# Changelog

## Score

- CAI 37 → 30 (-6.8)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 89 → 89 (+0.6)
- Maturity 51 → 47 (-4.3)
- Readiness 22 → 16 (-5.8)
- Security 43 → 30 (-13.1)

## Resolved (46)

- Build action pinned to a mutable branch
- Change coupling clique: cygwin32.ts, cygwin64.ts, gitBash.ts, powershellCore.ts (tabby-electron/src/shells/cygwin32.ts)
- Critical vulnerability: [GHSA redacted] (web/yarn.lock)
- Dependency hygiene not measured — this repository's dependencies are not NuGet
- FileTooLong: api/baseTerminalTab.component.ts (tabby-terminal/src/api/baseTerminalTab.component.ts)
- FileTooLong: components/splitTab.component.ts (tabby-core/src/components/splitTab.component.ts)
- FileTooLong: session/ssh.ts (tabby-ssh/src/session/ssh.ts)
- Further orphaned files (smaller)
- Further sole-owners (lower concentration)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- …and 26 more

## New (36)

- Boundary-crossing change coupling: serialTab.component.ts ↔ sshTab.component.ts (tabby-serial/src/components/serialTab.component.ts)
- Boundary-crossing change coupling: serialTab.component.ts ↔ telnetTab.component.ts (tabby-serial/src/components/serialTab.component.ts)
- Boundary-crossing change coupling: sftpPanel.component.ts ↔ platform.ts (tabby-ssh/src/components/sftpPanel.component.ts)
- Boundary-crossing change coupling: sshTab.component.ts ↔ telnetTab.component.ts (tabby-ssh/src/components/sshTab.component.ts)
- Change coupling: baseTerminalTab.component.ts ↔ hotkeys.ts (tabby-terminal/src/api/baseTerminalTab.component.ts)
- Change coupling: entry.preload.ts ↔ polyfills.ts (web/entry.preload.ts)
- Change coupling: sshTab.component.ts ↔ config.ts (tabby-ssh/src/components/sshTab.component.ts)
- Critical CVE: [GHSA redacted] (web/yarn.lock)
- Critical CVE: [GHSA redacted] (web/yarn.lock)
- Dimension evaluation failed
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- High CVE: [GHSA redacted] (app/yarn.lock)
- …and 16 more