls for Adventure 5

perf: use dedicated executor service for database IO in lifecycle listeners - Introduce cached thread pool DB_EXECUTOR with daemon threads - Pass DB_EXECUTOR to CompletableFuture.runAsync and delayedExecutor - Prevent common pool exhaustion during blocking database I/O

refactor(paper): clarify ghost head holder tracking logic comment - Refactor informal comment in BlockEvents.java to clearly describe the ghost head holder tracking feature when breaking a skull block.

refactor: remove unused imports across codebase * refactor(common): remove unused import Locale in DlcNames * refactor(fabric): remove unused import MinecraftServer in HeadEffectsTask * refactor(fabric): remove unused import HashSet in HeadEffectsTask * refactor(fabric): remove unused import Set in HeadEffectsTask * refactor(fabric): remove unused import UUID in HeadEffectsTask * refactor(fabric): remove unused import IntegerArgumentType in DlcCommandRegistration * refactor(fabric): remove unused import Arrays in DlcCommandRegistration * refactor(fabric): remove unused import GlobalPos in LimboServerListener * refactor(forge): remove unused import FMLCommonSetupEvent in SSoggySoulsMod * refactor(forge): remove unused import HeadDropListener in SSoggySoulsMod * refactor(forge): remove unused import HashSet in HeadEffectsTask * refactor(forge): remove unused import Set in HeadEffectsTask * refactor(forge): remove unused import UUID in HeadEffectsTask * refactor(forge): remove unused import IntegerArgumentType in DlcCommandRegistration * refactor(forge): remove unused import Arrays in DlcCommandRegistration * refactor(forge): remove unused import Level in LimboServerListener * refactor(neoforge): remove unused import Mod in ExtraLifeManager * refactor(neoforge): remove unused import DatabaseManager in HeadDropListener * refactor(neoforge): remove unused import SSoggySoulsMod in HeadEffectsTask * refactor(neoforge): remove unused import HashSet in HeadEffectsTask * refactor(neoforge): remove unused import Set in HeadEffectsTask * refactor(neoforge): remove unused import UUID in HeadEffectsTask * refactor(neoforge): remove unused import EntityType in RevivalStructureListener * refactor(neoforge): remove unused import PlayerData in RevivalStructureListener * refactor(neoforge): remove unused import Optional in RevivalStructureListener * refactor(neoforge): remove unused import IntegerArgumentType in DlcCommandRegistration * refactor(neoforge): remove unused import Arrays in DlcCommandRegistration * refactor(paper): remove unused import IOException in AdminLogCommand * refactor(paper): remove unused import Bukkit in ObituariesCommand * refactor(paper): remove unused import Stream in RPConfigCommand * refactor(paper): remove unused import Command in SocialCommandTest * refactor(paper): remove unused import CommandSender in SocialCommandTest * refactor(paper): remove unused import Player in SocialCommandTest * refactor(paper): remove unused import RPStatic in SocialCommandTest * refactor(paper): remove unused import RPStorage in SocialCommandTest * refactor(paper): remove unused import JavaPlugin in SocialCommandTest * refactor(paper): remove unused import File in SocialCommandTest * refactor(paper): remove unused import IOException in SocialCommandTest * refactor(paper): remove unused import Files in SocialCommandTest * refactor(paper): remove unused import UUID in SocialCommandTest * refactor(paper): remove unused import Logger in SocialCommandTest * refactor(paper): remove unused import mock in SocialCommandTest * refactor(paper): remove unused import when in SocialCommandTest

fix(paper): eliminate async command re-execution in LimboServerListener * fix(paper): fix command execution injection in limbo listener - Eliminate player.performCommand call in LimboServerListener - Evaluate player game mode synchronously in command preprocess event - Prevent arbitrary command re-execution vulnerabilities for visitors * fix(paper): fix command execution injection in limbo listener - Eliminate player.performCommand call in LimboServerListener - Evaluate player game mode synchronously in command preprocess event - Prevent arbitrary command re-execution vulnerabilities for visitors * chore: remove .jules documentation and revert readme formatting

Merge pull request #477 from SSoggy-Group/claude/game-code-bugs-review-143283 fix: in-game bugs, exploits and edge cases across all loaders

Merge pull request #475 from SSoggy-Group/claude/remove-codeql-sonar ci: remove CodeQL workflow and SonarCloud integration

deps: bump the gradle-dependencies group across 1 directory with 6 updates (#472) * deps: bump the gradle-dependencies group across 1 directory with 6 updates Bumps the gradle-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [de.siegmar:fastcsv](https://github.com/osiegmar/FastCSV) | 2.0.0 | 4.4.0 | | org.sonarqube | 7.3.0.8198 | 7.5.0.8588 | | [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | 7.0.2 | 7.1.0 | | [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | 8.0.33 | 26.7.0 | | [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | 3.45.3.0 | 3.53.4.0 | | org.slf4j:slf4j-api | 2.0.17 | 2.0.20 | Updates de.siegmar:fastcsv from 2.0.0 to 4.4.0 - [Release notes](https://github.com/osiegmar/FastCSV/releases) - [Changelog](https://github.com/osiegmar/FastCSV/blob/main/CHANGELOG.md) - [Commits](https://github.com/osiegmar/FastCSV/compare/v2.0.0...v4.4.0) Updates org.sonarqube from 7.3.0.8198 to 7.5.0.8588 Updates com.zaxxer:HikariCP from 7.0.2 to 7.1.0 - [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHAN… - [Commits](https://github.com/brettwooldridge/HikariCP/compare/Hikar… Updates com.mysql:mysql-connector-j from 8.0.33 to 26.7.0 - [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHA… - [Commits](https://github.com/mysql/mysql-connector-j/compare/8.0.33… Updates org.xerial:sqlite-jdbc from 3.45.3.0 to 3.53.4.0 - [Release notes](https://github.com/xerial/sqlite-jdbc/releases) - [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG) - [Commits](https://github.com/xerial/sqlite-jdbc/compare/3.45.3.0...… Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.20 --- updated-dependencies: - dependency-name: de.siegmar:fastcsv dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.sonarqube dependency-version: 7.5.0.8588 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.zaxxer:HikariCP dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.mysql:mysql-connector-j dependency-version: 26.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.xerial:sqlite-jdbc dependency-version: 3.53.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * deps: keep fastcsv 2.0.0 and mysql-connector-j 8.0.33, align NeoForge prefers - fastcsv force must stay at 2.0.0: ForgeGradle's mapping step calls CsvReaderBuilder.errorOnDifferentFieldCount(), removed in fastcsv 3.x (see forge/build.gradle comment). - Connector/J 26.x requires MySQL 8.0+, but docs promise MySQL 5.7+ / MariaDB 10.2+. NeoForge's strict [8.0,9.0) range also rejected 26.7.0, so loaders would have shipped different drivers (CodeRabbit review). - NeoForge prefer versions bumped so jarJar ships the same HikariCP and sqlite-jdbc as Fabric/Forge/Paper. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Maaren <80040706+SSoggyTacoMan@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Merge pull request #474 from SSoggy-Group/claude/ci-jdk25-cleanup chore: remove leftover patch and .orig merge artifacts

Merge pull request #473 from SSoggy-Group/claude/payload-ghost-state-bugs-15b4fe fix: Forge EventBus 7 crash, limbo damage/portal handling, docs compat claims

feat: align base release version for 26.X release

fix(common): resolve duplicate file collision in fat jars - Set duplicatesStrategy to EXCLUDE in Fabric and Forge jar tasks. - Prevents build failure caused by multiple database drivers providing the same META-INF/services/java.sql.Driver file.

fix(fabric): fix empty remapJar by merging common classes directly - Remove include project(':common') JiJ embed. Loom's processIncludeJars requires valid semver on all JiJ deps; common has version=unspecified, causing Loom to silently drop the embed and produce a 308-byte empty remapJar JAR. - Add from(project(':common').sourceSets.main.output) to the jar task instead, directly merging common classes into the Fabric JAR \u2014 the same pattern Forge already uses. - All DB libs (HikariCP, MySQL, SQLite) remain as JiJ embeds via their existing include implementation(...) declarations. - Add --no-build-cache to CI gradlew invocation to prevent stale cached remapJar outputs from being restored.

Manual release 4.5.5

fix(fabric): rename unused lambda params to suppress CodeQL - Rename sender → ignoredSender in JOIN events (MainServerListener, GhostModeEvents, LimboServerListener) - Rename alive → ignoredAlive in AFTER_RESPAWN (MainServerListener) - Rename source/amount → ignoredSource/ignoredAmount in ALLOW_DAMAGE (LimboServerListener) - Rename origin → ignoredOrigin in AFTER_PLAYER_CHANGE_WORLD (LimboServerListener) - Rename server → ignoredServer in DISCONNECT (GhostModeEvents) - Rename world/hand/hitResult → ignored* in UseBlockCallback, UseItemCallback, AttackEntityCallback, UseEntityCallback (GhostModeEvents) - Rename pos → ignoredPos in PlayerBlockBreakEvents.AFTER (GhostBlockEvents) - Rename registries → ignoredRegistries in PersistentState.Type lambda (GhostState) - Rename p → ignoredPlayer in screen handler factory lambda (ReviveSkullManager) - Rename id → ignoredId in profile.id().ifPresent lambda (ReviveSkullManager) - Rename button → ignored in Back button handler (ModMenuIntegration) - Rename registryAccess/environment → ignored* in CommandRegistrationCallback (CommandRegistration) - Rename unused context → ignoredContext in two .suggests() lambdas (DlcCommandRegistration)

Merge pull request #204 from SSoggy-Group/porter/ghost-teleport-feedback-parity Porter: Ghost Mode teleport feedback ported to Forge, NeoForge, and Fabric

Manual release 4.5.2

Manual release 4.5.1

Manual release 4.5.0

fix(paper): resolve compilation errors in ssoggysouls main class - Remove redundant raw text and incorrect text block closing delimiter - Fixes "Execution failed for task ':paper:compileJava'"

Merge pull request #202 from SSoggy-Group/security/jdbc-injection fix(common): prevent JDBC connection URL injection

Merge pull request #201 from SSoggy-Group/finding-autofix-b80c6b49 Fix for Useless comparison test

Merge pull request #198 from SSoggy-Group/palette-admin-help-4893649614816537863 Palette: Make admin help menu interactive

refactor(paper): improve admin command logic flow - Extract access and security checks in AdminCommand - Update DlcStorageTest name to reflect actual behavior

Merge pull request #197 from SSoggy-Group/codex/remove-unused-import-mod refactor(forge): remove unused mod import

Merge pull request #194 from SSoggy-Group/ssoggy/test-dlc-storage Add DlcStorage I/O error handling tests

Merge pull request #187 from SSoggy-Group/test-databasemanager-5508935127045918510 Add tests for DatabaseManager implementations

Merge pull request #186 from SSoggy-Group/test/dlcnames-2816881178733817356 Add unit tests for DlcNames utility

Merge pull request #185 from SSoggy-Group/add-server-transfer-util-tests-9563464771644118113 Add tests for ServerTransferUtil in Paper

Merge pull request #181 from SSoggy-Group/copilot/add-import-for-configmanager Fix Forge config import and align Limbo listener updates

Merge porter/sync-limbo-portal-block-6869419389601687167 into main

refactor: replace hardcoded limbo message string with constant in LimboServerListener

refactor(common): remove redundant abstract decl - Remove redundant abstract method declaration for savePluginVersion from AbstractDatabaseManager as it is already declared in the DatabaseManager interface (java:S3038)

fix(forge): secure grace period regex parser - Delegate grace period parsing in ConfigManager to common's TimeUtil - Eliminate redundant regex pattern compilation and potential ReDoS vulnerability (java:S5852) - Limit maximum configuration string length to 64 characters for robust input validation

fix(paper): prevent array index out of bounds - Correctly initialize the dimension name array with 2 elements when the length is less than 2 - Add braces to the conditional block for SonarCloud compliance

Merge pull request #179 from SSoggy-Group/bolt/optimize-ghost-tick-1076919741355533222 Bolt: optimize ghost player iteration in tick events

Merge pull request #175 from SSoggy-Group/fix-forge-hrm-unconditional-5305541429059611162 fix(forge): fix forge build and workflow syntax

Merge pull request #169 from SSoggy-Group/chore-fix-unused-import-reviveskullmanager-6153602906067207009 remove unused imports in ReviveSkullManager

Merge pull request #162 from SSoggy-Group/dependabot/gradle/org.mockito-mockito-core-5.23.0 deps: bump org.mockito:mockito-core from 5.14.2 to 5.23.0

idk

Merge pull request #148 from SSoggy-Group/fix-database-fail-open-1805799215517001772 fix: enforce fail-stop on database init failure for Fabric/Forge

Merge pull request #150 from SSoggy-Group/ai-findings-autofix/common-src-main-java-org-ssoggy-ssoggysouls-database-MySQLManager.java Potential fixes for 4 code quality findings

Merge pull request #153 from SSoggy-Group/fix-sql-injection-12595559351948585959 Sentinel: [CRITICAL] Fix SQL injection in database managers

Merge pull request #151 from SSoggy-Group/ai-findings-autofix/fabric-src-main-java-org-ssoggy-ssoggysouls-SSoggySoulsMod.java Potential fixes for 2 code quality findings

Merge pull request #143 from SSoggy-Group/copilot/remove-unnecessary-null-check fix(paper): harden LeaveLimboCommand messaging and async flow

fix(common): secure dynamic sql queries - validate SQL identifiers before composing table and column names - route trusted SQL text through a guarded helper for Sonar S2077 - whitelist MySQL migration column definitions

Merge pull request #130 from SSoggy-Group/copilot/fix-docs-uppercase-ensures fix(common): apply review feedback across common/fabric/forge/docs

Merge pull request #131 from SSoggy-Group/copilot/fix-sqlite-connection-contention Fix SQLite pooling/config safety and bulk death-status query handling

fix(github): resolve workflow regex syntax error * Assign regex patterns to local variables in auto-release workflow. * This avoids bash parsing and syntax errors with parenthesis inside conditional expressions.

chore(github): remove manual sonar integration * Remove sonar task and plugin from root build.gradle. * Remove sonar caching and scan steps from github actions ci workflow. * Remove empty redundant test directories from fabric and forge.

Merge pull request #127 from SSoggy-Group/porter-sync-checkforupdates-fabric-9865318437098118406 Porter: checkForUpdates config getter/setter ported to Fabric

Merge pull request #119 from SSoggy-Group/codex/fix-fabric-revival-callbacks-vulnerability fix(fabric): prevent dead/spectator players from triggering revival flows

Merge pull request #122 from SSoggy-Group/codex/fix-fabric-limbo-command-confinement-issue Harden Fabric Limbo confinement: track dead players, block commands and portal escapes

chore(github): merge gradle and sonar workflows into ci * Merge gradle.yml and build.yml into a single ci.yml workflow. * Eliminate redundant compilation to save GitHub Action minutes. * Add conditional check for SONAR_TOKEN to support fork pull requests. * Limit dependency-submission scanner to main branch push events only.

Update Dependabot configuration for better clarity

chore(github): resolve codeql paths input error - Create custom CodeQL configuration file under .github/codeql/ - Define specific Java source directories to include in scanning - Update codeql.yml workflow to use config-file input parameter - Remove invalid inline paths input parameter from initialization

chore(github): integrate sonarqube cloud analysis - Add org.sonarqube plugin version 7.3.0.8198 to root build.gradle - Configure sonar properties block with projectKey and organization - Create .github/workflows/build.yml to run analysis on main branch and PRs

Modify CodeQL workflow for JDK 21 and actions version Updated CodeQL workflow to use JDK 21 and checkout action v4.

Merge pull request #115 from SSoggy-Group/codex/propose-fix-for-fabric-loom-vulnerability fix(fabric): pin fabric loom version

feat(paper): support single-server database mode - handle databaseinitializationexception on startup - force spectator death mode in sqlite single-server mode - ignore limbo server transfer in single-server mode - update paper config.yml default death-mode to spectator

Add Java CI workflow with Maven support This workflow builds a Java project using Maven and caches dependencies to improve execution time.

Refactor CodeQL workflow and update build mode Removed unnecessary comments and updated build mode to manual for Gradle support.

Update dependabot.yml for GitHub Actions and Gradle Added configurations for GitHub Actions and Gradle updates.

Merge pull request #97 from SSoggy-Group/codex/propose-fix-for-modrinth-publish-vulnerability fix(ci): pin Modrinth publish action to immutable commit SHA

Merge pull request #98 from SSoggy-Group/codex/fix-command-injection-in-auto-release-workflow fix(ci): prevent manual_version command injection in auto-release workflow

Merge pull request #101 from SSoggy-Group/codex/propose-fix-for-unbounded-yaml-writes fix: bound RPStorage async save queue to prevent player-triggered backlog DoS

Merge pull request #103 from SSoggy-Group/codex/propose-fix-for-forge-mysql-tls-vulnerability fix(mysql): require verified TLS for JDBC connections

refactor: improve code readability in PlayerStateEvents via minor reformatting and unused import removal

Merge pull request #95 from SSoggy-Group/codex/fix-privileged-workflow-using-mutable-tags chore: pin dependency submission actions

Merge pull request #93 from SSoggy-Group/add-dependency-submission-action-8349091531644397057 Add Maven Dependency Submission Action

Merge pull request #94 from SSoggy-Group/fix-revival-plus-admin-revive-ghost-state-12083552751472943421 Fix Ghost Mode persistence after admin revive (Bukkit/Spigot)

Merge pull request #90 from SSoggy-Group/codex/update-auto-release.yml-for-manual-triggers chore: add release toggles to workflow

Merge pull request #87 from SSoggy-Group/fix/config-hrm-dlc-grouping-8801253232516585837 Group DLC features under the HRM block in config

Merge pull request #88 from SSoggy-Group/codex/audit-for-cross-platform-parity-gaps fix: run forge update checks on startup

Merge pull request #86 from SSoggy-Group/default-sqlite-first-setup-3079512419557499363 Make SQLite default database and add first-setup prompt for MySQL

Merge pull request #82 from SSoggy-Group/bolt-optimize-limbo-check-task-8267142030701117812 Bolt: Optimize LimboCheckTask player iteration

Merge pull request #81 from SSoggy-Group/fix/admin-log-filename-12070999832999139942 Rename admin_abuse.log to admin.log

Merge pull request #79 from SSoggy-Group/codex/update-fabric.mod.json-entrypoints-for-initialization Use 'main' entrypoint in fabric.mod.json to register ModInitializer

Merge pull request #77 from SSoggy-Group/palette/sidebar-a11y-12792778606144331753 Palette: Improve accessibility and UX of documentation site

feat: include commit message as changelog in release workflow steps

https://github.com/PolarMC-Technologies/PolarSouls-for-Ha… https://polarmc-technologies.github.io/PolarSouls-for-Har…

Initial Release