Mod Whitelist Forge NeoForge

✨ Feature

• Added mod version validation.
• Added support for * as a wildcard mod version.
• Added automatic update checking for operators.
• Added update notifications when singleplayerDevMode is enabled.

🐛 Fix

• Fixed clients not being disconnected when they completely ignore a scan request.
• Fixed mod IDs starting with fml being able to bypass validation.
• Fixed deny filename rules being case-sensitive.
• Fixed collect mode treating files with identical names but different SHA-256 hashes as identical.
• Fixed file classification for files with matching names but different hashes.
• Fixed uppercase .JAR and .ZIP files not being detected.
• Fixed invalid JSON configs replacing the last valid runtime configuration.
• Fixed unconfigured installations behaving incorrectly in strict mode.
• Fixed manually configured client_required mods being added again as client_optional during later collect runs.

🔧 Improvement

• Collect mode now records detected client mod versions.
• Added server-side limits for scan chunks, reported mods and reported files.
• Added size limits for mod IDs, versions, filenames and SHA-256 hashes.
• Improved scan protocol validation.
• Improved first-run configuration detection.
• Added a clickable CurseForge download link to update notifications.
• Update checks are cached for 6 hours to avoid unnecessary requests.
• Failed update checks use a retry delay instead of checking again on every join.

📦 Modpack/Config

• Added the updateCheck option to settings.json.
• Added support for deny-only configurations.

⚙️ Compatibility

• Updated the internal network protocol to version 3.

📝 Note

• Client and server must use compatible ModWhitelist versions.
• If any bugs appear in this version, let me know quickly.