MuteBefehl's Essentials (MuteEssentials)

TL;DR for admins

• Recommended for everyone, and especially for servers on 1.0.17
• No manual changes required, your settings are carried over
• Commands you had switched off stay switched off
• A duplication path in /bl deathrestore is closed
• The auto updater goes straight from 1.0.16 to 1.0.18

Critical fixes

• Switched-off commands came back on after 1.0.17: /enderchest, /staffchat and /blocklog were renamed to ec, sc and bl in the configuration, and the old entries were no longer read: Whoever had turned one of them off had it back on. The update moves the setting and any custom aliases to the new names, and also repairs servers that are already on 1.0.17
• The first start after an auto update skipped the new settings: The new configuration keys and messages only arrived after a second restart, and some defaults were missing until then. They are applied on the first start now
• An update through the updater of 1.0.16 could be undone later: On Paper 1.21 the old updater wrote the new version into Paper's working copy instead of the plugins folder, so the server could fall back to the old version once Paper rebuilt that copy. The new version is put into the plugins folder on the next shutdown
• /bl deathrestore could hand out the same inventory twice: Two quick calls both got the items before the entry was removed. The entry is claimed first now
• Muted players could still write to offline players with /msg: The mute check covered online recipients only

Fixes

• AntiVPN no longer slows down every join when its check service is down. A failure is remembered for a minute, three failures in a row pause the checks for five minutes, and every request has a hard deadline. Local, CGNAT and IPv6 link-local addresses are recognised properly, a RiskScoreThreshold of 0 no longer blocks everyone, and the cache is capped
• Shared data in MySQL is written in the right order. Two saves in quick succession could land the other way round
• The updater only uses https for the update source and the download, and the file has to match the published checksum
• Safer MySQL defaults: an encrypted connection where available and a dedicated user instead of root. Existing setups are only changed while MySQL is switched off. With MySQL on, the start warns about unencrypted connections, root and an empty password instead
• Auction prices have to be real numbers, /report has a cooldown, and the claim index is rebuilt on /mues reload

Full changelog: https://wiki.mutebefehl.de/docs/muteessentials/changelog