Sonar

• Make the update checker more accessible to users
• Hide secure-chat toast from 1.20.5+ clients
• Use the modern way of registering Velocity commands
• Randomize X and Z positions in vehicle check
• Fix a potential issue in the vehicle handler
• Add some more smaller movement validations
• Fix the 1.7.2-1.7.10 minimum Y coordinate issue
• Exempt Bedrock players from packet order checks
• Fix max total packets false positive on 1.7-1.8
• Add CaptchaGenerationStartEvent, CaptchaGenerationEndEvent
• Fix custom CAPTCHA background image not working
• Fix invalid login mappings for 1.18-1.18.1

This update fixes login issues on 1.7.2-1.8 and 1.18-1.18.1. Additionally, /sonar will now show whether the version you're using is up to date or not. The API groupId has been changed from xyz.jonesdev.sonar to xyz.jonesdev. Check out the repository for more info: https://repo.jonesdev.xyz/#/releases/xyz/jonesdev There've been some more microoptimizations that are not listed.

• Fix invalid block mappings for 1.14-1.14.3
• Cap username length in LoginSuccess (clientbound)
• Add invalid window ID check to transactions
• Randomize some more position-related values
• Fix a false positive with the moved too far check
• Fix a false positive with Bedrock players
• Fix some potential issues on 1.7.2-1.7.10
• Fix potential issues regarding the IP limit check

This version of Sonar introduces a new fingerprinting system (which is basically just a fancier name for what Sonar had before). It is highly recommended to reset (delete) your database. Instead of saving the IP address and UUID in the database, Sonar now saves a hashed combination of the username and IP address.

• Implement more interactionless checks #378
  • Add legit swing verification check
  • Recode vehicle movement check
  • Fix hotbar (slot) check never actually working

This release patches a recently found bypass by ttProxy.

• Don't allow players to send empty packets
• Recode Y position and gravity calculation
• Implement SetPlayerRotationPacket packet order check
• Implement PaddleBoatPacket packet order check
• Optimize image RGB buffer writing
• Randomize some placeholder variables during login
• Remove useless PlayerInfoPacket
• Only log expired database entries if there are any
• Don't load the database driver twice
• Use regular JdbcConnectionSource, not pooled
• VarInt encoding optimizations PaperMC/Velocity@f034c02
• VarInt reading optimizations PaperMC/Velocity#1418
• Fix multiple block types being incorrect on 1.16

• Use shared exceptions in hot code #372
• Don't handle the handshake for server pings
• Merge failCountCache and blacklist into one
• Optimize login check order/priority
• Use host address instead of raw InetAddress
• Recode the join rate-limiter
• Code style improvements and micro-optimizations
  • Remove unnecessary ctx.channel() calls
  • Reduce usage of channel.isActive()

This is a hotfix release that fixes a NullPointerException on start under certain circumstances.

• Recode CAPTCHA generation #367
• Fix Bedrock users sometimes verifying multiple times
• Fix a bug where Bedrock users were unable to verify at all
• Fix Bedrock false flagging the vehicle speed check
• Bump dependencies
  • Bump h2databases from 2.1.214 to 2.2.220
  • Bump mysql-connector-j from 8.4.0 to 9.0.0
  • Bump mariadb-java-client from 3.4.0 to 3.4.1
  • Bump bstats from 3.0.2 to 3.0.3 #364
• Don't create duplicate entries in database
• Exempt fake (spoofed) players from being checked