# Changelog

## Score

- CAI 49 → 50 (+0.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 76 → 76 (+0.0)
- Architecture 97 → 97 (-0.2)
- Maturity 45 → 45 (+0.0)
- Readiness 38 → 38 (+0.0)
- Security 70 → 78 (+7.9)
- Domain Modelling 100 → 89 (-11.5)
- Event Sourcing 100 → 100 (+0.0)
- Accessibility 59 → 59 (+0.1)

## Resolved (2)

- Dependency hygiene not measured — this repository's dependencies are not NuGet
- Medium vulnerability: [GHSA redacted] (exercise/php/day20/composer.lock)

## New (18)

- Dependency hygiene not measured — no packages were read
- High CVE: [GHSA redacted] (exercise/ts/day11/package-lock.json)
- High CVE: [GHSA redacted] (exercise/ts/day18/package-lock.json)
- High CVE: [GHSA redacted] (exercise/ts/day11/package-lock.json)
- High CVE: [GHSA redacted] (exercise/php/day20/composer.lock)
- Low CVE: [GHSA redacted] (exercise/ts/day02/package-lock.json)
- Low CVE: [GHSA redacted] (exercise/ts/day11/package-lock.json)
- Low CVE: [GHSA redacted] (exercise/ts/day13/package-lock.json)
- Low CVE: [GHSA redacted] (exercise/ts/day18/package-lock.json)
- Low CVE: [GHSA redacted] (exercise/ts/day19/package-lock.json)
- Low CVE: [GHSA redacted] (exercise/ts/day23/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day02/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day11/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day13/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day18/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day19/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day18/package-lock.json)
- Medium CVE: [GHSA redacted] (exercise/ts/day20/package-lock.json)

## API surface

- Unchanged — 2 HTTP endpoints

## Architecture

- Unchanged — 0 containers · 4 contexts · 0 edges