Skip to content

New Release 1.25.2#536

Merged
tastybento merged 7 commits into
masterfrom
develop
Jul 18, 2026
Merged

New Release 1.25.2#536
tastybento merged 7 commits into
masterfrom
develop

Conversation

@tastybento

Copy link
Copy Markdown
Member

No description provided.

tastybento and others added 5 commits July 3, 2026 11:53
…ca2dcd1

ci: bump pinned publish-platforms.yml to ca2dcd1
#534)

Jobs Reborn awards block-break rewards from a BlockBreakEvent handler at
EventPriority.HIGHEST with ignoreCancelled=true. AOneBlock also only checked
the MAGIC_BLOCK protection flag (and cancelled the break) at HIGHEST. Within a
single priority slot, Bukkit fires handlers in plugin-registration order, which
is nondeterministic. When Jobs ran before AOneBlock, it paid out before the
break was cancelled; since the magic block respawns on a cancelled break, a
player lacking the MAGIC_BLOCK flag could mine it endlessly for infinite rewards.

Add a dedicated onBlockBreakDeny handler at EventPriority.LOWEST that runs the
MAGIC_BLOCK flag check (which cancels the event on denial). Cancelling at LOWEST
is strictly before any later ignoreCancelled=true handler, so reward plugins are
skipped for denied breaks. Full magic-block processing stays at HIGHEST, and
allowed breaks are unaffected.

Bump version to 1.25.2.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nxjWg93etdoy6U6nhTXRX
…d S8924)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nxjWg93etdoy6U6nhTXRX
…ity-534

fix: cancel denied magic-block break early to stop Jobs reward exploit (#534)
@tastybento tastybento changed the title New Release New Release 1.25.2 Jul 12, 2026
tastybento and others added 2 commits July 17, 2026 21:18
The BossBarListener is registered into Bukkit by BentoBox's FlagsManager
whenever the ONEBLOCK_BOSSBAR or ONEBLOCK_ACTIONBAR flag is registered.
With actionbar: false and bossbar: true in config.yml, the listener was
still active via the boss bar flag, and tryToShowActionBar only checked
the island flag - which defaults to allowed even when unregistered - so
the action bar showed despite being disabled.

Guard both tryToShowActionBar and tryToShowBossBar with their config
settings, and remove the explicit registerListener(bossBar) call in
onEnable which duplicated the FlagsManager registration and caused the
handlers to fire twice per event when both settings were enabled.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012eC7vj7ghNGSNGpxqQazxm
…red-537

fix: respect actionbar/bossbar config settings in BossBarListener
@sonarqubecloud

Copy link
Copy Markdown

@tastybento
tastybento merged commit 2e4fe79 into master Jul 18, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant