# Changelog

## Score

- CAI 55 → 55 (+0.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 81 → 81 (-0.2)
- Architecture 82 → 82 (+0.0)
- Maturity 72 → 72 (+0.0)
- Readiness 47 → 48 (+0.9)
- Security 48 → 48 (+0.0)
- Performance 71 → 71 (+0.0)

## Resolved (14)

- High CVE: MessagePack 2.5.192
- High CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1

## New (22)

- CommentedOutCode (02-CleanArchitecture/tests/OrderDemo.CleanArch.FunctionalTests/CustomWebApplicationFactory.cs)
- CommentedOutCode (02-CleanArchitecture/tests/OrderDemo.CleanArch.FunctionalTests/CustomWebApplicationFactory.cs)
- High CVE: MessagePack 2.5.192
- High CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: MessagePack 2.5.192
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1
- Medium CVE: OpenTelemetry.Exporter.OpenTelemetryProtocol 1.13.1
- NoWarnInCsproj (02-CleanArchitecture/Directory.Build.props)
- NoWarnInCsproj (05-CleanVertical/Directory.Build.props)
- Shell project: Nimble.Modulith.Email.Contracts (04-Microservices/src/Nimble.Modulith.Email.Contracts/Nimble.Modulith.Email.Contracts.csproj)
- Shell project: Nimble.Modulith.Reporting.Contracts (04-Microservices/src/Nimble.Modulith.Reporting.Contracts/Nimble.Modulith.Reporting.Contracts.csproj)
- …and 2 more

## API surface

- Unchanged — 10 HTTP endpoints