OpSec Enhanced

New: Lunar Client version picker (#17)

Added Configure Lunar Version... (next to the Spoof As dropdown): a text field plus a history dropdown of recently-used/known-good values, replacing the old JSON-only setting. Default/seed values corrected to Lunar's real release-line scheme (v<lunar-version>-<year><week>, e.g. v2.22.1-2620) — the old default encoded the Minecraft version instead, which was the wrong scheme entirely.

Bugfixes

• Game-proxy fallback left stale state, able to hang/break the join if the proxy failed to connect.
• Cloudflare Ping Relay now routes through the configured Game Connection Proxy (#11) instead of always using the real IP.
• IPv6 SSRF guard gap: LocalAddressUtil didn't recognize the modern fc00::/7 Unique Local Address range, only the obsolete fec0::/10.
• Account-secret encryption fail-open is no longer silent (now warns via toast); opsec-accounts.json gets owner-only permissions from creation.
• Secret-redaction gaps fixed in PrivacyLogger/LogScrubber (base64 charset, IPv6 :: compression).
• PBKDF2 iteration count on account-export import clamped to prevent a hang from a malicious export file.
• HUD indicator no longer rebuilds its text every frame.

Changed

• Client Information Normalizer now defaults on (only changes what the server sees, not your real settings).
• Chunk-batch timing now adds a small per-session jitter to reduce cross-session machine correlation.

Full notes: https://github.com/SU4G3/OpSec-Enhanced/releases/tag/V1.8.0-enhanced