* Misc – Improve escaping and sanitizing throughout codebase
* Misc – Tested up to WooCommerce 10.2

* Add – Support for VAT Validation on Subscription Renewals.
* Add – Setting to allow customers to enter VAT numbers without a country prefix.
* Fix – The plugin asset URL issue for plugins installed via a symlink (e.g. on WordPress.com).
* Fix – Account for the Greek VAT prefix, EL, for the purposes of matching customer and merchant countries.
* Fix – Ensure that the ‘Collect and Validate Evidence’ validation works properly for users whose IP address country is in the EU for Block checkout.
* Fix – Display VAT in billing address on order confirmation page when shipping address is not displayed.
* Dev – Update for PHP 8.4 compatibility.
* Dev – Bump WordPress “tested up to” version 6.9.

* Fix – Block checkout could sometimes result in multiple vouchers being created for one order item
* Fix – PHP warning during checkout: “Passing null to parameter #1 ($string) of type string is deprecated”
* Fix – Fatal error when using Italian language and adding a new voucher template
* Tweak – Remove unused parameter from hook callback to prevent possible type conflicts

* New: ANTI-FRAUD-126 – AF – API-Based Order Blocking & Throttling on Accepted API Orders
* New: ANTI-FRAUD-149 – AF – ChatGPT-5 Support for AI Fraud Detection.
* New: ANTI-FRAUD-16 – AF – Add Note for SMS Verification Feature.
* Fix: ANTI-FRAUD-148 – AF – IP Whitelisting Bug When No IP Addresses Are Entered.
* Fix: ANTI-FRAUD-153 – AF – Email Whitelist Parsing Bug (Comma vs Newline Handling Fixed).
* Fix: ANTI-FRAUD-159 – AF – Reported reCAPTCHA Issues at Checkout.

* Tweak – Replaced wc_enqueue_js with wp_add_inline_script according to the recommended WordPress core script patterns.
* Tweak – Bumped WordPress tested up to version to 6.9.
* Tweak – Bumped WooCommerce tested up to version to 10.4.