ben-manes/gradle-versions-plugin v0.63.0 on GitHub

Print the latest patch and minor versions in each row, before the latest version, and add them to the JSON and XML reports as available.patch and available.minor (#69, #841, #1118)
Leave the versions Gradle sets for its embedded Kotlin out of the report, with a checkEmbeddedKotlin property to report them (#1110, #1111)
Time out each request of the Gradle update check after 15s, where a request that got no response took about four hours (#1119, #1120)
Drop OkHttp from the plugin's dependencies, and bump Moshi to 1.15.2 so that Okio is past CVE-2023-3635 (#1120)
Stop publishing kotlin-bom and kotlin-stdlib as dependencies of the plugin, so the Kotlin modules on a build script classpath are no longer raised above an older Kotlin Gradle Plugin, or above a strict version pinned by kotlin-dsl (#962, #1112, #1113)
Compile the plugin at Kotlin language version 2.0, so build logic on Gradle 8.4 can use it (#1108, #1109)
Log each configuration that filterConfigurations rejects at info level (#1106)
Write the Kotlin Gradle Plugin and Android Gradle Plugin filters in the README for filterDeclaredConfigurations, so they also apply to the entries merged from included builds (#1104)
Build on Gradle 9.7.1, and run the test suite on every supported JDK (#1105)
Improve build times (#1107)

Important

A row in the plain text report can now include the latest patch and minor versions between the current version and the latest one, as [1.10.18 -> 1.10.19 -> 1.11.5 -> 2.1.6]. The versions in a row are not labeled, so a tool that reads a version by its position in the row has to read available from the JSON or XML report instead.
OkHttp is no longer on the buildscript classpath of a build that applies the plugin. Where OkHttp classes are used in a build script, OkHttp now has to be declared on its buildscript classpath.

Tip

The Kotlin Gradle Plugin can be applied at 1.9 again, so a build pinned to v0.51.0 for the Kotlin 1.x note in the v0.52.0 release notes can upgrade.
The Kotlin Gradle Plugin and Android Gradle Plugin filters in the README are now written for filterDeclaredConfigurations. A rule set on the task that writes the report is applied to the entries merged from included builds as well, but filterConfigurations has to be declared in each build. kotlinBouncyCastleConfiguration was added to the Kotlin set, since it is filled in a project that applies the signing plugin.

Note

kotlin-stdlib, kotlin-reflect and kotlin-scripting-compiler-embeddable are no longer printed at the embedded Kotlin version where they are added by kotlin-dsl or embedded-kotlin, and neither are the kotlin-dsl plugins at the version paired with the running Gradle on a buildscript or settings classpath. The number left out is printed at the end of the plain text report. Set checkEmbeddedKotlin = true to print them, or pass --check-embedded-kotlin for a single run.
The latest patch and minor versions are resolved as the latest version is, so a rejectVersionIf filter or componentSelection rule is called again for each of them.
Credentials from a registered java.net.Authenticator are now sent with the Gradle update check to a host that responds with a 401, or a proxy that responds with a 407. A redirect to another scheme is no longer followed.