WooCommerce Product Add-Ons By WooCommerce v8.4.1
= v8.4.1
* Fix - Added a directory-listing placeholder to add-on file upload directories, and backfilled existing directories in the background.
* Fix - Secured zero-priced product calculations while preserving Smart Coupons credit amounts.
* Fix - Prevented "Translation loading was triggered too early" notices when the installed WooCommerce or PHP version is not supported.
* Fix - Fixed add-on data being dropped when adding products to the cart through the Store API `/batch` endpoint.
* Fix - Prevented a failed Store API add-to-cart validation from leaving a stale error notice behind for later requests.
* Fix - Prevented unauthorized access to order-item add-on configuration.
* Dev - Restored TLS certificate verification and fail-closed error handling in the release deployment script.
* Dev - Fixed the unit-test CI matrix so coverage config matches this repository, and restored the PHP 8.0 job.
* Dev - Enabled JavaScript linting in the release pipelines.
* Dev - Pinned and checksum-verified the WP-CLI executable used in release builds.
* Dev - Updated cross-env to v7 and PHP_CodeSniffer to 3.13.6 (security release).
* Dev - Added Markdown, dependency license, and WordPress.org Plugin Check gates to the pull request CI.
* Dev - Updated the npm build toolchain to resolve all remaining Dependabot security alerts.
* Dev - Standardized the package license identifier on GPL-3.0-or-later.
* Dev - Exposed the shared `.ai/commands` to agent tooling and documented the isolated worktree setup.
* Dev - Enabled CSS linting in CI and fixed source style violations.
* Dev - Enabled JavaScript linting in CI and migrated the ESLint setup to the flat config format required by ESLint 10, aligning the lint and formatting toolchain with WooCommerce core.
* Dev - Removed release credentials from pull request E2E jobs.
* Dev - Update wp-coding-standards/wpcs to 3.4.1 (security release) in the phpcs lint tooling.
* Dev - Update development Composer dependencies (PHPUnit, Guzzle PSR-7, PsySH, Symfony YAML) to resolve security advisories in the PHP test toolchain.
* Dev - Update development npm dependencies to resolve security advisories in the build toolchain.
* Dev - Hardened the QIT test workflow: pinned the QIT CLI version and stopped workflow inputs from being interpolated into shell source.