ВЕРСИИ (50)

## Changes ## ⚠️ Upgrade Notes - The OIDC issuer and the `iss` claim of every token are now built from `server.baseUrl`. `jwt.issuer` is deprecated and ignored. Tokens issued before the upgrade are rejected, so users have to log in again once. - To accept tokens issued by other MineAuth servers that share the signing key, list their `baseUrl` values in `jwt.trustedIssuers`. - Redirect URIs move to the new `oauth_client_redirect_uris` table, and `oauth_clients.redirect_uri` is dropped at startup. If several servers share one database, upgrade all of them at the same time. ## 💥 Breaking Changes - ✨ Support multiple redirect URIs per OAuth client @Nlkomaru (#463) - 🐛 Derive OIDC issuer from baseUrl and accept trusted issuers @Nlkomaru (#461) ## 🚀 Features - ✨ Support multiple redirect URIs per OAuth client @Nlkomaru (#463) ## 🐛 Bug Fixes - 🐛 Derive OIDC issuer from baseUrl and accept trusted issuers @Nlkomaru (#461) ## 📝 Documentation - ✨ Support multiple redirect URIs per OAuth client @Nlkomaru (#463) - 🐛 Derive OIDC issuer from baseUrl and accept trusted issuers @Nlkomaru (#461) ## ⬆️ Dependencies <details> <summary>8 changes</summary> - Bump exposed from 1.5.0 to 1.5.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#457) - Bump org.jetbrains.kotlin.plugin.serialization from 2.4.20 to 2.4.21 @[dependabot[bot]](https://github.com/apps/dependabot) (#453) - Bump io.papermc.paper:paper-api from 26.2.build.132-stable to 26.3.build.194-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#458) - Bump org.jetbrains.kotlin.jvm from 2.4.20 to 2.4.21 @[dependabot[bot]](https://github.com/apps/dependabot) (#455) - Bump opentelemetry from 1.66.0 to 1.67.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#456) - Bump io.papermc.paper:paper-api from 26.2.build.129-stable to 26.2.build.132-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#454) - Bump gradle-wrapper from 9.8.0 to 9.8.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#452) - Bump ch.qos.logback:logback-classic from 1.6.4 to 1.6.5 @[dependabot[bot]](https://github.com/apps/dependabot) (#451) </details>

## Changes ## 🐛 Bug Fixes - 🐛 Advertise the plugin scope in OIDC Discovery @Nlkomaru (#449) ## 📝 Documentation - 🐛 Advertise the plugin scope in OIDC Discovery @Nlkomaru (#449)

## Changes ## 🚀 Features - ✨ Allow overriding the authorization page from the plugin directory @Nlkomaru (#447) ## 📝 Documentation - ✨ Allow overriding the authorization page from the plugin directory @Nlkomaru (#447)

## Changes ## 🚀 Features - ✨ Redesign authorization page and drop legacy pepper support @Nlkomaru (#445)

## Changes ## 🐛 Bug Fixes - 🐛 Fix player login by moving password hashing settings to config.json @Nlkomaru (#444) ## 🧰 Maintenance - ⚡️ Speed up CI by fixing Gradle build cache and limiting Dokka to root @Nlkomaru (#443)

## Changes - ⚡️ Load all Maven Central dependencies via plugin.yml libraries (core JAR 33MB → 9.5MB) @Nlkomaru (#434) - 🔧 Prefer Modrinth over GitHub in mpm repository definitions @Nlkomaru (#435) - 👷 Show JAR sizes in preview PR comment @Nlkomaru (#433) ## ⬆️ Dependencies <details> <summary>10 changes</summary> - Bump mccoroutine from 2.22.0 to 2.23.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#439) - Bump xyz.jpenilla.resource-factory from 1.3.0 to 1.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#438) - Bump io.papermc.paper:paper-api from 26.2.build.119-stable to 26.2.build.129-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#440) - Bump gradle-wrapper from 9.7.1 to 9.8.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#436) - Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#437) - Bump org.jetbrains.kotlin.jvm from 2.4.10 to 2.4.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#426) - Bump opentelemetry from 1.65.0 to 1.66.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#428) - Bump com.mysql:mysql-connector-j from 9.7.0 to 26.7.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#430) - Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#427) - Bump bouncycastle from 1.85 to 1.86 @[dependabot[bot]](https://github.com/apps/dependabot) (#429) </details> ## 🚀 Features - ✨ Rebuild authorization page with React and Chlorophyll @Nlkomaru (#442)

## Changes - 🐛 Fix plugin enable failure on Paper 26.3 by bumping cloud-paper to 2.0.1 @Nlkomaru (#432) - ♻️ Publish the mpm index in the repository-index format and include MineAuth core @Nlkomaru (#431) - 👷 Bump setup-node to Node 26 in GitHub Actions workflows @Nlkomaru (#424) ## ⬆️ Dependencies <details> <summary>6 changes</summary> - Bump ktor from 3.5.2 to 3.6.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#425) - Bump com.ghostchu:quickshop-api from 6.2.0.11 to 6.3.0.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#407) - Bump org.jetbrains.kotlin.plugin.serialization from 2.4.10 to 2.4.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#419) - Bump dev.detekt from 2.0.0-alpha.5 to 2.0.0-alpha.6 @[dependabot[bot]](https://github.com/apps/dependabot) (#420) - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.43.0 to 1.44.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#422) - Bump io.qameta.allure:allure-junit5 from 2.35.4 to 2.35.5 @[dependabot[bot]](https://github.com/apps/dependabot) (#421) </details>

## Changes ## ⬆️ Dependencies - Bump io.micrometer:micrometer-registry-prometheus from 1.17.0 to 1.17.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#418) ## 🐛 Bug Fixes - 🐛 Fix IllegalAccessException when resolving PureTickets services from Guice Injector @Nlkomaru (#423)

## Changes - 🐛 Align pure-tickets mpm index with the Tickets plugin name (PureTickets v5.3.0+) @Nlkomaru (#417) - ✨ Publish an mpm delegated repository index for the addons @Nlkomaru (#415)

## Changes - ✨ Add PureTickets list-all endpoint and expose registered endpoints in availableIntegrations @Nlkomaru (#412) ## 🚀 Features - ✨ Add player activity endpoint to core and nearby claims search to GriefPrevention addon @Nlkomaru (#413)

## Changes - 💥 Speed up plugin handler dispatch, require plugin scope, hard-depend on LuckPerms @Nlkomaru (#410) ## ⬆️ Dependencies <details> <summary>11 changes</summary> - Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#404) - Bump xyz.jpenilla.run-paper from 2.3.1 to 3.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#397) - Bump gradle-wrapper from 9.6.1 to 9.7.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#402) - Bump org.junit.jupiter:junit-jupiter from 6.1.1 to 6.1.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#403) - Bump cloud from 2.1.0-SNAPSHOT to 2.2.0-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#401) - Bump io.papermc.paper:paper-api from 26.2.build.98-stable to 26.2.build.119-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#400) - Bump io.qameta.allure:allure-junit5 from 2.35.3 to 2.35.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#399) - Bump opentelemetry from 1.64.0 to 1.65.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#398) - Bump org.jetbrains.kotlin.plugin.serialization from 2.4.0 to 2.4.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#392) - Bump ktor from 3.5.1 to 3.5.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#394) - Bump org.incendo:cloud-paper from 2.0.0-SNAPSHOT to 2.1.0-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#395) </details>

## Changes ## ⬆️ Dependencies <details> <summary>5 changes</summary> - Bump exposed from 1.3.1 to 1.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#391) - Bump opentelemetry from 1.63.0 to 1.64.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#382) - Bump ch.qos.logback:logback-classic from 1.5.37 to 1.6.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#386) - Bump io.papermc.paper:paper-api from 26.1.2.build.72-stable to 26.2.build.98-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#385) - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.42.0 to 1.43.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#383) </details> ## 🚀 Features - 🔓 Evaluate permissions for offline players via LuckPerms @Nlkomaru (#396)

## Changes - ✨ Add reuse grace period to refresh token rotation @Nlkomaru (#390)

## Changes - 🐛 Accept regex patterns in redirect URI validation on client creation @Nlkomaru (#388) - chore: wire secrets to Bitwarden Secrets Manager in CI @Nlkomaru (#387)

## Changes - 🐛 Resolve suspend handlers' return type to the real Java type @Nlkomaru (#381)

## Changes - ✨ Response headers, conditional 304, and standalone/softDepend audit (#375) @Nlkomaru (#380)

## Changes - 🐛 Serialize plugin responses in the addon class loader (#378) @Nlkomaru (#379)

## Changes - 🐛 Fix plugin http.route not refining on Jetty and template url.path (PII) @Nlkomaru (#377)

## Changes - 🔭 Strip authenticate selector from OTel http.route and enrich plugin spans @Nlkomaru (#374)

## Changes - fix(telemetry): stop stripping /v1/traces and /v1/metrics from HTTP OTLP endpoints @Nlkomaru (#373)

## Changes - 💥 Redesign plugin API v2: explicit access control, loud registration, live dispatcher @Nlkomaru (#371)

## Changes - 🐛 Fix SerializationException for List-returning RegisterHandler endpoints @Nlkomaru (#370) - 🎨 Upload preview JARs to S3 instead of GitHub pre-releases @Nlkomaru (#367) ## ⬆️ Dependencies - Bump exposed from 1.3.0 to 1.3.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#368)

## Changes - 📈 Enrich OpenTelemetry traces, metrics, and Minecraft server gauges @Nlkomaru (#366) - 📝 Merge duplicate API docs and force light theme @Nlkomaru (#353) ## ⬆️ Dependencies <details> <summary>40 changes</summary> - Bump ktor from 3.5.0 to 3.5.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#361) - Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.37 @[dependabot[bot]](https://github.com/apps/dependabot) (#362) - Bump com.gradleup.shadow from 9.4.2 to 9.4.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#363) - Bump org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#365) - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.41.1 to 1.42.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#364) - Bump gradle-wrapper from 9.6.0 to 9.6.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#360) - Bump gradle-wrapper from 9.5.1 to 9.6.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#355) - Bump com.vanniktech.maven.publish from 0.36.0 to 0.37.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#359) - Bump io.opentelemetry.instrumentation:opentelemetry-ktor-3.0 from 2.29.0-alpha-SNAPSHOT to 2.30.0-alpha-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#358) - Bump koinVersion from 4.2.1 to 4.2.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#356) - Bump dev.detekt from 2.0.0-alpha.4 to 2.0.0-alpha.5 @[dependabot[bot]](https://github.com/apps/dependabot) (#357) - Bump io.papermc.paper:paper-api from 26.1.2.build.70-stable to 26.1.2.build.72-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#354) - Bump com.zaxxer:HikariCP from 7.0.2 to 7.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#350) - Bump io.papermc.paper:paper-api from 26.1.2.build.69-stable to 26.1.2.build.70-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#351) - Bump io.micrometer:micrometer-registry-prometheus from 1.16.5 to 1.17.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#352) - Bump dev.detekt from 2.0.0-alpha.3 to 2.0.0-alpha.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#349) - Bump org.jetbrains.kotlin.plugin.serialization from 2.3.21 to 2.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#348) - Bump com.bencodez:votingplugin from 7.0 to 7.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#347) - Bump io.arrow-kt:arrow-core-jvm from 2.2.2.1 to 2.2.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#346) - Bump io.papermc.paper:paper-api from 26.1.2.build.67-stable to 26.1.2.build.69-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#344) - Bump org.jetbrains.kotlin.jvm from 2.3.21 to 2.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#345) - Bump opentelemetry from 1.62.0 to 1.63.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#343) - Bump io.mockk:mockk from 1.14.9 to 1.14.11 @[dependabot[bot]](https://github.com/apps/dependabot) (#342) - Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34 @[dependabot[bot]](https://github.com/apps/dependabot) (#341) - Bump com.gradleup.shadow from 9.4.1 to 9.4.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#340) - Bump io.papermc.paper:paper-api from 26.1.2.build.65-stable to 26.1.2.build.67-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#339) - Bump com.nimbusds:nimbus-jose-jwt from 10.9 to 10.9.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#338) - Bump io.papermc.paper:paper-api from 26.1.2.build.64-stable to 26.1.2.build.65-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#337) - Bump io.opentelemetry.instrumentation:opentelemetry-ktor-3.0 from 2.28.0-alpha-SNAPSHOT to 2.29.0-alpha-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#335) - Bump org.junit.jupiter:junit-jupiter from 6.0.3 to 6.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#336) - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.41.0 to 1.41.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#334) - Bump opentelemetry from 1.61.0 to 1.62.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#330) - Bump gradle-wrapper from 9.5.0 to 9.5.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#333) - Bump io.papermc.paper:paper-api from 26.1.2.build.63-stable to 26.1.2.build.64-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#332) - Bump org.mockbukkit.mockbukkit:mockbukkit-v1.21 from 4.109.0 to 4.110.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#329) - Bump exposed from 1.2.0 to 1.3.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#331) - Bump ktor from 3.4.3 to 3.5.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#328) - Bump io.papermc.paper:paper-api from 1.21.11-R0.1-SNAPSHOT to 26.1.2.build.63-stable @[dependabot[bot]](https://github.com/apps/dependabot) (#327) - Bump com.github.TechFortress:GriefPrevention from 17.0.0 to 18.0.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#296) - Bump com.vanniktech.maven.publish from 0.30.0 to 0.36.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#303) </details>

## Changes - Fix value class reflection error and improve command UX @Nlkomaru (#307) ## ⬆️ Dependencies <details> <summary>4 changes</summary> - Bump com.gradleup.shadow from 9.4.0 to 9.4.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#311) - Bump org.jetbrains.dokka from 2.1.0 to 2.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#309) - Bump exposed from 1.1.1 to 1.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#310) - Bump com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9 @[dependabot[bot]](https://github.com/apps/dependabot) (#308) </details>

## Changes - ✨ Return rich plugin info from installed plugins endpoint @Nlkomaru (#306) ## ⬆️ Dependencies <details> <summary>17 changes</summary> - Bump io.opentelemetry.instrumentation:opentelemetry-ktor-3.0 from 2.25.0-alpha-SNAPSHOT to 2.27.0-alpha-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#305) - Bump io.arrow-kt:arrow-core-jvm from 2.2.2 to 2.2.2.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#304) - Bump org.jetbrains.kotlin.jvm from 2.3.10 to 2.3.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#302) - Bump ktor from 3.4.1 to 3.4.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#301) - Bump gradle-wrapper from 9.4.0 to 9.4.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#297) - Bump com.bencodez:votingplugin from 6.19.1 to 7.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#300) - Bump com.ghostchu:quickshop-api from 6.2.0.10 to 6.2.0.11 @[dependabot[bot]](https://github.com/apps/dependabot) (#298) - Bump org.jetbrains.kotlin.plugin.serialization from 2.3.10 to 2.3.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#299) - Bump koinVersion from 3.5.6 to 4.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#295) - Bump com.gradleup.shadow from 9.3.2 to 9.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#294) - Bump gradle-wrapper from 9.3.1 to 9.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#290) - Bump org.jlleitschuh.gradle.ktlint from 14.0.1 to 14.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#292) - Bump io.micrometer:micrometer-registry-prometheus from 1.16.3 to 1.16.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#293) - Bump io.arrow-kt:arrow-core-jvm from 2.2.1.1 to 2.2.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#289) - Bump org.mockbukkit.mockbukkit:mockbukkit-v1.21 from 4.107.0 to 4.108.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#291) - Bump opentelemetry from 1.59.0 to 1.60.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#288) - Bump com.nimbusds:nimbus-jose-jwt from 10.7 to 10.8 @[dependabot[bot]](https://github.com/apps/dependabot) (#287) </details>

## Changes - ✨ Add PureTickets addon @Nlkomaru (#286) - ✨ Add VotingPlugin addon @Nlkomaru (#285) - Implement token introspection and end session endpoints @Nlkomaru (#279) - Implement scope validation and enforcement @Nlkomaru (#278) - Fix token revocation endpoint (RFC 7009) @Nlkomaru (#277) ## ⬆️ Dependencies <details> <summary>4 changes</summary> - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.39.0 to 1.40.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#284) - Bump io.mockk:mockk from 1.14.5 to 1.14.9 @[dependabot[bot]](https://github.com/apps/dependabot) (#282) - Bump org.mockbukkit.mockbukkit:mockbukkit-v1.21 from 4.101.0 to 4.107.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#283) - Bump ktor from 3.4.0 to 3.4.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#280) </details>

## Changes - ✨ Service account auth, @TargetPlayer, and auth annotation consolidation @Nlkomaru (#271) - Harden OAuth token endpoint security @Nlkomaru (#261) ## ⬆️ Dependencies <details> <summary>8 changes</summary> - Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.32 @[dependabot[bot]](https://github.com/apps/dependabot) (#276) - Bump org.jetbrains.kotlin.plugin.serialization from 2.2.10 to 2.3.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#275) - Bump io.micrometer:micrometer-registry-prometheus from 1.16.2 to 1.16.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#272) - Bump com.zaxxer:HikariCP from 6.3.0 to 7.0.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#274) - Bump org.jetbrains.kotlin.jvm from 2.2.10 to 2.3.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#263) - Bump io.arrow-kt:arrow-core-jvm from 2.1.2 to 2.2.1.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#266) - Bump org.jetbrains:annotations from 26.0.2 to 26.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#265) - Bump org.mockbukkit.mockbukkit:mockbukkit-v1.21 from 4.68.0 to 4.101.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#262) </details>

## Changes - Add GriefPrevention addon, QuickShop pagination, and Maven Central publishing @Nlkomaru (#260) ## ⬆️ Dependencies <details> <summary>6 changes</summary> - Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.9.0 to 1.10.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#256) - Bump net.luckperms:api from 5.4 to 5.5 @[dependabot[bot]](https://github.com/apps/dependabot) (#259) - Bump com.nimbusds:nimbus-jose-jwt from 10.4.2 to 10.7 @[dependabot[bot]](https://github.com/apps/dependabot) (#258) - Bump bouncycastle from 1.81 to 1.83 @[dependabot[bot]](https://github.com/apps/dependabot) (#257) - Bump org.junit.jupiter:junit-jupiter from 5.12.1 to 6.0.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#255) - Bump gradle-wrapper from 8.10.1 to 9.3.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#254) </details>

## Changes - ✨ Improve classloader compatibility, Java 23 support, and error messages @Nlkomaru (#248) ## ⬆️ Dependencies <details> <summary>4 changes</summary> - Bump opentelemetry from 1.58.0 to 1.59.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#251) - Bump com.mysql:mysql-connector-j from 9.2.0 to 9.6.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#252) - Bump io.micrometer:micrometer-registry-prometheus from 1.14.4 to 1.16.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#253) - Bump io.opentelemetry.instrumentation:opentelemetry-ktor-3.0 from 2.22.0-alpha to 2.25.0-alpha-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#249) </details>

## Changes - 📝 Add console logging for OAuth endpoint errors @Nlkomaru (#247)

## Changes - 🐛 Fix BetonQuest addon ClassLoader compatibility issue @Nlkomaru (#246)

## Changes - ✨ Add OIDC name claim and implement /quests/me endpoint @Nlkomaru (#245)

## Changes - ♻️ Fix Scalar UI, cleanup CI, and replace ODailyQuests with BetonQuest @Nlkomaru (#244)

## Changes - ♻️ Fix addon Koin and OpenAPI dynamic URL resolution @Nlkomaru (#243)

## Changes - ✨ Add ODailyQuests addon and fix Netty conflict @Nlkomaru (#242) ## ⬆️ Dependencies <details> <summary>5 changes</summary> - Bump org.jetbrains.dokka from 2.0.0 to 2.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#238) - Bump opentelemetry from 1.45.0 to 1.58.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#239) - Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.29.0-alpha to 1.39.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#237) - Bump ktor from 3.3.3 to 3.4.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#240) - Bump org.jlleitschuh.gradle.ktlint from 13.1.0 to 14.0.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#241) </details>

## Changes - ✨ Add OpenAPI and Scalar API documentation endpoints @Nlkomaru (#236)

## Changes - ✨ Migrate Vault to addon and add OpenTelemetry observability @Nlkomaru (#235)

## Changes - ⚡ Optimize GitHub Actions workflows with SLSA Level 3 support @Nlkomaru (#234)

## Changes - Implement RFC 7009 OAuth 2.0 Token Revocation endpoint @Yahirrro (#233) - ✨ Display client information on authorization page @Nlkomaru (#232) - ♻️ Refactor annotation route registration with Cloud pattern @Nlkomaru (#231) - ✨ Add LuckPerms roles scope and preferred\_username claim @Nlkomaru (#225) - 📝 Add quick start guide, web integration docs, and API reference @Nlkomaru (#224) - 🐛 Fix JWT client validation to use database @Nlkomaru (#223)

## Changes - ✨ Add email claim support to OIDC userinfo @Nlkomaru (#222) - ✨ Add MySQL database support @Nlkomaru (#218) - :sparkles: Migrate to fumadocs from docusaurus @Nlkomaru (#217)

## Changes - ✨ Implement annotation-based route registration @Nlkomaru (#216)

## Changes - ♻️ Optimize Paper libraries and fix plugin loading @Nlkomaru (#215)

## Changes - 🐛 Fix refresh token RFC 6749 compliance and security @Nlkomaru (#202) - :sparkles: Add OIDC Discovery endpoint and unified config @Nlkomaru (#201) - :bug: Make OAuth/OIDC endpoints RFC/OIDC compliant @Nlkomaru (#200) - :sparkles: Add test and implement initial tests for OAuth @Nlkomaru (#199) - :sparkles: Implement OIDC ID Token issuance @Nlkomaru (#198) - :sparkles: Add regex method for client redirect uri check @Nlkomaru (#177) - Update deploy\_docs.yml @Nlkomaru (#158) - 🔨 Add ci preview @Nlkomaru (#155) - 🐛 Fix ci @Nlkomaru (#146) - ✨ Add typespec @Nlkomaru (#145) - :sparkles: Change to docusaurus from mkdocs @Nlkomaru (#144) ## ⬆️ Dependencies <details> <summary>50 changes</summary> - ⬆️ Bump org.jlleitschuh.gradle.ktlint from 13.0.0 to 13.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#176) - ⬆️ Bump org.jetbrains.kotlin.jvm from 2.2.0 to 2.2.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#175) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.4.1 to 10.4.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#174) - ⬆️ Bump org.jetbrains.kotlin.plugin.serialization from 2.2.0 to 2.2.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#173) - ⬆️ Bump ktor from 3.2.1 to 3.2.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#171) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.4 to 10.4.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#172) - ⬆️ Bump io.papermc.paper:paper-api from 1.21.7-R0.1-SNAPSHOT to 1.21.8-R0.1-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#168) - ⬆️ Bump com.ghostchu:quickshop-api from 6.2.0.9-RELEASE-1 to 6.2.0.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#170) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.3.1 to 10.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#167) - ⬆️ Bump org.jlleitschuh.gradle.ktlint from 12.3.0 to 13.0.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#166) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.2 to 10.3.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#165) - ⬆️ Bump com.password4j:password4j from 1.8.2 to 1.8.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#164) - ⬆️ Bump io.papermc.paper:paper-api from 1.21.6-R0.1-SNAPSHOT to 1.21.7-R0.1-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#163) - ⬆️ Bump org.jetbrains.kotlin.jvm from 2.1.20 to 2.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#161) - ⬆️ Bump org.jetbrains.kotlin.plugin.serialization from 2.1.20 to 2.2.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#160) - ⬆️ Bump ktor from 3.2.0 to 3.2.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#162) - ⬆️ Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.8.1 to 1.9.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#159) - ⬆️ Bump org.gradle.toolchains.foojay-resolver-convention from 0.10.0 to 1.0.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#157) - ⬆️ Bump io.insert-koin:koin-core from 4.0.4 to 4.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#156) - ⬆️ Bump xyz.jpenilla.resource-factory from 1.2.0 to 1.2.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#140) - ⬆️ Bump mccoroutine from 2.21.0 to 2.22.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#139) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.1 to 10.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#138) - ⬆️ Bump org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.10.1 to 1.10.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#137) - ⬆️ Bump exposed from 0.60.0 to 0.61.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#136) - ⬆️ Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 0.10.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#135) - ⬆️ Bump com.ghostchu:quickshop-api from 6.2.0.8 to 6.2.0.9-RELEASE-1 @[dependabot[bot]](https://github.com/apps/dependabot) (#134) - ⬆️ Bump io.insert-koin:koin-core from 4.0.3 to 4.0.4 @[dependabot[bot]](https://github.com/apps/dependabot) (#132) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#133) - ⬆️ Bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.7.3 to 1.8.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#131) - ⬆️ Bump io.insert-koin:koin-core from 4.0.2 to 4.0.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#130) - ⬆️ Bump io.papermc.paper:paper-api from 1.21.4-R0.1-SNAPSHOT to 1.21.5-R0.1-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#129) - ⬆️ Bump ktor from 3.1.1 to 3.1.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#128) - ⬆️ Bump org.jetbrains.kotlin.plugin.serialization from 2.1.10 to 2.1.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#126) - ⬆️ Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18 @[dependabot[bot]](https://github.com/apps/dependabot) (#127) - ⬆️ Bump org.jetbrains.kotlin.jvm from 2.1.10 to 2.1.20 @[dependabot[bot]](https://github.com/apps/dependabot) (#125) - ⬆️ Bump exposed from 0.59.0 to 0.60.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#124) - ⬆️ Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.17 @[dependabot[bot]](https://github.com/apps/dependabot) (#123) - ⬆️ Bump com.nimbusds:nimbus-jose-jwt from 10.0.1 to 10.0.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#122) - ⬆️ Bump ktor from 3.1.0 to 3.1.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#121) - ⬆️ Bump mccoroutine from 2.20.0 to 2.21.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#120) - ⬆️ Bump ktor from 3.0.3 to 3.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#119) - ⬆️ Bump exposed from 0.57.0 to 0.59.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#118) - ⬆️ Bump org.jetbrains.kotlin.plugin.serialization from 2.1.0 to 2.1.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#117) - ⬆️ Bump org.jetbrains.kotlin.jvm from 2.1.0 to 2.1.10 @[dependabot[bot]](https://github.com/apps/dependabot) (#116) - ⬆️ Bump org.jetbrains:annotations from 26.0.1 to 26.0.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#115) - ⬆️ Bump io.insert-koin:koin-core from 4.0.1 to 4.0.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#114) - ⬆️ Bump com.ghostchu:quickshop-api from 6.2.0.6 to 6.2.0.8 @[dependabot[bot]](https://github.com/apps/dependabot) (#113) - Bump com.nimbusds:nimbus-jose-jwt from 9.48 to 10.0.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#107) - Bump ch.qos.logback:logback-classic from 1.5.15 to 1.5.16 @[dependabot[bot]](https://github.com/apps/dependabot) (#108) - ⬆️ Bump bouncycastle from 1.79 to 1.80 @[dependabot[bot]](https://github.com/apps/dependabot) (#112) </details>

## Changes ## ⬆️ Dependencies <details> <summary>20 changes</summary> - Bump io.insert-koin:koin-core from 4.0.0 to 4.0.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#106) - Bump com.nimbusds:nimbus-jose-jwt from 9.47 to 9.48 @[dependabot[bot]](https://github.com/apps/dependabot) (#105) - Bump ch.qos.logback:logback-classic from 1.5.12 to 1.5.15 @[dependabot[bot]](https://github.com/apps/dependabot) (#104) - Bump org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.9.0 to 1.10.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#103) - Bump org.jetbrains.dokka from 1.9.20 to 2.0.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#102) - Bump ktor from 3.0.2 to 3.0.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#101) - Bump lamp from 3.3.2 to 3.3.3 @[dependabot[bot]](https://github.com/apps/dependabot) (#100) - Bump exposed from 0.56.0 to 0.57.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#97) - Bump org.gradle.toolchains.foojay-resolver-convention from 0.8.0 to 0.9.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#99) - Bump io.papermc.paper:paper-api from 1.21.3-R0.1-SNAPSHOT to 1.21.4-R0.1-SNAPSHOT @[dependabot[bot]](https://github.com/apps/dependabot) (#98) - Bump ktor from 3.0.1 to 3.0.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#96) - Bump org.jetbrains.kotlin.plugin.serialization from 2.0.21 to 2.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#95) - Bump lamp from 3.3.0 to 3.3.2 @[dependabot[bot]](https://github.com/apps/dependabot) (#93) - Bump org.jetbrains.kotlin.jvm from 2.0.21 to 2.1.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#94) - Bump com.nimbusds:nimbus-jose-jwt from 9.45 to 9.47 @[dependabot[bot]](https://github.com/apps/dependabot) (#92) - Bump org.jetbrains.kotlin.plugin.serialization from 2.0.20 to 2.0.21 @[dependabot[bot]](https://github.com/apps/dependabot) (#88) - Bump org.jetbrains:annotations from 24.1.0 to 26.0.1 @[dependabot[bot]](https://github.com/apps/dependabot) (#91) - Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.12 @[dependabot[bot]](https://github.com/apps/dependabot) (#90) - Bump lamp from 3.2.1 to 3.3.0 @[dependabot[bot]](https://github.com/apps/dependabot) (#87) - Bump org.jetbrains.kotlin.jvm from 2.0.20 to 2.0.21 @[dependabot[bot]](https://github.com/apps/dependabot) (#89) </details>

## Changes - Update deploy\_docs.yml @Nlkomaru (#65) ## ⬆️ Dependencies <details> <summary>8 changes</summary> - Bump io.papermc.paper:paper-api from 1.21.1-R0.1-SNAPSHOT to 1.21.3-R0.1-SNAPSHOT @dependabot (#86) - Bump exposed from 0.54.0 to 0.56.0 @dependabot (#83) - Bump com.nimbusds:nimbus-jose-jwt from 9.41.1 to 9.45 @dependabot (#85) - Bump bouncycastle from 1.78.1 to 1.79 @dependabot (#84) - Bump mccoroutine from 2.19.0 to 2.20.0 @dependabot (#81) - Bump the dependencies group with 2 updates @dependabot (#74) - Bump the dependencies group across 1 directory with 12 updates @dependabot (#73) - Bump the dependencies group across 1 directory with 10 updates @dependabot (#68) </details>

## Changes - **Add quickshop-hikari integration** @Nlkomaru (#62) ## ⬆️ Dependencies - Bump the dependencies group with 2 updates @dependabot (#61) - Bump the dependencies group with 5 updates @dependabot (#58) - Bump the dependencies group with 15 updates @dependabot (#57)

## Changes * Update docs

## Changes - Change license @Nlkomaru (#55) ## ⬆️ Dependencies - Bump the dependencies group with 31 updates @dependabot (#56)

## Changes - Update upload.yml @Nlkomaru (#52) ## ⬆️ Dependencies - Bump bouncycastle from 1.78 to 1.78.1 @dependabot (#36)

Add vault integration