1.2.8.3 - 5 October 2026 * New: Added \"Alternative Assets\" to the CSS/JS Manager. Create and edit lighter alternatives for CSS and JavaScript assets that still need to load, choose where the alternatives are used, and compare their sizes without modifying the original source. * Improvement: Reduced redundant processing during Combine CSS/JS cache validation and avoided unnecessary cache rebuilds when separate inline JavaScript, JSON content, or CSP nonce values change. * Improvement: Import/Export preserves Pro settings and rules when transferred through Lite, ready for use after upgrading to Pro. * Fix: Improved Combine CSS/JS reliability, including asset ordering, cache invalidation, regeneration of missing combined files, and homepage cache cleanup. * Fix: Improved JavaScript combining and BODY defer handling to preserve script execution order and existing defer behavior while safely applying defer to eligible BODY scripts. 1.2.8.2 - 28 September 2026 * Added: Roll back Asset CleanUp Pro to an eligible previous version from \"Tools\" (plugin\'s menu) - \"Rollback\", with version selection and confirmation before installation. Existing settings are preserved. * Security — Admin Bar: Fixed a reflected cross-site scripting (XSS) vulnerability in the admin bar by validating asset unload parameters and escaping dynamic output (CVE-2026-92236). Reported by \'Huseyn (mekhatai) Gadashov\' via Wordfence. * Security — Comment Content XSS: Completed the fix for the stored cross-site scripting via comment content (follow-up to CVE-2026-13354). The final cleanup of the plugin\'s temporary `data-wpacu-*` attributes on `