* Fix – Ensure extraction of metadata properly works with variations when not inheriting from the parent product

* Fix – Filter out First-Class Package International Service rates for packages exceeding USPS dimensional limits.
* Fix – Restrict international First-Class Mail letter and envelope rates to items with zero declared value.
* Tweak – Split international First-Class into separate Mail and Package services for accurate rate naming.
* Tweak – Show packing method label in rate metadata for all packing methods.
* Tweak – Add rate description and mail class to rate metadata.

* Add – FedEx® Extra Small Box packaging option.

* SECURITY Medium: Fixed an authenticated account takeover vulnerability that could allow an attacker to assume any user account, including administrators.
* SECURITY Low: Fixed unauthenticated access to order status and user data.
* FIX: PayGold link generated from admin order metabox was never saved correctly due to an impossible response code condition in send_paygold_link(). The function now uses the same validation logic as the checkout flow (response code 9998).
* FIX: Fixed undefined $description variable in paygold_metabox_save() when sending a PayGold link from the order edit screen.
* FIX: Custom notification domain (redsys_url_notify) was broken by check_url() prepending home_url() to URLs that already had a different domain. check_url() now detects absolute URLs and preserves them as-is.
* FIX: get_notify_home_url() now automatically adds https:// when the custom notification domain is saved without a scheme.
* FIX: PHP 8.3+ compatibility — Fixed deprecated warnings for passing null/false to string functions (trim, strlen) from get_option() calls in get_txnid(), get_token_type(), and connect_standard_imap().
* FIX: PHP 8.3+ compatibility — Fixed add_submenu_page(null,…) in setup guide causing strpos()/str_replace() deprecation warnings.

* New: Tested up to WordPress 6.9.4
* New: Tested up to WooCommerce 10.6.1
* Update: Segment snippet version 5.2.1
* Update: POT file