# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 67 → 70 (+2.9)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 78 → 85 (+7.1)
- Architecture 74 → 74 (-0.0)
- Maturity 73 → 74 (+1.3)
- Readiness 64 → 63 (-0.9)
- Security 63 → 75 (+11.9)
- Domain Modelling 80 → 80 (+0.0)
- Event-Driven 100 → 100 (+0.0)
- Performance 80 → 80 (+0.0)

## Resolved (63)

- Change coupling: StreamEnumerableMessageArgumentResolver.cs ↔ SubscribedMethodInvoker.cs (src/Silverback.Core/Messaging/Subscribers/ArgumentResolvers/StreamEnumerableMessageArgumentResolver.cs)
- Coverage not measured — analyzer environment
- Dead code: ReturningInt (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningObject (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningTask (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningTaskWithIntResult (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningTaskWithObjectResult (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningValueTask (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningValueTaskWithIntResult (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- Dead code: ReturningValueTaskWithObjectResult (tests/Silverback.Core.Tests/Messaging/Subscribers/MethodReturnTypeTests.cs)
- High CVE: SQLitePCLRaw.lib.e_sqlite3 2.1.11
- High: security finding (details withheld)
- High: security finding (details withheld)
- IL efficiency: 15 authored method(s) exceed the IL budget (tools/Silverback.Tools.Generators.KafkaConfigProxies/DocumentationProvider.cs)
- Off-boarding risk: anonymized user #1
- Orphaned knowledge (src/Silverback.Core/Configuration/SilverbackBuilder.AddSubscriber.cs)
- Orphaned knowledge (src/Silverback.Integration/Messaging/Publishing/IIntegrationPublisher.cs)
- Outdated: Confluent.Kafka
- Outdated: Confluent.SchemaRegistry
- Outdated: Confluent.SchemaRegistry.Serdes.Avro
- …and 43 more

## New (36)

- BarePragmaDisable (src/Silverback.Integration.Kafka.Testing/Messaging/Serialization/MockedConfluentSchemaRegistryClient.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/BrokerStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/ConsumerGroupStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/ExactlyOnceSemanticsStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/KafkaStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/PartitionStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/TopicPartitions.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/TopicStatistics.cs)
- BarePragmaDisable (src/Silverback.Integration.Kafka/Messaging/Broker/Callbacks/Statistics/WindowStatistics.cs)
- BarePragmaDisable (tests/Silverback.Integration.MQTT.Tests/Messaging/Configuration/Mqtt/MqttClientConfigurationTests.cs)
- BarePragmaDisable (tests/Silverback.Integration.MQTT.Tests/Messaging/Messages/MqttHeadersMappingExtensionsTests.cs)
- Coverage not measured — analyzer environment
- IL efficiency: 13 authored method(s) exceed the IL budget (tools/Silverback.Tools.Generators.KafkaConfigProxies/DocumentationProvider.cs)
- Low cohesion: KafkaProducerConfigurationBuilder (LCOM4 7) (src/Silverback.Integration.Kafka/Messaging/Configuration/Kafka/KafkaProducerConfigurationBuilder.cs)
- NoWarnInCsproj (Directory.Build.props)
- NoWarnInCsproj (Directory.Build.props)
- NoWarnInCsproj (Directory.Build.props)
- NoWarnInCsproj (Directory.Packages.props)
- NoWarnInCsproj (benchmarks/Directory.Packages.props)
- NoWarnInCsproj (samples/Directory.Packages.props)
- …and 16 more

## Changes since last survey

- 9 commits — 5 feature/other, 4 fixes

## By area

- (root) — 4 commits
- src/Silverback.Integration.Kafka — 1 commit
- src/Silverback.Integration.Kafka.Testing — 1 commit
- src/Silverback.Integration.MQTT — 1 commit
- src/Silverback.Storage.EntityFramework — 1 commit
- tests/Silverback.Integration.Kafka.Testing.Tests — 1 commit

## Notable commits

- fix: fix: enhance rebalance logic and add comprehensive tests for partition assignments
- fix: fix: handle completed tasks correctly in PublisherConsumerBehavior logic
- fix: fix: prevent race condition in batch sequence initialization
- fix: fix: resolve rebalance race condition in MockedConfluentConsumer
- change: chore: release v5.4.0
- change: chore: update dependencies
- change: feat: upgrade to Confluent.Kafka 2.15.0
- change: feat: upgrade to MQTTnet 5.2.0
- change: refactor: align broker clients configuration builder extension class names

## API surface

- Unchanged — 2 HTTP endpoints
