- Exclude __pycache__ directories and .buildinfo files from zip output
- Replace xmlrpc.client with urllib + defusedxml in plugin_upload.py (security)
- Fix Bandit B310 by replacing urlopen with http.client (security)
- Use get_plugin_directory() in validate command for consistent path detection
- Fix Windows compatibility issues in path handling
- Add defusedxml dependency to pyproject.toml