# Changelog

## Score

- CAI 65 → 61 (-3.8)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 97 → 72 (-25.3)
- Architecture 100 → 100 (+0.0)
- Maturity 57 → 52 (-4.9)
- Readiness 59 → 59 (+0.0)
- Security 72 → 80 (+7.6)

## Resolved (2)

- PR-triggered workflow without a permissions block
- Workflow holding a long-lived secret is unscoped

## New (5)

- PR-triggered workflow without a permissions block (.github/workflows/phpunit-ci-coverage.yml)
- PR-triggered workflow without a permissions block (.github/workflows/prettier.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/force-release.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/release.yml)
- Workflow token permissions not restricted (.github/workflows/translation-progress.yml)

## Changes since last survey

- 5 commits — 5 feature/other, 0 fixes

## By area

- src/demo — 2 commits
- src/translations.php — 2 commits
- (root) — 1 commit

## Notable commits

- change: Add GitHub Actions workflow generator to demo site (#927)
- change: demo: tabbed deployment interface (#949)
- change: docs(readme): Update translation progress
- change: feat: Added Filipino translations (#945)
- change: fix(i18n): correct Hindi and Bhojpuri spelling and word order (#942)