Changelog / BuddyPress Hashtags Version 3.5.4 Version 3.5.4 January 29, 2026 Patch BuddyPress Hashtags What's Changed Fix Remove unsafe id attributes from hashtag links for improved security Fix Allow two-letter hashtags by reducing minimum length to 2 Fix npm security vulnerabilities with dependency overrides