# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 50 → 59 (+8.4)

## Lenses

- Code Health 79 → 79 (+0.3)
- Architecture 77 → 78 (+0.8)
- Maturity 58 → 62 (+4.5)
- Readiness 65 → 65 (+0.0)
- Security 53 → 53 (+0.0)
- Accessibility 41 → 66 (+24.3)
- Performance 61 → 61 (+0.0)

## Resolved (31)

- Duplicated block (7 lines × 2) (src/main/java/com/maddyhome/idea/vim/action/change/delete/DeleteJoinVisualLinesAction.kt)
- Duplicated block (7 lines × 2) (src/main/java/com/maddyhome/idea/vim/helper/EditorHelper.java)
- High CVE: [GHSA redacted] (scripts-ts/package-lock.json)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Hotspot: vim-engine/src/main/kotlin/com/maddyhome/idea/vim/handler/MotionActionHandler.kt (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/handler/MotionActionHandler.kt)
- …and 11 more

## New (34)

- Change coupling: VimPluginToggleAction.kt ↔ StatusBar.kt (src/main/java/com/maddyhome/idea/vim/action/VimPluginToggleAction.kt)
- High CVE: [GHSA redacted] (scripts-ts/package-lock.json)
- Off-boarding risk: anonymized user #3
- Off-boarding risk: anonymized user #4
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #1
- Orphaned file (annotation-processors/src/main/kotlin/com/intellij/vim/processors/ExtensionsProcessor.kt)
- Orphaned file (api/src/main/kotlin/com/intellij/vim/api/scopes/editor/ReadScope.kt)
- Orphaned file (src/main/java/com/maddyhome/idea/vim/RegisterActions.kt)
- Orphaned file (src/main/java/com/maddyhome/idea/vim/thinapi/IjJsonExtensionProvider.kt)
- Orphaned file (src/main/java/com/maddyhome/idea/vim/thinapi/IjPluginExtensionsScanner.kt)
- Orphaned file (src/main/java/com/maddyhome/idea/vim/ui/widgets/macro/MacroWidgetFactory.kt)
- Orphaned file (src/main/java/com/maddyhome/idea/vim/ui/widgets/mode/listeners/ModeWidgetListener.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/api/SelectionInfo.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/api/VimCaretBase.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/api/VimCommandLineServiceBase.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/common/Graphemes.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/group/StringUtil.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/regexp/engine/nfa/NFA.kt)
- Orphaned file (vim-engine/src/main/kotlin/com/maddyhome/idea/vim/regexp/engine/nfa/matcher/ColumnMatchers.kt)
- …and 14 more

## Changes since last survey

- 59 commits — 42 feature/other, 17 fixes

## By area

- src/main — 23 commits
- (root) — 12 commits
- src/test — 10 commits
- vim-engine/src — 4 commits
- ideavim-common/build.gradle.kts — 2 commits
- tests/large-file-tests — 2 commits
- tests/ui-rd-tests — 2 commits
- .github/workflows — 1 commit
- gradle/wrapper — 1 commit
- ideavim-common/src — 1 commit
- tests/split-mode-tests — 1 commit

## Notable commits

- fix: Fix incorrect langmap when replaying failed map
- fix: Update changelog: Add clipboard autoselect, fix X11 middle-click paste and NERDTree speed search
- fix: Update changelog: Fix Enter and Esc in popups with no open file
- fix: Update changelog: Fix multiple-cursors I/A and langmap replay
- fix: Update changelog: Fix scrolloff=999 and sticky lines issues
- fix: Update changelog: Visual selection of end of line, Rider expand selection fix
- fix: VIM-4228 Fix Rider tests compilation on 2025.3
- fix: VIM-4329 fix scrolloff=999 behavior with cc
- fix: VIM-4329 fix scrolloff=999 behavior with doc comments
- fix: VIM-4329 fix scrolloff=999 behavior with sticky lines
- fix: fix 'D' on empty(only new line char) visual line
- fix: fix 'zf' collapse next line in visual mode
- fix: fix none selction on toggling visual form select mode on empty line and test for supporting selecting new line char
- fix: fix(VIM-2200): Keep the output of a command run from the command-line window
- fix: fixed caret resting on new line char
- fix: fixed getRange for character wise selection
- fix: vim-paragraph-motion test fix and other selection test fix
- change: Bump gradle-wrapper from 9.8.0 to 9.8.1
- change: Bump org.junit.vintage:junit-vintage-engine from 6.1.2 to 6.1.3
- change: Drop dependencies on the removed Rhizome kernel modules
- …and 39 more

## Architecture

- Unchanged — 0 containers · 8 contexts · 7 edges