feat: LPC 4.2.0 — Minecraft 26.2 / Adventure 5 / Veylor-Development

[Ayont]

Summary

The 26.2 update. Builds, tests green, jar ships as LPC-4.2.0.jar.

Platform

• Target Paper / Minecraft 26.2 (paper-api 26.2.build.40-alpha), api-version: 26.2
• Migrate to Adventure 5.2.0 — the version Paper 26.2 bundles (verified against the paper-api POM). Paper 26.1 shipped Adventure 4.x, so this plugin now requires Paper 26.2+.
• Fixes Unsupported class file major version 69 build failure: Gradle 8.14 cannot run on Java 25 (its bundled Groovy/ASM rejects Java 25 class files), so Gradle now runs on Java 21 and compiles via the Java 25 toolchain (auto-provisioned by the new foojay-resolver-convention in settings.gradle).

Dependency updates (folds in/supersedes the open Renovate PRs)

• LuckPerms 5.4 → 5.5 (fix(deps): update dependency net.luckperms:api to v5.5 #13), PlaceholderAPI 2.11.6 → 2.12.2 (fix(deps): update dependency me.clip:placeholderapi to v2.12.2 #24), Gson 2.13.2 → 2.14.0 (fix(deps): update dependency com.google.code.gson:gson to v2.14.0 #31), JUnit 5.11.4 → 5.14.4 (fix(deps): update dependency org.junit:junit-bom to v5.14.4 #32), Adventure BOM 4.26.1 → 5.2.0 (fix(deps): update dependency net.kyori:adventure-bom to v5 #29), Paper 26.1.2 → 26.2 (fix(deps): update dependency io.papermc.paper:paper-api to v26.1.2.build.72-stable #35 superseded), Gradle 8.14 → 8.14.5 (chore(deps): update gradle to v8.14.5 #12), actions/setup-java v5 (chore(deps): update actions/setup-java action to v5 #19), gradle/actions v6 (chore(deps): update gradle/actions action to v6 #28)

Adventure 5 migration

• Production code only used ClickEvent.openUrl(...) / .clickEvent(...) — compatible as-is.
• Test fix: ClickEvent is now generic; the URL lives on Payload.Text (((ClickEvent.Payload.Text) click.payload()).value()), not click.value().

CI

• New .github/workflows/build.yml — runs clean build on every push/PR (there was no CI before).
• publish.yml: Java 21 Gradle runtime + 25 toolchain, bumped action versions.

Branding & UX

• Author Varilx-Development → Veylor-Development (the team behind Veylor.net, free plugins on Modrinth).
• /lpc version now reports the detected platform + target (MC 26.2 · Java 25 · Adventure 5).
• README: compatibility table + a clear "Unsupported API version" note for users on older servers (they need Paper 26.2 + Java 25), and a direct answer to "can players use MiniMessage in chat?".

Security (already in this branch — closes #22, #26)

• Player messages are injected as a pre-resolved component with a random per-render tag, after PlaceholderAPI runs on the format — so %player_name% typed by a non-op is rendered literally, never expanded.
• Player input uses a restricted MiniMessage parser (cosmetic tags only); interactive tags (click/hover/insertion) are always stripped.

Verification

./gradlew clean build → BUILD SUCCESSFUL, all tests pass (Gradle on JDK 21, toolchain 25).

Not done here

• Gradle 9 (chore(deps): update gradle to v9 #17) is deferred — the build still uses a couple of features deprecated in Gradle 9, and Shadow needs verifying against Gradle 9. Left open.