⚙️ Race API (v1.0.0) — The First Stable Release!

69 total audit findings squashed. The API is officially stable!

🎉 Milestone Reached: The Race API has graduated from 0.x to 1.0.0! Datapack formats, JSON schemas, and the Java API are now frozen and stable. Compatibility with 0.7.x races is fully maintained.

🚨 Critical Security & Exploit Fixes

• "Free Flight" Exploit Patched: Fixed a major exploit where hacked clients could spam jump packets to infinitely boost their height using SprintJump/WallJump. A strict server-side rate limit (max 1 per 5 ticks) has been implemented.

• Infinite Starter Items Patched: Clearing your race and re-selecting it no longer resets the grant flags. You can no longer farm starter items by repeatedly switching races!

• GZIP Decompression Bomb Protection: Added strict payload unpacking limits (4MB max) to protect clients from maliciously oversized sync packets.

🌐 Client-Server Syncing

• Live /reload Syncing: Previously, creating a race in your datapack required players to relog to see it. Now, running /reload instantly broadcasts the updated race registry to all connected players!

⚔️ Gameplay & Power Fixes

• Mana Refunds on Whiffs: Active abilities that fail to find a target or valid location (e.g., Blinking into a wall, Teleport Striking thin air) will no longer silently consume your Mana or trigger their cooldowns.

• Safe Teleportation: TeleportStrike and Blink now use noCollision checks to ensure you never get stuck in walls. PhaseDash no longer teleports you half a block higher (preventing you from clipping into low ceilings). TimeTrace now respects dimensions.

• Smart Effect Stacking: Race effects (like Overdrive) now correctly tag their status effects and will no longer overwrite stronger vanilla potions consumed by the player.

• Engine Safety Limits: JSON parameters are now hard-clamped (e.g., Summon limits ≤ 16, Radiuses ≤ 64) to prevent typos in datapacks from freezing the server.