v 1.0.6

Changed

• Skinpacks are now entirely server-side. Modpacks and clients no longer need to distribute skinpack assets (data too), as the server handles all asset distribution and syncing directly.
• Replaced the skin registry with an immutable snapshot system, eliminating heavy linear scans and improving overall frame performance.

Security

• Closed an exploit where any client could bypass the unlock progression and equip locked skins.
• Hardened network payloads against unbounded varints, preventing maliciously crafted packets from causing client memory exhaustion (OOM) or crashes.
• Implemented a per-player byte budget for asset requests to prevent network bandwidth abuse and server lag.

Fixed

• Fixed a race condition where a skin's custom geometry override would permanently fail to apply for the session if its texture arrived over the network before the model file.
• Fixed a severe FPS drop caused by unrecognized custom models constantly re-running reflection lookups into TACZ every single frame.
• Fixed render caches persisting after disconnect, which previously allowed custom skins and models from one server to visually bleed into another server.
• Fixed throttled skin downloads failing silently without a timeout, which left the skin broken for the rest of the session. Requests now properly time out and retry.
• Fixed game crashes (IllegalStateException) that could occur when reloading resources while a network request was active.
• Fixed multiple memory leaks related to dynamic texture construction and unclosed network transfers.