Dependency bump for the vendored access-control library. Two vendor changes surface in the per-server Access Control tab (?tab=access-control).
What's new for operators
- NEW "Any logged-in user" option in the Who can access dropdown — backed by the new
TYPE_AUTHENTICATEDsentinel inAccessControlManager(allows any authenticated user; denies anonymous). - Relabel: "Everyone (no restriction)" → "Public (no login required)" — pure UI rename.
TYPE_EVERYONEsemantics unchanged, existing rules unaffected.
What's new under the hood
wpboilerplate/wpb-access-control^2.0.0→^3.1.0.- v3.0.0 (crossed in this bump) removed the built-in
BuddyBossProfileTypeProvider+MemberPressMembershipProvider(they moved to a separateacrossai/user-access-proadd-on). This plugin never wired those into the Who can access dropdown, so removal has no visible effect on operators. - Refreshed the stale docblock in
includes/Main.phpthat still listed the two removed providers as built-in defaults. - Rebuilt
build/js/access-control.*against the new vendor JS/SCSS so the new dropdown option and relabelled Public option surface in the compiled admin bundle. - Version bumped in
acrossai-mcp-manager.php,Main.phpACROSSAI_MCP_MANAGER_VERSIONconstant, andREADME.txtStable tag.
Migration
None required — per the v3.1.0 CHANGELOG: "None required. everyone continues to behave identically."