build: switch to the OneLiteFeather minestom-extensions fork

[TheMeinerLP]

Rebased onto main and retargeted: #206 is merged, so this PR no longer stacks on build/buildsrc-conventions. #208 was merged into this branch and therefore ships with it — the two commits below are the whole diff.

Commit
build: switch to the OneLiteFeather minestom-extensions fork	the change described here
feat: log through SLF4J and report errors to Sentry (#208)	already reviewed in #208

Why

dev.hollowcube:minestom-ce-extensions is archived and resolves extension dependencies through a Kotlin class (net.minestom.dependencies.maven.MavenRepository). That forced two workarounds, both of which were carrying an explanatory comment in the build:

• bundle kotlin-stdlib-jdk8 into the fat jar, otherwise NoClassDefFoundError: kotlin/jvm/internal/Intrinsics
• route com.github.Minestom:DependencyGetter through the reposilite JitPack proxy

On top of that, TitanApplication needed a reflection hack because ExtensionBootstrap.init() accepted no Auth.

What

Switch to net.onelitefeather:minestom-extensions 2.2.0, the OneLiteFeather fork. Same packages (net.hollowcube.minestom.extensions, net.minestom.server.extensions), but resolution via Maven Resolver.

Both workarounds are gone:

• kotlin-stdlib-jdk8 dropped from :app and from the version catalog
• the JitPack proxy replaced by the credential-free OneLiteFeatherReleases repository that hosts the fork

The reflection hack is gone. The fork ships ExtensionBootstrap.init(Auth) (minestom-extensions#7, release 2.2.0), added for exactly this case:

-        MinecraftServer server = MinecraftServer.init(new Auth.Velocity(secret));
-        try {
-            var constructor = ExtensionBootstrap.class.getDeclaredConstructor(MinecraftServer.class);
-            constructor.setAccessible(true);
-            return constructor.newInstance(server);
-        } catch (ReflectiveOperationException exception) {
-            throw new IllegalStateException("Failed to initialise the extension bootstrap", exception);
-        }
+        return ExtensionBootstrap.init(new Auth.Velocity(secret));

That closes open item 1 of the OLF Minestom Project Standard.

:bridge now generates extension.json from @ExtensionInfo instead of keeping it by hand (OLF-L5-01). The handwritten file and the ReplaceTokens filter for @version@ are removed.

Verification

Generated vs. handwritten extension.json — identical content; only key order and whitespace differ:

Field	before	after
name	TitanCloudNetPermissions	TitanCloudNetPermissions
entrypoint	net.onelitefeather.titan.bridge.TitanBridgePermissionExtension	same
version	1.14.0	1.14.0
authors	["OneLiteFeather"]	["OneLiteFeather"]
dependencies	["CloudNet_Bridge"]	["CloudNet_Bridge"]

The bridge jar carries exactly the same entries as before — @ExtensionInfo has source retention, so the annotation never reaches the jar.

Cold Gradle cache (fresh --gradle-user-home): all 65 modules resolve without the JitPack proxy, including com.github.CloudNetService.cloud-command-framework, which comes from repository.derklaro.dev.

Velocity path against the real fat jar — the branch that previously needed reflection:

java -Dminestom.velocity.secret=… -jar app-titan.jar

Gets past ExtensionBootstrap and LuckPerms and stops at NoSuchFileException: worlds — the same point where the pre-change jar stops in an identical run (control run performed). No NoClassDefFoundError.

Tests: 63, 0 failures. (The count includes the 7 tests that came with #208.)

Side effect: the fat jar loses the Kotlin and Shrinkwrap trees

Measured against main, both jars built from a clean shadowJar:

	main	this PR
size	43.7 MB	43.0 MB
entries	25,650	25,280
kotlin/**	1,045	0
shrinkwrap resolver	579	0
org/eclipse/aether	448	651

The old DependencyGetter pulled in shrinkwrap-resolver, arquillian-spacelift and jsoup; Maven Resolver replaces that with aether + httpclient.

The extension switch on its own removed ~2.8 MB. The net figure is smaller because the Sentry and Logback dependencies from #208 add roughly 2 MB back — that is the cost of the observability change, not of this one.

Notes

• The commit type is build:, so this produces no changelog entry. If the loader switch should be visible to ops in CHANGELOG.md, say so and it becomes a feat:.
• The SLF4J(W): No SLF4J providers were found warning noted during the original smoke test is fixed by feat: log through SLF4J and report errors to Sentry #208, which is part of this branch.
• MapProvider still compiles with two removal warnings (GsonFileHandler, AnvilLoader(Path)), both pre-existing and unrelated to this change.

[github-actions]

Test results

 66 files   66 suites   53s ⏱️
 62 tests  60 ✅ 2 💤 0 ❌
189 runs  183 ✅ 6 💤 0 ❌

Results for commit 5512f2f.