* Fix – Respect admin-defined service order when rates are returned from multiple request buckets (e.g. Ground + Express for FEDEX_PAK shipments).
* Fix – FedEx rates now appear on Blocks-based checkout pages that are not set as the default WooCommerce checkout page.
* Tweak – Suppress shipping method notices outside AJAX requests.

* Fix: Changing the payment details on a subscription could sometimes override the subscriber's renewal method choice when the 'Display the auto renewal toggle' setting is enabled.
* Fix: Updated the subscription switching flow to respect the renewal method choice on the subscription.

* Fix – Prevented division-by-zero errors when normalizing bundled cart item quantities against a zero parent quantity.
* Fix – Fixed a fatal error when loading bundle-sells for a product that no longer exists.
* Fix – Fixed admin styling compatibility issues with WordPress 7.0.
* Tweak – Bumped WordPress tested up to version to 7.0.
* Tweak – Bumped WooCommerce tested up to version to 10.7.

* NEW: Subscriptions section in Redsys Advanced settings to configure credentials and behavior for subscription renewal payments.
* SECURITY High: Added missing cryptographic signature verification in successful_request() for 9 payment gateways: Apple Pay, Bizum Checkout, Bizum Redirect, Google Pay Checkout, Google Pay Redirect, Direct Debit, MasterPass, PayGold, and Bank Transfer. Without this check, payment notifications could be forged to complete orders without actual payment.
* FIX: SUMO Subscriptions renewal orders failed because sumo_save_subscription_payment_info() was called with 'payment_method' => 'insite' instead of 'redsys' in the redirect gateway callback. This caused SUMO to set the wrong payment method on renewal orders, triggering the wrong gateway filter and using incorrect credentials.
* FIX: YITH WooCommerce Subscriptions were being cancelled prematurely on failed renewals for the Redsys Redirect, InSite, Apple Pay Checkout and Google Pay Checkout gateways. The "no token / expired card" path in doing_scheduled_subscription_payment() (class-wc-gateway-redsys.php and class-wc-gateway-insite-redsys.php) called ywsbs_register_failed_payment() and then returned false, causing the YITH wrapper renew_yith_subscription() to call it again. The double increment of failed_attempts cancelled subscriptions after 1–2 real failures instead of the configured 3 retries. Apple Pay and Google Pay Checkout are also fixed since they delegate to the main Redsys handler.

* Fix – Reverted the Add Booking admin screen calendar width constraint from 3.5.0.