Support Minecraft 26.3 and protect cushions and straw beds

[tastybento]

Summary

Minecraft 26.3 "Wilderness Bound" (released 2026-09-15) is the default client version. This adds runtime support, the protections its new content needs, and a build split so we can compile against 26.3 before MockBukkit supports it.

Runtime 26.3 support

• ServerCompatibility: add V26_3 (COMPATIBLE). The existing .build.N strip already parses Paper's 26.3.build.NN-alpha string.
• Modrinth / Hangar / CurseForge game versions: add 26.3.
• buildVersion → 3.23.1.

Build: compile on 26.3, test on 26.2

Paper 26.3 is alpha-only and MockBukkit has no v26.3 artifact yet (MockBukkit/MockBukkit#1655 is a draft). So:

• paperVersion (dev bundle, compileOnly, testCompileOnly) = 26.3.build.41-alpha
• new testPaperVersion (testRuntimeOnly, forced on testRuntimeClasspath) = 26.2.build.111-stable

The dev bundle's server jar only feeds compileOnly, which is what makes this work. Documented in .claude/rules/build-toolchain.md. Main code must still guard 26.3-only API because the plugin runs on 26.2 servers. paperVersion should move to the first -stable 26.3 build once Paper publishes one.

Cushion protection

Cushions are block-attached entities: not blocks, not Hanging, not Vehicle, so no existing listener saw them. New CushionListener:

Action	Event	Flag
place	EntityPlaceEvent	PLACE_BLOCKS
break (hand or player projectile)	Paper EntityBreakByEntityEvent (the only event a cushion break fires)	BREAK_BLOCKS
sit	PlayerInteractEntityEvent	RIDING

Registered from BentoBoxListenerRegistrar behind a Class.forName guard. The listener's method signatures name 26.3 classes, so the JVM cannot verify it on an older server; nothing else may reference the class. Hanging entities are skipped so item frames are not double-reported.

Straw bed

Vanilla keeps STRAW_BED out of the #beds tag (villagers must not claim it), so Tag.BEDS missed it and a visitor could sleep in, and consume, an island's straw beds. Resolved via Enums.getIfPresent and added to the BED check.

Everything else in 26.3 is already covered

Poplar doors/gates/buttons/plates/signs/shelf/boats are tag-matched; wool and concrete stairs and slabs, red shrub, explorer maps and shelf mushrooms are generic break/place (shelf mushrooms have no right-click harvest, only bone meal, which is already PLACE_BLOCKS). The API diff 26.2 → 26.3 removed nothing BentoBox uses. No new flags, so no locale changes.

Test plan

• Full suite passes with the split build: 3564 tests, 0 failures, 13 skipped.
• CushionListenerTest and a straw-bed test are @EnabledIf the 26.3 API is on the test runtime classpath. They skip until MockBukkit ships v26.3; verified that running them on a 26.3 runtime with MockBukkit v26.2 fails at Registry init, so they cannot run earlier.
• Main and test sources compile against the 26.3 alpha API with no changes.
• Manual check on a Paper 26.3 server: place, hit, shoot and sit on a cushion, and sleep in a straw bed, as a visitor on a protected island.

Follow-up

When MockBukkit v26.3 is released: bump testPaperVersion and the mockbukkit-v26.3 coordinate together; the 13 skipped tests then run automatically.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
9.4% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud