php 8.4+ compatibility fixes Rename option "Password check types" to "New password validation rules" Add "On login; consider known-bad passwords as compromised" option (default false) Add new password validation rule "Prevent passwords which contain the user's email or username, and the site's domain/name." (default false)
Fix javascript error when using XF2.3
Add "Force password reset on compromised password" option This option is likely overkill for most sites and is not generally recommended
