CVE: CVE-2023-39680
Deserialization of untrusted data exists in Unicopia mod for Minecraf by Sollace up to and including version 1.1.1. Unsafe Java deserialization occurs after a user's client connects to a malicious server. This is fixed in version 1.2.0. (See the fix commit)
CVSS3.1: 7.5 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Commands received the biggest change in this snapshot. With the help of the new Brigadier function and the advanced command execution implementation, commands were significantly enhanced.
Fabric API 0.90.1 was released, with no breaking changes.
There is no progress on last week's block codecs. This week, we instead saw a massive refactor in commands.
2021 (FAMILY) No. 335 In re Gender Handling Change Case Unofficial Translation by apple502j Original scan in Japanese from: https://www.call4.jp/file/pdf/202310/bd7b673e2a59f2a32365ec4fae4b0ddd.pdf
Family Registry Located At[^1] REDACTED Address REDACTED
A surprise update for 1.20.3 comes, with a big change to blocks! The changes are likely for the future expansion of data packs to allow custom blocks. All Block classes must(tm) now define its codec. I recommend checking the article on Fabric Modding Wiki, that should be good for most users.
A new Fabric Loader, version 0.14.23, supporting 1.20.3 versions was released. This update also comes with several changes, including support for Java 22 and duplicate loader detection that is useful in dev environment. It also changes some error messages to be more user-friendly.
Loom 1.4 was also released; this version requires Gradle 8.3. The biggest feature is the support for Vineflower (formerly known as Quiltflower) decompiler. Vineflower produces better output in certain cases, including chained methods. CFR remains the default decompiler. Other changes include fabricApi.module support for deprecated modules, disk usage imp
Yet another snapshot for the game of Necraft. Or, so says the Matcher.
No breaking change in this update (0.88.2). Note, however, that, a recent PR added Fabric BlockView API v2. This replaced Rendering Data Attachment v1 API. The old API is still available, but is deprecated. Deprecated APIs are now opt-out in development environment, so this shouldn't cause that many issues.
Another recent change is that side parameter in SidedStorageBlockEntity is now documented and marked as nullable. This matches the actual behavior. Make sure to re-check the code.
Weekly Update Stuff is back! I do skip an update or two, if the changes are not noteworthy. This week, Mojang had a small changelog - but the code changes are big. So here they are.
Fabric API 0.87.2 for 23w35a was released, with several breaking changes.
MessageDecorator is now, once again, synchronous. Yes, I introduced a change that broke data packs. Sorry.CriterionRegistry.
Was busy mapping stuff last week, here's the combined update documentation!
Fabric Loader 0.14.22 was released with a small change to version handling.
Fabric API has received several breaking changes in both versions.
Networking API's implementation was reworked based on Mojang's changes. While the API breakage is minimum, the packet protocol it uses is different from the older one.
The pre-release 2 is all about emptiness and blankness...
FAPI v0.81.2 was released. No breaking change.
Ingredients may be an air to indicate empty slot. If your code uses Ingredient#fromJson, then it will automatically allow air ingredients. To keep old behavior of disallowing air ingredients (which you probably want), use fromJson overload with the boolean param set to false.
Try going to the end, saving the game, opening again, and defeating the dragon. There's another one!
No breaking changes were made. FabricBlockSettings.of() was deprecated; use create instead.
Several equality methods in ItemStack were removed.