Skip to content

chore: bump fr.maxlego08.menu:zmenu-api from 1.1.1.6 to 1.1.1.7 - #308

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/fr.maxlego08.menu-zmenu-api-1.1.1.7
Open

chore: bump fr.maxlego08.menu:zmenu-api from 1.1.1.6 to 1.1.1.7#308
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/fr.maxlego08.menu-zmenu-api-1.1.1.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps fr.maxlego08.menu:zmenu-api from 1.1.1.6 to 1.1.1.7.

Changelog

Sourced from fr.maxlego08.menu:zmenu-api's changelog.

1.1.1.7

New Features

  • Live sync for button patterns: the website can now push button patterns as well as inventories. A new pattern.sync event installs a pattern sent from the Pattern Studio, and an inventory that depends on patterns now downloads and installs all of its patterns first (sequentially, so the inventory never reloads on a half-updated set) before being reloaded. Patterns are written into patterns/ (or into another plugin's patterns/ folder when the website sends a plugin_name), with the same guarantees as inventories: SHA-256 verification, size limit, path sanitisation, BUTTON type validation, atomic write with a .bak backup and rollback on a load failure.
  • New requirement item-rule: check the item a player is holding or wearing against a zMenu rule. Configure it with rule (any rule supported by the rule engine), item-source (HAND, OFF_HAND, HELMET, CHESTPLATE, LEGGINGS, BOOTS or INVENTORY), amount (minimum quantity, counted across the whole inventory when item-source: INVENTORY) and the usual deny / success actions.
  • Give an item on the first join of a world: custom items can use give-first-world-join in their mechanics.itemjoin section (a single world name or a list). The item is given the first time the player enters that world - on join or on a world change - and the visited worlds are stored in database (new first_world_join table, created automatically), so the item is never given twice.
  • Localized dialog messages: dialog-plain-message-body now accepts a localized-messages section with one message list per locale, used when the client's language matches.

Improvements

  • Updated CurrenciesAPI to version 1.0.14 (fixed the ExcellentEconomy enum name, old usage deprecated)
  • All economy and item plugins are now declared in paper-plugin.yml as optional dependencies (Vault, PlayerPoints, BeastTokens, CoinsEngine, EcoBits, ElementalTokens, ElementalGems, ExcellentEconomy, RedisEconomy, RoyaleEconomy, VotingPlugin, zEssentials, plus CraftEngine, Denizen, Shopkeepers, zItems, eco, Nexo, NextGens, Nova), so their classes are always visible to zMenu when they are installed - and none of them is required to start.
  • Commands accept a target player again in a uniform way: player arguments no longer use a raw string argument (a name with a space could break the parsing) and every command resolves its target through the same helper - selector, online player or offline player - falling back to the command sender. /zmenu players convert can now be run from the console / on another player.
  • /zmenu save <name> [type]: the type argument is now a real enum argument (YML / BASE64) with proper completion, and it is optional - it defaults to BASE64.
  • CraftEngine items are now built with the player context, so per-player CraftEngine items resolve correctly inside menus.
  • PacketEvents listeners are thread-safe: animation and click-limiter data now use ConcurrentHashMap, and inventory tasks are scheduled on the player's region instead of resolving a container location (safer on Folia).
  • More logs to debug items: eco item lookup failures are logged in debug mode, and an unknown mechanic now reports the file it comes from and the list of available mechanics.

Fixes

  • Fixed the on-click mechanic never running: OnClickMechanicFactory was not registered in the item manager.
  • Fixed clearInventory: true leaving the player inventory untouched: the saved items are now actually removed after being cloned, and only the 36 storage slots are processed (armor and off-hand are left alone).
  • Fixed color values not being clamped in ColorUtils (and a potential NullPointerException).

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fr.maxlego08.menu:zmenu-api](https://github.com/MaxLego08/zMenu) from 1.1.1.6 to 1.1.1.7.
- [Release notes](https://github.com/MaxLego08/zMenu/releases)
- [Changelog](https://github.com/Maxlego08/zMenu/blob/main/changelog.md)
- [Commits](https://github.com/MaxLego08/zMenu/commits)

---
updated-dependencies:
- dependency-name: fr.maxlego08.menu:zmenu-api
  dependency-version: 1.1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: Nighter. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants