# Changelog

## Baseline

- First survey — no prior run to compare against. CAI 45.

## Lenses

- Code Health 69
- Architecture 95
- Maturity 69
- Readiness 36
- Security 33

## Changes since last survey

- 300 commits — 270 feature/other, 30 fixes

## By area

- updater/lib — 43 commits
- common/lib — 34 commits
- npm_and_yarn/helpers — 32 commits
- bun/helpers — 17 commits
- (root) — 14 commits
- python/lib — 12 commits
- npm_and_yarn/lib — 10 commits
- nuget/helpers — 10 commits
- maven/lib — 6 commits
- python/helpers — 6 commits
- cargo/lib — 5 commits
- docker/lib — 5 commits
- npm_and_yarn/spec — 5 commits
- updater/spec — 5 commits
- vcpkg/lib — 5 commits
- cargo/spec — 4 commits
- github_actions/lib — 4 commits
- gradle/Dockerfile — 4 commits
- pre_commit/lib — 4 commits
- uv/Dockerfile — 4 commits

## Notable commits

- fix: Add uv grapher regression test for versionless back-references (#15259) (#15778)
- fix: Address review feedback on vcpkg version comparison and fix resolution
- fix: Compute npm audit fix tree on a fresh Arborist instance (#15514)
- fix: Draft fix for path dependency not reachable
- fix: Fix Docker cooldown not respected for multi-arch images missing Last-Modified (#15486)
- fix: Fix Gradle lockfile updates for repos with in-repo convention plugins (#15677)
- fix: Fix RuboCop offenses
- fix: Fix UV DependencyGrapher to detect nested uv.lock in monorepos (#15520)
- fix: Fix codespell typo in updater job spec (#15599)
- fix: Fix gemspec infrastructure updates
- fix: Fix npm ignoring scoped registry issue (#15692)
- fix: Fix pnpm 11 peer dependency checks
- fix: Fix security update jobs failing with dependency_file_not_found for single-directory manifests (#15658)
- fix: Fix some comments that still refer to degraded
- fix: Fix type boundaries in Gradle, Swift, and pre_commit
- fix: Fix typed source validation
- fix: Merge branch 'main' into fix-actions-cooldown-precision-regression
- fix: Merge pull request #15746 from theinfosecguy/fix-dotnet-sdk-preview-version
- fix: Merge pull request #15760 from dependabot/fix-actions-cooldown-precision-regression
- fix: Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError (#15701)
- …and 280 more