Gradle 9.5.0

What's new in this version:

Fixed:
- Update AGP versions
- Lazy configuration eager resolution Gradle 9.4+
- Use template-file git ref for permalinks in generated wrapper scripts
- Memoize pluginEntriesFrom to avoid redundant JAR scanning and excessive byte[] allocations
- Investigate how we might "finalize" NamedDomainObjectContainers
- Replace exclusionary terminology (whitelist/blacklist) with inclusive alternatives
- Move `SourceDistributionResolverIntegrationTest` tests that depend on bin and src distribution to smoke tests
- TransformedClassLoader is not thread-safe
- DCL: 1 Binding class with multiple bindings to different targets isn't supported
- Support for accessing property values set in build definition when apply actions are executed
- Inconsistency between `Dependencies` and `DependencyHandler`
- Support declaring project feature apply actions by class
- Move packages to more reasonable non-internal locations
- In DCL runtime, freeze the definition instances or expose them as read-only views to the build logic
- Gradle 9.3.x generates results-generic.bin with wrong permssions
- Provide configuration for daemon toolchains to download JVM in gradle's own build
- Two problems with same ID name but different displayName are not reported correctly in the HTML report
- Copy-button moves out of the screen when exception text doesn't fit the screen
- Unsafe declarative apply actions
- Confusing HTML parameterized test report with one execution
- Accessors are not generated on convention plugins for settings
- Improve Task InputFiles order sensitivity documentation
- Including builds containing Gradle plugins from the command line
- Configuration Cache fails to restore project from included build if it is included on buildscript classpath
- DCL: Failures in resolution prevents Build Scan
- Allow users to specify an explicit bind address to be used for client-daemon communication
- Improve the output of `-h` on the CLI
- Dependency locks warn about changing dependencies even when omitted
- Verify resilient GradleBuild and KotlinDslScriptsModel behaviour with buildSrc and included builds
- Internal CC property naming is inconsistent with others
- Improve test coverage for resilient GradleBuild
- ArtifactCollection can't be deserialised from Configuration Cache when it has failures with typed attributes
- Cannot set version on JPMS module if it has no dependencies
- Document interaction between composite builds and Configuration-on-demand better
- Build fails with class file version error when using Checkstyle and a Java 8 toolchain on Gradle 9
- Remove accessing the`ProjectFeaturesDynamicObject` of a parent project
- (jacocoTestReport) Build failure with JDK 21
- mavenCentral should be defined as mavenContent { releasesOnly() }
- Windows: long path mitigation for JavaExec places everything in classpath
- When Gradle encounters a ZIPException, it doesn't report the filename of the corrupt file, preventing further analysis
- Run Tooling API tests on Java 8
- Add debug logs explaining why the client JVM is not compatible with build requirements
- Manage dependencies using a Version Catalog
- Setting JAR manifest encoding doesn't work with configuration cache
- Automatic modules are not detected when MANIFEST.MF is not the 1st or 2nd entry
- Please review "Cases where composite build substitutions won’t work"
- Use permalink in the generated gradlew file
- Calling .setEnvironmentVariables() throws exception on Windows
- Composite build exception when adding a library module dependency from the second build
- Slow configuration when signing artifacts if the key is configured through gradle properties
- Unclear how properties work in composite builds
- Migrate `assumeTrue` in `GoogleTestSamplesIntegrationTest.groovy` to `@Requires`
- Improve error for dependency substitution in cyclically included build
- Init task should support creating a directory for the new project
- Character encoding issue in `gradle/verification-keyring.keys`
- Lockfile generation is platform dependent.
- Implement gradle wrapper retry distribution downloading in case of failure
- gradlew and `--no-daemon` result in unexpected JVM fork
- The BuildInvocations model should not list any task selectors for included builds
- Allow to use --version --help command line arguments via TAPI
- `gradle[w].bat`/start scripts leak the `CLASSPATH` environment variable into the Java process
- Build VM inconsistently forked
- Write up discovery spec for dynamic look-up in parents
- Upgrade plexus-utils to 3.6.1+ / 4.0.3+ to fix critical Directory Traversal
- Callback behavior of `BuildOperationListener` changed in 9.5.0 RC1
- NoSuchMethodError with Gradle 9.5.0 RC1 and Intellij Idea 2026.1
- `kotlin-dsl` plugin dependency on KGP version has unintentionally been made strict
- Build can fail with a "Unexpected state for resolution: Unknown" error (9.5.0 RC1, RC2)
- Github sample link to samples when they have been moved to snippets
- Update Project Isolation documentation page with current state
- Set a floor for `kotlin-dsl`'s dependency on KGP
- Possible deadlock with workers and included builds
- Extra OSC characters leaking to output in iTerm