v3.2.0

Added

• Dispatch the InvalidCallbackReceived event when a callback fails validation (wrong API key/channel, unknown payment method, malformed data). The event carries the validation errors and a redacted callbackData (the API key and channel are excluded). The HTTP response remains a generic 422, so no field-level detail is leaked to the caller.

Builds on the callback security hardening introduced in v3.1.0.

Full changelog: https://github.com/digitaldev-lx/laravel-eupago/blob/master/CHANGELOG.md