* Add – Vendor users with no vendor assigned now see a notice explaining why, instead of an empty dashboard.
* Fix – Vendor users are now moved to a vendor they still manage if their active vendor is removed.
* Fix – Improved permission checks when saving user profiles.
* Fix – Add the wcpv_scale_fixed_commission_by_line_discounts filter to optionally scale fixed commissions based on line-item discounts, ensuring coupon discounts reduce fixed payouts in proportion to the merchant's earnings. The filter is disabled by default to preserve the existing flat per-unit payout behavior. When enabled, refunds recalculate existing commissions using the same rule, so fixed commissions for discounted orders are adjusted accordingly during refund processing.
* Dev – Update the PHP_CodeSniffer to 3.13.6 and WPCS to 3.4.1.
* Dev – Bump WordPress "Tested up to" to 7.1.
* Dev – Bump WordPress minimum supported version to 6.9.
* Dev – Bump WooCommerce "tested up to" version 11.1.
* Dev – Bump WooCommerce minimum supported version to 10.9.

* Tweak – WooCommerce 11.1 Compatibility.

* Fix – Prevented unrelated product variations from being added as Composite Product components.
* Fix – Prevented order editors from changing Composite items on orders they cannot edit.
* Fix – Prevented product editors from overwriting Composite configurations on products they cannot edit.
* Fix – Prevented order editors from viewing Composite configurations on orders they cannot edit.
* Fix – Escaped component titles in storefront option placeholders, status, validation and availability messages.
* Fix – Escaped component titles used in Cart and Checkout block styles.
* Fix – Escaped variation and add-on labels shown in Composite Product summaries.
* Fix – Prevented order item metadata from triggering secondary PHP object deserialization.
* Fix – Escaped product names shown in AJAX search results.
* Fix – Prevented translations from loading before WordPress initialization.
* Tweak – Important: Updated frontend templates.
* Dev – Managed changelog entries with Jetpack Changelogger: pull requests add a change file under changelog/ instead of editing changelog.txt.
* Dev – Removed redundant and low-value tests.

* Add – `woocommerce_order_barcodes_scan_result_heading` filter to allow overriding the scan results heading level and text.
* Fix – Add a section heading above the barcode scan results to meet WCAG 2.4.10 (Section Headings). Resolves WooExt-472.
* Fix – Let the scan form notice dismiss button inherit the notice's text colour in every state instead of hardcoding it, so the glyph and its focus ring keep the notice's own contrast at rest, on hover and on focus, meeting WCAG 1.4.3 (Contrast (Minimum)) and 1.4.11 (Non-text Contrast). Resolves WOOORBR-35.
* Tweak – Check barcode scanning permissions before looking up the barcode, so an unauthorised request can no longer tell an unrecognised barcode apart from a valid one.
* Tweak – WooCommerce 11.1 Compatibility.

* Fix: PLUGINS-3345: Fixed an incorrect Anti-Fraud admin warning appearing when manually creating WooCommerce orders.
* Fix: PLUGINS-3347: Improved “Block Unknown Origin†protection across Classic Checkout, Store API, and CardPointe checkout flows for more consistent fraud protection.
* Fix: PLUGINS-3373: Improved “Too Many Order Attempts†protection to reduce false blocks of legitimate customers caused by store-wide and aggregated matching.
* Fix: PLUGINS-3374: Fixed Apple Pay and WooPayments tokenized cart checkout issues caused by WooCommerce Anti-Fraud interference.
* New: ANTIFRAUD-275: Added Anti-Fraud Settings search to make configuration options easier to find.
* Fix: ANTIFRAUD-278: Improved CAPTCHA provider compatibility and corrected reCAPTCHA support.
* Fix: ANTIFRAUD-280: Added WooCommerce 10.9+ compatibility and fixed a fatal error related to email notification handling.
* Update: ANTIFRAUD-288: Improved WooCommerce Anti-Fraud to meet Woo Marketplace Excellence Verified requirements.