v1.3.0

changelog.txt

@@ -1,5 +1,40 @@
 == Changelog ==
 
+= 1.3.0 =
+
+_Release date: 2026-07-18_
+
+**Highlights**
+
+* New image sub-sizes control: ship less data per upload, ideal for large camera files. Reduces work in both the WP 7.1 client-side path (browser) and the server-side path.
+
+**Added**
+
+* Settings field **Image Sub-sizes** under Settings → iDrivee2 with three modes: `all` (default), `thumbnail` (only the default thumbnail), `none` (no sub-sizes).
+* `IDRIVEE2_MEDIA_SUBSIZES_MODE` wp-config.php constant — same priority pattern as the S3 credentials; the field becomes read-only when set.
+* In `thumbnail` and `none` modes the `big_image_size_threshold` filter is also disabled, so WordPress no longer creates a `-scaled` derivative for images larger than 2560px.
+
+**Security**
+
+* `composer audit` CVEs resolved: `guzzlehttp/guzzle` 7.11 → 7.15, `guzzlehttp/psr7` 2.11 → 2.13, `mtdowling/jmespath.php` 2.8 → 2.9 (CVE-2026-55767 / 55568 / 55766 / 54133).
+
+**Tooling**
+
+* `bin/preflight.sh` added — automated pre-deploy verification per AGENTS-testing-build-deployment.md (PHPCS, PHPStan, PHPCompatibility, PHPUnit + coverage, composer audit, candidate ZIP inspection).
+* `.claude/settings.json` added — mechanical deny rules for `deploy.sh`, `git push/tag/merge` per AGENTS.md.
+
+**Compatibility**
+
+* WordPress: 4.1 - 7.1
+* PHP: 8.1 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: 3.13.5 (0 errors)
+* WordPress Coding Standards: 3.3.0 (0 violations)
+* PHPStan: Level 9, 0 errors
+* PHPUnit: 38 tests, 60 assertions
+
 = 1.2.1 =
 
 _Release date: 2026-06-05_