v1.2.0

New Features

• Added capability-aware deletion safeguards that prevent self-deletion and reassign deleted-member content to the authenticated administrator.
• Added strict REST argument validation and meaningful HTTP error status codes while retaining the existing response envelope for endpoint-controlled errors.

Improvements

• Replaced administrator role-string checks with WordPress manage_options and object-level delete_user capability checks.
• Cached ARMember table availability checks and combined the common payment total/page database path, with bounded pagination to limit deep-offset work.
• Extracted the settings page CSS and JavaScript into versioned assets loaded only on the Bono ARM API settings screen.
• Updated README, WordPress readme, OpenAPI documentation, and the security assessment to match the hardened behavior.
• Updated the release workflow to keep the checked-in OpenAPI version synchronized with plugin release metadata.

Bug Fixes

• Removed the hard-coded user ID 1 content reassignment target from member deletion.
• Removed the two activation/deletion settings and cached dependency check during plugin uninstall.
• Marked arm_invoice_id_gt as required and rejected invalid or excessive pagination values before query execution.