Fixed

• Blocked GUI item movement through click, shift-click, number-key swaps, offhand swaps, and drag actions.
• Cleaned leaked GUI-tagged items from player inventories, cursor, open top inventories, and crafting slots.
• Added a periodic safety cleanup that removes leaked GUI items from online players every few seconds.
• Made /rules reload validate config.yml before applying changes.
• Prevented invalid YAML from silently falling back to default runtime values.
• Normalized material names such as Sticky_piston and Diamond_Sword to valid Bukkit materials.
• Removed unnecessary Paper-only API usage for better Spigot compatibility.

GUI Security

RulesPlugin now treats all menu items as server-side tagged GUI items. If one is moved out of the menu by a client desync, lag, creative interaction, drag action, or crafting-slot edge case, the plugin detects the tag and removes the item automatically.

This protection runs both during inventory events and through a lightweight periodic cleanup task for online players.

Compatibility

RulesPlugin v1.3.1 targets Minecraft 26.1.x servers, following Mojang's updated version numbering.

The update keeps compatibility focused on the latest Minecraft server line and avoids Paper-only calls where Spigot support is expected.

Special Thanks

Special thanks to CarrFN, Charlie, Break_Cats, Some one, and maihari for reporting real plugin bugs that helped shape this emergency update.

Download

Download the latest JAR from the official RulesPlugin pages.