Changelog

What changed in released plugins.

Release dates are not listed because the plugins' own release notes do not carry them.

Released

Defined the supported Minecraft range as 1.21 through 1.21.11, plus 26.1 and 26.2.
Version parsing and API comparison verified for Minecraft 26.2.
Behaviour, configuration and saved reports stay compatible with 1.2.

New /pluginguard fixlist: a numbered list of what needs fixing.
New ignore rules to silence reviewed findings without editing config.yml.
Discord alerts announce each critical finding once.
Optional update check (off by default): Modrinth by file hash; SpigotMC and BuiltByBit only for plugins that link their page.
Descriptors are read the way the server reads them; text taken from jars is sanitised in chat, console and exports.

Security: players can no longer trigger the spawn teleport signal themselves; the proxy drops client-sent messages on its channel.
The proxy plugin is built for Java 17.
A malformed config.yml no longer crashes the plugin: the line is reported and the previous settings stay active.
Switch commands say what happened; name clashes and looping routes are reported instead of silently accepted.

Paginated wanted-board and hunter-leaderboard menus, persistent claim history and new inspect/remove tools for administrators.
Durable recovery for payouts, cancellations, expiry refunds and administrator refunds.
Direction-independent pair cooldowns against collusion farming.
Versioned automatic config migration that keeps your values, comments and custom sections, and transactional database migrations.
Spigot compatibility and Minecraft 26.1/26.2 support; telemetry and the external update checker were removed.

Submitted and waiting for approval; no release notes are published until they are live.