@@ -108,8 +108,8 @@ tasks.assemble {
 // (https://fill.papermc.io/v3/projects/velocity/versions/<version>/builds/latest); bump the three
 // together. libs.versions.toml's velocity is the api the plugin compiles against, which is this
 // build's version line.
-val velocityBuild = "3.5.0-SNAPSHOT-609"
-val velocitySha256 = "0c3d16b70ed757638b696a9a87d670b4301f23a6fef30c3acbbd9b0e0d7b29bb"
+val velocityBuild = "4.2.1-SNAPSHOT-31"
+val velocitySha256 = "b2879bb60eba6be23e99fdd659084b7adbe1190d42b7ddf296356331f8ea7c9a"
 val velocityUrl = "https://fill-data.papermc.io/v1/objects/$velocitySha256/velocity-$velocityBuild.jar"
 
 val velocityJar = layout.buildDirectory.file("proxy/velocity-$velocityBuild.jar")
 
@@ -1,5 +1,5 @@
 # Config version. Do not change this
-config-version = "2.8"
+config-version = "2.9"
 
 # What port should the proxy be bound to? By default, we'll bind to all addresses on port 25577.
 bind = "0.0.0.0:25565"
@@ -51,24 +51,26 @@ announce-forge = false
 # any existing player who is online if a duplicate connection attempt is made.
 kick-existing-players = false
 
-# Should Velocity pass server list ping requests to a backend server?
-# Available options:
-# - "disabled":    No pass-through will be done. The velocity.toml and server-icon.png
-#                  will determine the initial server list ping response.
-# - "mods":        Passes only the mod list from your backend server into the response.
-#                  The first server in your try list (or forced host) with a mod list will be
-#                  used. If no backend servers can be contacted, Velocity won't display any
-#                  mod information.
-# - "description": Uses the description and mod list from the backend server. The first
-#                  server in the try (or forced host) list that responds is used for the
-#                  description and mod list.
-# - "all":         Uses the backend server's response as the proxy response. The Velocity
-#                  configuration is used if no servers could be contacted.
-ping-passthrough = "DISABLED"
+# If enabled, the server list ping shows a sample of online players.
+sample-players-in-ping = false
 
 # If not enabled (default is true) player IP addresses will be replaced by <ip address withheld> in logs
 enable-player-address-logging = true
 
+[ping-passthrough]
+version = false
+players = false
+description = false
+favicon = false
+modinfo = false
+
+[packet-limiter]
+interval = 7
+packets-per-second = -1
+bytes-per-second = -1
+# Increased to allow bigger Axiom pastes.
+decompressed-bytes-per-second = 67108864
+
 [servers]
 # Configure your servers here. Each key represents the server's name, and the value
 # represents the IP address of the server to connect to.
 
@@ -23,9 +23,9 @@ logback = "1.5.18"
 json5 = "2.0.0"
 graalvm = "25.0.0"
 blossom = "2.1.0"
-velocity = "3.5.0-SNAPSHOT"
-# Matches the netty velocity 3.5.0 ships, so the proxy plugin compiles against what it runs on.
-netty = "4.2.15.Final"
+velocity = "4.2.1-SNAPSHOT"
+# Matches the netty velocity 4.2.1 ships, so the proxy plugin compiles against what it runs on.
+netty = "4.2.18.Final"
 classgraph = "4.8.179"
 javapoet = "0.7.0"
 luau = "1.1.0"