v1.1.1

Security

• Server-authoritative fuel: a StateBag change handler now tracks the authorized fuel value per vehicle and rolls back any illegitimate increase, so a client can no longer set arbitrary fuel levels.
• GetVehicleFuel now falls back to 0.0 instead of 50.0, so a missing fuel state can no longer grant free fuel.
• Added serverside rate limiting (500 ms) on the refillCan, payFuelPrice and updateFuelCan events.
• Petrolcan buy and refill now verify serverside that the player is actually standing at a known fuel station, which blocks spoofed coordinates and remote triggering.

Added

• Per vehicle type fueling distance via Config.MaxFuelingDistance (default, heli, plane) plus a serverside GetMaxFuelingDistance helper.
• Serverside IsPlayerNearFuelStation check with new Config.MaxStationDistance and Config.FuelStationZoneDistance options.
• Translation fallback: a missing key now falls back to English and then to the raw key instead of throwing an error.

Changed

• Config.Debug now defaults to false.
• Config.MaxFuelingDistance changed from a single number (100.0) to a per vehicle type table.
• The refillCan event now sends the pump coordinates from the client so the server can verify the station.
• Money handling in the petrolcan and refuel events is now unified on PayPrice.
• Relicensed the resource to LGPL-3.0-or-later.

Fixed

• Adjusted the wrong fuel engine failure threshold (now triggers below 500 engine health).
• Clean up the authorized fuel and rate limit tables on entityRemoved and playerDropped.

Changed files

• client/fuel.lua
• client/functions.lua
• client/main.lua
• config.lua
• server/functions.lua
• server/main.lua
• server/versionchecker.lua
• translation.lua
• fxmanifest.lua
• LICENSE, GPL-3.0.txt, .gitignore