Fabric Loader 0.15.1

• Bump version (modmuss50)
• Fix Log4j Javadoc link (modmuss50)
• Fix Loading Mappings When Mappings File is in a Folder (#864) (Cool_Mineman)
• Update to Mixin Extras 0.3.1 (#862) (modmuss)

Fabric Loader 0.15.0

• Include MixinExtras (#854) (LlamaLad7)
• Bump version (modmuss50)
• Fix environment annotation stripping for fields (#860) (modmuss)
• Dont debof with classpath by default. (#856) (modmuss)
• Migrate to mapping io (#812) (modmuss)
• Allow replacing the default mod directory via fabric.modsFolder (#850) (IMS)
• Rework external library handling. (#846) (modmuss)

Fabric Loader 0.14.25

• Bump version (modmuss50)
• Prioritize mods with higher provided versions if their main id differs (#857) (Player)

Fabric Loader 0.14.24

Fixes a command injection vulnerability allowing malicious resource pack to unexpectedly execute code on Linux clients running vanilla Minecraft 1.16 (20w21a) -> 1.19.3 (23w04a)

It was recently found that the Tiny File Dialogs library is vulnerable to command injection techniques on Linux when invoked with untrusted data. This fix makes a small change in the create world MoreOptionsDialog screen to pass a hardcoded string as the dialog title.

Modder's using the Tiny File Dialogs library in any Minecraft version should ensure that no untrusted strings (such as translated text) are used, this fix in loader does not apply to mods.

Many thanks to ThatGravyBoat and Moulberry for investigating this issue and reporting it to us in confidence.

Fabric Loader 0.14.23

• Bump version (modmuss50)
• Support 1.20.3 snapshots (modmuss50)
• added a system property to disable loading of mods by mod id (Sebastian Hartte)
• Don't initialize MappingResolver for access widener load (altrisi)
• Check for duplicate copies of loader on the classpath in dev. (#801) (modmuss)
• Update IRC URL to use TLS (#602) (Soni L)
• Add Spanish translation and make StringUtil capitalize the first letter, not character (#727) (altrisi)
• Fix EntrypointPatchFML125 (#732) (Ned Loynd)
• Add an API method to more easily invoke entrypoints (#802) (shartte)
• Create Messages_vi_VN.properties (#822) (I_am_Vietnam)
• Minor language changes for user readability (#831) (IMS)
• Fix call to findResources returns empty. (#837) (NotFoundZara)
• Update to ASM 9.6 (#841) (modmuss)

Fabric Loader 0.14.22

• Support 1.20.2 snapshots. (modmuss50)

Fabric Loader 0.14.21

• Bump version (modmuss50)
• Revert "Only apply Fabric Mixin services on platforms that need them (#790)" (modmuss50)

Fabric Loader 0.14.20

• Bump version (modmuss50)
• Only apply Fabric Mixin services on platforms that need them (#790) (Juuz)
• Allow fabric-loader-junit EnvType to be changed (#806) (LCLP, modmuss50)
• Update Mixin and build deps (#800) (modmuss50)
• MinecraftGameProvider: Support split assets jar (#793) (Juuz)
• Add Automatic-Module-Name to jar manifest (#796) (Juuz)
• Update to ASM 9.5 (#785) (modmuss50)

Fabric Loader 0.14.19

• Support 23w13a_or_b (modmuss50)

Fabric Loader 0.14.18

• Support 1.20 snapshot versions. (modmuss50)