Essentials for Contact Form 7 2.5.0

• The plugin has been renamed. It was CF7 Nova Lite; it is Essentials for Contact Form 7 now, and the admin menu says CF7 Essentials. The old name said nothing about what the plugin does, and its folder name broke a wordpress.org naming rule.
• New: attachments have a size ceiling — 1 GB by default. Past it, submissions and their mail arrive as normal but the files are no longer copied to the server, and the admin is told. A form that takes uploads is a public endpoint that writes to the disk, and nothing bounded how often it was used. Raise or remove the ceiling with the cf7e_attachment_limit filter.
• New: blocked submissions no longer keep their file uploads. The entry is still stored and still lists what was sent, so a real enquiry caught by mistake can be found — but a caught bot now costs a few kilobytes instead of a megabyte. There is a switch under "Keep blocked submissions" for sites that want the files as well.
• Changed: the Telegram bot token and the Slack and Discord webhook URLs are no longer sent to the browser in full. Every visit to the Notifications page used to carry them across the wire in plain text. They travel masked now; emptying the box removes the stored one, and leaving it alone keeps it.
• Changed: a notification destination shows its settings only while it is switched on.
• Fixed: a personal data export carried the plugin's own bookkeeping keys — including the folder attachments are kept in, and, on sites upgraded from an older version, a signed spam-check token. That file is mailed to whoever asked for it. It now carries only what the visitor answered.
• Fixed: two requests could hold the schema upgrade lock at the same time and run the upgrade together. WordPress core spells add_option() as an INSERT that succeeds for both racers; the lock is a single INSERT IGNORE now.
• Fixed: the CSV export opened its output stream after sending the download headers, so a stream that would not open wrote its error into a half-begun file.