Versioned Changelog

* New: Tested up to WordPress 6.9.4
* New: Tested up to WooCommerce 10.6.1
* Update: Replaced deprecated 'wc_enqueue_js()' usage for compatibility with WooCommerce 10.4
* Update: Translation

* Tweak – Improve support of S3 content disposition in pre signed URLs
* Tweak – Add a setting to control the default behavior of the plugin concerning the content disposition for S3 downloads
* Dev – Add a filter hook to allow customizing the content disposition of the pre-signed URLs generated by the plugin

* Fix – Subscriptions – Dropdown for editing subscription link on "Edit User Membership" page not working
* Misc – Update the SkyVerge Plugin Framework to v6.1.1

* Fix – Ensure extraction of metadata properly works with variations when not inheriting from the parent product

* Fix – Filter out First-Class Package International Service rates for packages exceeding USPS dimensional limits.
* Fix – Restrict international First-Class Mail letter and envelope rates to items with zero declared value.
* Tweak – Split international First-Class into separate Mail and Package services for accurate rate naming.
* Tweak – Show packing method label in rate metadata for all packing methods.
* Tweak – Add rate description and mail class to rate metadata.

* Add – FedEx® Extra Small Box packaging option.

* SECURITY Medium: Fixed an authenticated account takeover vulnerability that could allow an attacker to assume any user account, including administrators.
* SECURITY Low: Fixed unauthenticated access to order status and user data.
* FIX: PayGold link generated from admin order metabox was never saved correctly due to an impossible response code condition in send_paygold_link(). The function now uses the same validation logic as the checkout flow (response code 9998).
* FIX: Fixed undefined $description variable in paygold_metabox_save() when sending a PayGold link from the order edit screen.
* FIX: Custom notification domain (redsys_url_notify) was broken by check_url() prepending home_url() to URLs that already had a different domain. check_url() now detects absolute URLs and preserves them as-is.
* FIX: get_notify_home_url() now automatically adds https:// when the custom notification domain is saved without a scheme.
* FIX: PHP 8.3+ compatibility — Fixed deprecated warnings for passing null/false to string functions (trim, strlen) from get_option() calls in get_txnid(), get_token_type(), and connect_standard_imap().
* FIX: PHP 8.3+ compatibility — Fixed add_submenu_page(null,…) in setup guide causing strpos()/str_replace() deprecation warnings.

* New: Tested up to WordPress 6.9.4
* New: Tested up to WooCommerce 10.6.1
* Update: Segment snippet version 5.2.1
* Update: POT file

* Note – This is a major version release. It removes the existing "Enable 'Order Delivery' when the shipping method is 'Local Pickup'" setting. It is recommended to test this upgrade in a staging environment before applying it to your production store
* Note – Pickup settings are now configured independently, allowing more granular control over pickup days, timeframes, and ranges. If you previously had this setting enabled, you'll need to set 'Show dates/estimates for' to 'Both delivery & pickup' and update your delivery and pickup configuration accordingly
* Feature – Local pickup days, timeframes, and ranges can now be configured independently from delivery
* Feature – Date position at checkout setting is now fully compatible with CheckoutWC, it is recommended to use the latest version of CheckoutWC with this setting
* Add – Orders list now shows delivery or pickup identifier on orders
* Update – Various settings have been moved and relabelled to be more descriptive
* Update – The two calendar setting pages used to disable specific dates have been moved into their respective scheduling tabs
* Update – New conditional setting tab structure of Settings | Picking | Delivery Scheduling | Pickup Scheduling | Tips
* Fix – Today can be selectable even though a disabled delivery/pickup date in some configurations
* Remove – Existing "Enable 'Order Delivery' when the shipping method is 'Local Pickup'" setting removed, replaced by independent pickup settings

* Fix: Compatibility with Gravity Forms 2.9.29+. Updated calls to GFCommon::get_lead_field_display() to pass the entry array as the third parameter instead of the currency string, resolving PHP warnings on cart, checkout, and order creation. Backward compatible with older Gravity Forms versions.
* Update: Tested up to WordPress 6.9
* Update: Tested up to WooCommerce 10.6