Open Border Payments for WooCommerce changelog

0.2.3 - 2026-09-05
- Forward state/province and postal code to tax quotes, and reject US/CA checkout locally when
  neither is available.

0.2.2 - 2026-08-14
- Pin Sandbox requests to the official https://api-sandbox.openborderpayments.com origin instead
  of the retired demo origin.
- Keep Live requests pinned to https://api.openborderpayments.com.
- Authenticate browser configuration for both guest and signed-in Blocks and classic checkout.
- Qualify the current matrix against WordPress 7.1 with WooCommerce 10.9.4.
- Preserve settings, plugin tables, and the existing payment lifecycle across the upgrade.
0.2.1 - 2026-07-24
- Preserve an unpaid on-hold order while an automatic charge is processing.
- Reconcile that exact attempt to success or failure without shopper resubmission.
- Always obtain a server-issued tax quote before charging and attach its id to the exact payment
  request; the retired zero-tax path is no longer accepted.
- Send the WooCommerce store base country as the required ship-from side of the trade lane.
- Stop checkout with an actionable configuration error, before any request, when that store base
  country is missing or is not a two-letter country code.
- Qualify the current matrix against the WordPress 7.0.2 security release with WooCommerce 10.9.4.

0.2.0 - 2026-07-20
- Prepared the first GPLv2-or-later WordPress.org public beta candidate.
- Added public installation, service disclosure, privacy, support, upgrade, and listing guidance.
- Added version-consistency, package-size, secret-pattern, and WordPress.org asset checks.
- Added an exact 0.1.0-to-0.2.0 settings, table, and reconciliation upgrade smoke test.
- Added safe checkout recovery after an abandoned 3DS challenge by canceling the unconfirmed
  Open Border intent before allocating a new attempt.
- Preserved the 0.1.0 table schema, automatic-capture scope, and deterministic package format.

0.1.0 - 2026-07-17
- Initial private pilot distribution.
- Added classic and Cart/Checkout Blocks card tokenization through one shared PHP payment service.
- Added automatic capture, 3DS continuation, exact integer totals, HS-coded tax quotes, and five
  currency/entity routes.
- Added atomic per-order attempts, stable idempotency, signed callback dedupe, scheduled repair,
  HPOS compatibility, opt-in redacted diagnostics, and deterministic ZIP/checksum packaging.
- Refunds and merchant-facing manual capture/cancel remain intentionally unavailable.
