# Changelog

## Score

- CAI 28 → 45 (+17.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 80 (new)
- Architecture 85 (new)
- Maturity 13 → 53 (+39.3)
- Readiness 15 → 26 (+10.2)
- Security 100 → 67 (-33.5)

## Resolved (3)

- Dependency hygiene not measured — no supported dependency manifest was read
- bus factor not measured — no commits were sampled
- single-commit history — no usable git history window to measure hotspots

## New (56)

- Deprecated: Aspire.Dashboard.Sdk.linux-x64
- Deprecated: Aspire.Hosting.AppHost
- Deprecated: Aspire.Hosting.Orchestration.linux-x64
- Deprecated: FluentValidation.AspNetCore
- Deprecated: Microsoft.Extensions.ServiceDiscovery
- Duplicated block (12 lines × 2) (src/CleanArhictecture_2025.Infrastructure/Services/KeycloakService.cs)
- Duplicated block (13 lines × 2) (src/CleanArhictecture_2025.Infrastructure/Services/KeycloakService.cs)
- IL efficiency: 1 authored method(s) exceed the IL budget (src/CleanArhictecture_2025.Application/Employees/EmployeeGetAllQuery.cs)
- Leaked secret: signing-key (src/CleanArhictecture_2025.WebAPI/appsettings.json)
- Medium CVE: KubernetesClient 15.0.1
- Medium CVE: OpenTelemetry.Api 1.9.0
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.9.0
- No ADRs found
- Off the main sequence: CleanArhictecture_2025.ServiceDefaults
- Outdated: Aspire.Hosting.AppHost
- Outdated: FluentValidation.AspNetCore
- Outdated: Keycloak.AuthServices.Authentication
- Outdated: Keycloak.AuthServices.Authorization
- Outdated: Mapster
- Outdated: MediatR
- …and 36 more

## API surface

- 2 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (2)

- GET /odata/employees
- POST /auth/login