* Tweak – Improve handling of Intuit account connection requests
* Dev – The legacy `WC_Intuit_Payments::decrypt_credential_legacy()` method is now non-functional and will be entirely removed in a future version

* Fix – Ensure WooCommerce totals are finalized before generating Moneris checkout ticket
* Fix – Ensure only one checkout payment session is loaded at a time
* Fix – Prevent payment modal loading with invalid checkout field data
* Misc – Add customer profile as a fallback for sourcing address data if no order or session address exists (e.g. My Account page)

* Tweak – WooCommerce 11.2 Compatibility.

* Fix – Replaced public quote PDFs with private temporary attachments and removed legacy Quotes.pdf files.
* Fix – Disabled remote resources, PHP execution, and JavaScript in PDF rendering; external/CDN images are omitted.
* Fix – Added permission checks to administrative AJAX actions and single/bulk PDF downloads; bulk downloads also require nonce validation.
* Fix – Enforced quote ownership, approved status, and enabled settings for customer conversions.
* Fix – Enforced ownership for current and legacy My Account quote details.
* Fix – Restricted quote, rule, and field administration to WooCommerce managers.
* Fix – Protected quote uploads with authorized downloads, signed guest links, and Apache/IIS access rules. Nginx requires equivalent rules.
* Fix – Validated cart conversion quote status and tokens, and corrected guest customer handling.

* New – Added bulk actions to the Buy Again table, allowing customers to select products and Add to Cart, Buy Now, or Add to Favourite in bulk with one click.
* New – Added a drag-and-drop option for admins to customize and reorder the Buy Again table columns.
* New – Added a new Modern Display option for the Buy Again Table Style.
* Update – Improved the display of the Email Preferences page and form in the Buy Again table.
* Dev – Bumped the WordPress Tested up to version to 7.1.2.
* Dev – Bumped the WooCommerce Tested up to version to 11.1.2.