# Changelog

## Score

- CAI 53 → 44 (-9.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 98 → 99 (+1.0)
- Architecture 100 → 94 (-5.9)
- Maturity 58 → 52 (-5.3)
- Readiness 61 → 32 (-28.6)
- Security 36 → 35 (-0.7)

## Resolved (9)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Duplicated block (16 lines × 2) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/reporter/HtmlReporter.kt)
- Further orphaned files (smaller)
- HtmlReporter.writeGradleUpdates (cyclomatic 16) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/reporter/HtmlReporter.kt)
- Off-boarding risk: anonymized user #1
- PlainTextReporter.writeGradleUpdates (cyclomatic 16) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/reporter/PlainTextReporter.kt)
- Resolver.resolveProjectUrl (cognitive 23) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/updates/Resolver.kt)
- The 'Publish the latest version of the plugin to mavenLocal()' section appears in the outline but is not shown in the clipped body; it may be an unimplemented command or omitted from the visible content. (README.md)

## New (5)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Duplicated block (17 lines × 2) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/reporter/HtmlReporter.kt)
- Duplicated block (20 lines × 2) (gradle-versions-plugin/src/main/kotlin/com/github/benmanes/gradle/versions/reporter/PlainTextReporter.kt)
- No tests found

## Changes since last survey

- 25 commits — 15 feature/other, 10 fixes

## By area

- gradle-versions-plugin/src — 16 commits
- (root) — 6 commits
- .github/workflows — 2 commits
- examples/html-report.png — 1 commit

## Notable commits

- fix: Accept an untyped Kotlin DSL lambda in the component selection rules (fixes #941) (#1058)
- fix: Bound a module by the version constraints its platforms state (fixes #402, fixes #755) (#1060)
- fix: Name the configuration a dependency was declared directly against (fixes #1055)
- fix: Report a module published only as a snapshot as up to date (fixes #475) (#1034)
- fix: Report the version a resolution found even when another one failed (fixes #1050) (#1052)
- fix: Report the version that actually failed to resolve (fixes 1043) (#1044)
- fix: Skip a refused plugin mark, collect the partials, and aggregate a fallback publisher (fixes #1046, #1047, #1048, #1049) (#1051)
- fix: Skip the buildscript of a project that declares no repository (fixes #756)
- fix: Write the partial results under the project that aggregates them (fixes #1040) (#1041)
- fix: fix: honor the build's log level in the reporters (fixes #278, #388, #726) (#1033)
- change: Add a contributing guide and verify the release version on deploy (#1042)
- change: Align the migration section's alerts with the release notes convention
- change: Apply the settings plugin from an init script (#1027)
- change: Docs: describe the v0.58.0 migration
- change: Docs: regenerate the HTML report screenshot
- change: Name the projects behind a coordinate that resolves to more than one version (#1035)
- change: Prepare the 0.59.0 release (#1053)
- change: Prepare the v0.58.0 release
- change: Recover a plugin marker's declared bound from the version catalog (#755)
- change: Reject versions outside the version bound the build declared (#1059)
- …and 5 more