Added:
- Version constraint support (`version-constraints` in config) with SemVer matching (exact, ranges, ^, ~, wildcards)
- `/depo tree` command to display per-plugin dependency declarations (shows which plugins declare each dependency, missing status, applied constraint)
- Interactive conflict resolution via `/depo resolve <dep> <ignore|relax|override>`
- Plugin categories grouping in `/depo status` (config `categories:`)
- Download progress output (config `download-progress` with throttled console feedback for larger downloads)
- Soft dependency management: separate optional dependency set, `/depo soft` command (list/install), and `auto-download-soft` config (default false)
- Numbered soft dependency list with multi-select install by indices or names; log hint suggesting `/depo soft list` when optional dependencies are missing

Changed:
- Config version bumped to 4 through staged migrations:
- v2: add `version-constraints` map
- v3: add `categories`, `download-progress`
- v4: add `auto-download-soft`
(Automatic migration preserves existing values and appends new keys.)

Internal:
- Exposed dependency scanning maps & install function for command handlers
- Improved message key auto-merge to preserve user customizations

---

- Platform-aware dependency resolution (Modrinth preferred, Spiget fallback)
- Async scan/download; download queue shown in `/depo status`
- i18n via `messages.yml` (all user-facing texts)
- bStats metrics (configurable service-id)
- Update checker (notify-only)
- Security: option to block non-HTTPS downloads
- Manual downloads: `/depo download direct|github` (+ shortcuts `/depo s`, `/depo dl`)
- Optional SHA-256 checksum validation
- Overrides and aliases support
- Notifications include requiring plugin names
- Persistent install log at `plugins/Depo/installed.log`
- Switched JSON parsing to kotlinx-serialization
- Fix: prevent repeated re-downloads (e.g., Vault) via provides/aliases validation
- Shaded JAR with relocations to avoid classpath conflicts