# Changelog

## Score

- CAI 42 → 42 (+0.6)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 38 → 40 (+1.2)
- Architecture 69 → 67 (-2.5)
- Maturity 62 → 61 (-1.6)
- Readiness 52 → 53 (+0.3)
- Security 82 → 81 (-1.5)
- Accessibility 33 → 33 (+0.0)
- Performance 85 (new)

## Resolved (10)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no architecture or design documentation (README.md)
- High CVE: [GHSA redacted] (package-lock.json)
- Hotspot: build.mjs (build.mjs)
- Hotspot: src/background/index.mjs (src/background/index.mjs)
- Hotspot: src/content-script/index.jsx (src/content-script/index.jsx)
- Hotspot: src/popup/sections/GeneralPart.jsx (src/popup/sections/GeneralPart.jsx)
- Hotspot: src/popup/sections/api-modes-provider-utils.mjs (src/popup/sections/api-modes-provider-utils.mjs)
- Hotspot: src/utils/model-name-convert.mjs (src/utils/model-name-convert.mjs)
- Off-boarding risk: anonymized user #1

## New (36)

- FunctionTooLong: index.Browser.runtime.onMessage.addListener() (src/background/index.mjs)
- High CVE: [CVE redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Off-boarding risk: anonymized user #1
- Orphaned files with no living knowledge
- Outdated (npm): @babel/runtime
- Outdated (npm): @noble/hashes
- Outdated (npm): @picocss/pico
- Outdated (npm): @primer/octicons-react
- Outdated (npm): countries-list
- Outdated (npm): i18next
- Outdated (npm): js-sha3
- Outdated (npm): katex
- Outdated (npm): parse5
- Outdated (npm): preact
- Outdated (npm): react
- …and 16 more

## Changes since last survey

- 14 commits — 14 feature/other, 0 fixes

## By area

- badges/coverage.json — 6 commits
- tests/unit — 3 commits
- .github/workflows — 2 commits
- tests/setup — 2 commits
- src/services — 1 commit

## Notable commits

- change: Add Anthropic Claude Opus 5.5 API support (#1089)
- change: Add Anthropic Claude Sonnet 5.5 API support (#1097)
- change: Add OpenAI GPT-6 Sol and GPT-6 Luna model (#1090)
- change: Add OpenAI GPT-6.1 Sol support (#1098)
- change: Dispose conversation-owned transports on unmount (#1083)
- change: Update coverage badge [skip ci]
- change: Update coverage badge [skip ci]
- change: Update coverage badge [skip ci]
- change: Update coverage badge [skip ci]
- change: Update coverage badge [skip ci]
- change: Update coverage badge [skip ci]
- change: Update pullfrog CI Action from v0.1.81 to v0.1.84 (#1092)
- change: Verify floating toolbar subscription cleanup with real hooks (#1080)
- change: chore(deps): bump pullfrog/pullfrog from 0.1.78 to 0.1.81 (#1088)