# Changelog

## Score

- CAI 70 → 71 (+0.2)
- Rubric changed (rubric-2026.09.8 → rubric-2026.09.16) — scores are not directly comparable.

## Lenses

- Code Health 88 → 88 (+0.0)
- Architecture 100 → 88 (-11.6)
- Maturity 75 → 75 (+0.1)
- Readiness 76 → 64 (-12.7)
- Security 61 → 70 (+9.5)
- Performance 100 (new)

## Resolved (8)

- High CVE: [CVE redacted] (kotlin-js-store/package-lock.json)
- Hotspot: libraries/apollo-ast/src/commonMain/kotlin/com/apollographql/apollo/ast/internal/ExecutableValidationScope.kt (libraries/apollo-ast/src/commonMain/kotlin/com/apollographql/apollo/ast/internal/ExecutableValidationScope.kt)
- Hotspot: libraries/apollo-ast/src/commonMain/kotlin/com/apollographql/apollo/ast/internal/fields_merging.kt (libraries/apollo-ast/src/commonMain/kotlin/com/apollographql/apollo/ast/internal/fields_merging.kt)
- Hotspot: libraries/apollo-compiler/src/main/kotlin/com/apollographql/apollo/compiler/ir/IrOperationsBuilder.kt (libraries/apollo-compiler/src/main/kotlin/com/apollographql/apollo/compiler/ir/IrOperationsBuilder.kt)
- Hotspot: libraries/apollo-execution/src/commonMain/kotlin/com/apollographql/apollo/execution/internal/OperationContext.kt (libraries/apollo-execution/src/commonMain/kotlin/com/apollographql/apollo/execution/internal/OperationContext.kt)
- Medium CVE: [CVE redacted] (kotlin-js-store/package-lock.json)
- Off-boarding risk: anonymized user #1
- Off-boarding risk: anonymized user #2

## New (12)

- Consequences/trade-offs (e.g. higher context-switch cost for plumbing) and whether coroutines are actually used beyond the interceptor rationale are not visible before the clip (design-docs/Threading.md)
- Documentation: no installation or build instructions (benchmark/README.md)
- Documentation: no usage examples (benchmark/README.md)
- Hotspot: libraries/apollo-gradle-plugin/src/main/kotlin/com/apollographql/apollo/gradle/internal/DefaultApolloExtension.kt (libraries/apollo-gradle-plugin/src/main/kotlin/com/apollographql/apollo/gradle/internal/DefaultApolloExtension.kt)
- Low cohesion: DefaultApolloCompilerRegistry (LCOM4 8) (libraries/apollo-compiler/src/main/kotlin/com/apollographql/apollo/compiler/internal/DefaultApolloCompilerRegistry.kt)
- Off the main sequence: multi-modules-custom-scalar:root
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #1
- Split libraries/apollo-api
- Split libraries/apollo-ast
- Split libraries/apollo-compiler
- Split libraries/apollo-runtime

## Changes since last survey

- 8 commits — 6 feature/other, 2 fixes

## By area

- docs/source — 2 commits
- libraries/apollo-api — 2 commits
- libraries/apollo-ast — 1 commit
- libraries/apollo-compiler — 1 commit
- libraries/apollo-execution — 1 commit
- tests/kotlin-js-store — 1 commit

## Notable commits

- fix: Fix @catch handling of malformed response data (#7027)
- fix: Fix JavaCodegen referencing inexistant symbols (#7031)
- change: Add exposeServiceCapabilities (#7026)
- change: Add guidance to the Garbage Collection doc (#7025)
- change: Bump version to 5.2.1 SNAPSHOT (#7030)
- change: Default to allowing empty selection sets (#7028)
- change: Version is now 5.2.0-SNAPSHOT (#7029)
- change: undeprecate CompiledFragment. (#7024)

## Architecture

- Containers 0 added · 0 removed · contexts 9 added · 1 removed · edges 8 added · 0 removed

## Added bounded contexts (9)

- apollo-api
- apollo-ast
- apollo-compiler
- apollo-execution
- apollo-gradle-plugin
- apollo-normalized-cache
- apollo-normalized-cache-api
- apollo-runtime
- microbenchmark

## Removed bounded contexts (1)

- apollo-tooling

## Added dependency edges (8)

- apollo-compiler → apollo-ast
- apollo-execution → apollo-api (coupling)
- apollo-execution → apollo-ast
- apollo-normalized-cache → apollo-api
- apollo-normalized-cache → apollo-normalized-cache-api (coupling)
- apollo-normalized-cache → apollo-runtime
- apollo-normalized-cache-api → apollo-api
- apollo-runtime → apollo-api (coupling)