0.1.1

Fixed

• Reworked the release ZIP as a conventional single-plugin package so it can be installed and activated through WordPress.
• Moved the optional must-use loader inside the packaged plugin with documented MU installation steps.
• Applied the automatic-update setting restriction to single-plugin actions as well as bulk and AJAX actions.
• Applied the activation restriction to WordPress' post-update plugin activation route.

0.1.0

Added

• Initial Disable Install Plugins must-use plugin.
• Configurable wp-admin restrictions for plugin installation, deletion, activation, deactivation, and automatic-update setting changes.
• Separate exception capabilities that are not assigned to any role by the plugin.
• MU plugin loader and release packaging suitable for extraction into wp-content/mu-plugins.
• PHPUnit tests, WordPress Coding Standards checks, and GitHub Actions workflows.

Security

• Added private vulnerability reporting guidance in SECURITY.md.