Bukkit

Backbone Changelog v1.3.2

Core & Lifecycle
- Fixed memory leak in HideManager by cleaning up viewer state on player quit.
- Secured TpsTracker ring buffer against index boundary errors.
- SetupWizard now properly cancels async tasks upon completion or cancellation.
- Hardened language system: missing translation keys no longer throw NullPointerExceptions and fall back cleanly.
- Fully synchronized all bundled language files (deutsch.lang, englisch.lang, example.lang).
- Color and prefix commands now support case-insensitive input and validate obfuscation codes and max lengths.

Ranks, Permissions, Economy & Vault
- Fixed RankManager data loss: renaming ranks with case-only changes no longer deletes the rank.
- Reassigning the same rank to a player no longer downgrades permanent ranks to temporary.
- Fallback ranks now prevent circular references to their own rank.
- Implemented dynamic wildcard expansion (* and -*) in PermissionResolver for third-party plugin permissions.
- Registered 27 missing Backbone permissions in PermissionService.
- Fixed Vault permission lookup: online players now correctly check Bukkit Superperms (OP and external attachments work properly again).
- Removed duplicate rank prefixes when integrated with external Vault chat plugins.
- Fixed economy account initialization: starting balances for new players are now included in total currency circulation and baltop (with 15s cache).
- Fixed upgrade pricing calculation in RankShop under DIFFERENCE mode and blocked negative offer prices.

AutoMod, Moderation & Chat
- Fixed race conditions during ban and mute writes via atomic DataManager synchronization.
- Chat filters now strip color codes prior to content inspection.
- Word filter now catches bad words separated by punctuation or spaces (e.g., f / u / c / k).
- Advertising filter validates IPv4 octets (0-255), eliminating false positives on version numbers like 1.20.4.
- Spam, flood, and caps filters now reliably trigger strikes.
- Staff protection: operators and staff members can no longer be accidentally banned or muted.
- Duration typos (e.g., 7days) are caught instead of silently resulting in permanent bans.
- ChatEvent secured against format string placeholder injection.
- Vanish and setup checks on private messages (/msg) now execute before AutoMod triggers.

Inventories, NBT & Player Commands
- Closed inventory duplication glitches: /inv on self is blocked; virtual containers (crafting table, anvil, enchanting, smithing) in slot 45 can no longer be moved.
- Constrained armor slots (36-39) in admin inventory inspection to valid armor items and max stack size of 1.
- Offline inventories: read-only fallback on corrupted files prevents inventory wipes; offline enderchests are now reliably saved.
- Hardened NBT reader against OutOfMemory exploits with strict length and byte size validations.
- /heal and /feed now verify that the target player is alive before executing.
- /skull validates username syntax before launching async skin lookups.

Teleportation, Worlds & Scoreboard
- Resolved spawn teleport conflict: teleport commands (/home, /warp, /tpa, /back, /lobby) are no longer overwritten by WorldSpawn on join.
- Added bypass permissions for /sethome and /setwarp on blacklisted worlds.
- PreLoginEvent checks bans strictly by UUID to prevent false bans across username transfers.
- Scoreboard parser now supports German thousands separators (e.g., 10.000) and case-insensitive tags.

Configuration & Build
- plugin.yml: removed root permissions from subcommands so granular permissions are no longer preemptively rejected by Bukkit.