diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bf91234d..7e6795ef 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -34,12 +34,6 @@ updates:
# jackson-bom >= 2.22.1 (or 2.23.0) lands on Central with full module sync.
- dependency-name: "com.fasterxml.jackson:jackson-bom"
versions: ["2.22.0"]
- # central-publishing-maven-plugin 0.10.0 is a 3-minor jump (0.7 → 0.10) on
- # the plugin that publishes Maven Central artefacts (the v1.6.6 release
- # used 0.7.0). Block this version until the release profile is validated
- # against 0.10.x in a focused PR; remove this entry once that work lands.
- - dependency-name: "org.sonatype.central:central-publishing-maven-plugin"
- versions: ["0.10.0"]
- package-ecosystem: github-actions
directory: "/"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1545fd1c..1a2db633 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -35,6 +35,10 @@ Housekeeping cycle plus the public pixel-level visual-regression API (Track N).
public `com.demcha.compose.testing.*` helpers (`testing.layout` + `testing.visual`)
in addition to the canonical `document` API, so Javadoc regressions on the
testing surface fail fast in CI. No artifact or behaviour change.
+- Bumped `central-publishing-maven-plugin` 0.9.0 → 0.10.0 (the Maven Central
+ publishing plugin) and removed the Dependabot block on 0.10.0; the
+ release-profile build is verified locally and the Central upload is exercised
+ at the next publish.
## v1.6.8 — 2026-06-01
diff --git a/pom.xml b/pom.xml
index 28b7ef6f..24b839be 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,7 +63,7 @@
1.18.9
- 0.9.0
+ 0.10.0
3.15.0
3.6.3
3.2.8