# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 37 → 41 (+3.9)
- Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 25 → 36 (+11.0)
- Architecture 61 → 61 (+0.5)
- Maturity 46 → 49 (+3.2)
- Readiness 45 → 54 (+9.5)
- Security 59 → 57 (-1.6)
- Domain Modelling 70 → 60 (-9.7)
- Accessibility 49 → 38 (-11.2)

## Resolved (79)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- …and 59 more

## New (261)

- ActivationResponse.processRunResponseContent (cognitive 16) (common/scala/src/main/scala/org/apache/openwhisk/core/entity/ActivationResult.scala)
- ActivationServiceImpl.fetchActivation (cognitive 18) (core/scheduler/src/main/scala/org/apache/openwhisk/core/scheduler/grpc/ActivationServiceImpl.scala)
- AttachmentSupport.attachToExternalStore (cognitive 17) (common/scala/src/main/scala/org/apache/openwhisk/core/database/AttachmentSupport.scala)
- CallbackModule.emit (cognitive 21) (ansible/callbacks/logformatter.py)
- Change coupling: Packages.scala ↔ PackageCollection.scala (core/controller/src/main/scala/org/apache/openwhisk/core/controller/Packages.scala)
- CommonLoadBalancer.processCompletion (cognitive 22) (core/controller/src/main/scala/org/apache/openwhisk/core/loadBalancer/CommonLoadBalancer.scala)
- ContainerManager.schedule (cognitive 24) (core/scheduler/src/main/scala/org/apache/openwhisk/core/scheduler/container/ContainerManager.scala)
- ContainerPool.receive (cognitive 57) (core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/ContainerPool.scala)
- ContainerPool.receive (cyclomatic 26) (core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/ContainerPool.scala)
- ContainerProxy.initializeAndRun (cognitive 33) (core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/ContainerProxy.scala)
- ContainerProxy.initializeAndRun (cyclomatic 24) (core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/ContainerProxy.scala)
- CouchDBLauncher.run (cognitive 30) (core/standalone/src/main/scala/org/apache/openwhisk/standalone/CouchDBLauncher.scala)
- CouchDbRestStore.attachToCouch (cognitive 33) (common/scala/src/main/scala/org/apache/openwhisk/core/database/CouchDbRestStore.scala)
- DataManagementService.receive (cognitive 31) (common/scala/src/main/scala/org/apache/openwhisk/core/service/DataManagementService.scala)
- DataManagementService.receive (cyclomatic 23) (common/scala/src/main/scala/org/apache/openwhisk/core/service/DataManagementService.scala)
- Dependency hygiene PARTLY measured — Maven/Gradle declarations read, no dependency graph resolved
- DockerContainer.create (cognitive 17) (core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/docker/DockerContainer.scala)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Duplicated block (10 lines × 2) (core/controller/src/main/scala/org/apache/openwhisk/core/controller/ApiUtils.scala)
- …and 241 more

## Changes since last survey

- 4 commits — 3 feature/other, 1 fixes

## By area

- (root) — 3 commits
- ansible/roles — 1 commit

## Notable commits

- fix: Bump zookeeper version to fix apache/openwhisk#5564 (#5565)
- change: Address vulns for netty, logback, httpclient, and jackson (#5585)
- change: Upgrade netty to 4.2.16.Final and micrometer to 1.17.0 for vulns (#5581)
- change: Upgrade netty to 4.2.17.Final and awssdk to 2.54.2 (#5584)