Updated the required version of verbb/base to 3.0.19.
Fixed
Fixed a medium-severity authentication bypass vulnerability.
4.0.5 2026-09-30
Changed
Require a server-authenticated identity for Basic Auth mappings, use direct connection addresses for IP mappings, and require explicit assurance before automatic login can bypass Craft two-step verification.
Route settings updates through Autologin’s authorized settings controller.
Restrict control panel settings access and updates to administrators, respecting the allowAdminChanges configuration setting.
Fixed
Fixed a high-severity authentication bypass vulnerability.
Prevent automatic login while disabled and for non-active or locked Craft accounts.
4.0.4 2026-09-14
Changed
Updated documentation for clearer, more consistent guidance.
4.0.3 2026-09-13
Changed
Normalize plugin settings.
4.0.2 2026-06-05
Added
Add control panel settings page to manage plugin settings.