# Changelog

## Score

- CAI 73 → 73 (-0.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 69 → 69 (-0.7)
- Architecture 97 → 100 (+2.9)
- Maturity 73 → 73 (+0.0)
- Readiness 71 → 71 (+0.0)
- Security 92 → 93 (+0.3)

## Resolved (30)

- Build action pinned to a mutable branch
- Change coupling: config.go ↔ port.go (cmd/compose/config.go)
- Change coupling: exec.go ↔ port.go (cmd/compose/exec.go)
- Change coupling: pause.go ↔ restart.go (cmd/compose/pause.go)
- Change coupling: pause.go ↔ start.go (cmd/compose/pause.go)
- Change coupling: pause.go ↔ stop.go (cmd/compose/pause.go)
- Change coupling: port.go ↔ ps.go (cmd/compose/port.go)
- Change coupling: remove.go ↔ stop.go (cmd/compose/remove.go)
- Duplicated block (10 lines × 2) (cmd/compose/completion.go)
- Duplicated block (10 lines × 2) (pkg/compose/observed_state.go)
- Duplicated block (10 lines × 2) (pkg/compose/reconcile.go)
- Duplicated block (11 lines × 2) (cmd/compose/create.go)
- Duplicated block (11 lines × 2) (pkg/compose/pause.go)
- Duplicated block (12 lines × 2) (internal/tracing/wrap.go)
- Duplicated block (14 lines × 2) (pkg/compose/compose.go)
- Duplicated block (14 lines × 2) (pkg/compose/cp.go)
- Duplicated block (14 lines × 2) (pkg/compose/images.go)
- Duplicated block (15 lines × 2) (internal/desktop/client.go)
- Duplicated block (15 lines × 2) (pkg/compose/transform/replace.go)
- Duplicated block (18 lines × 2) (cmd/compose/compose.go)
- …and 10 more

## New (24)

- Duplicated block (10 lines × 2) (cmd/compose/create.go)
- Duplicated block (10 lines × 2) (pkg/compose/pause.go)
- Duplicated block (11 lines × 2) (cmd/compose/completion.go)
- Duplicated block (11 lines × 2) (cmd/compose/pull.go)
- Duplicated block (11 lines × 2) (internal/tracing/wrap.go)
- Duplicated block (12 lines × 2) (pkg/compose/images.go)
- Duplicated block (13 lines × 2) (pkg/compose/compose.go)
- Duplicated block (14 lines × 2) (internal/desktop/client.go)
- Duplicated block (14 lines × 2) (pkg/compose/cp.go)
- Duplicated block (14 lines × 2) (pkg/compose/transform/replace.go)
- Duplicated block (16 lines × 2) (cmd/compose/compose.go)
- Duplicated block (7 lines × 2) (cmd/compose/attach.go)
- Duplicated block (7 lines × 2) (cmd/compose/down.go)
- Duplicated block (7 lines × 2) (cmd/compose/options.go)
- Duplicated block (7 lines × 2) (pkg/compose/reconcile.go)
- Duplicated block (9 lines × 2) (pkg/compose/observed_state.go)
- Hotspot: cmd/compose/config.go (cmd/compose/config.go)
- Hotspot: pkg/remote/oci.go (pkg/remote/oci.go)
- Medium IaC: CKV_DOCKER_3 (Dockerfile)
- Medium IaC: CKV_DOCKER_7 (Dockerfile)
- …and 4 more

## Changes since last survey

- 22 commits — 18 feature/other, 4 fixes

## By area

- (root) — 9 commits
- .github/workflows — 6 commits
- pkg/compose — 2 commits
- cmd/compose — 1 commit
- internal/oci — 1 commit
- pkg/api — 1 commit
- pkg/dryrun — 1 commit
- pkg/e2e — 1 commit

## Notable commits

- fix: fix(config): apply config flags to --services/--volumes/--networks/--models/--hash
- fix: fix(cp): return non-nil Content from dry-run CopyFromContainer
- fix: fix(oci): fetch artifact layers from blobs endpoint, not via Resolve
- fix: fix: tolerate missing env file on scale, watch and shell completion
- change: Dedup pre_start hook images against service and each other
- change: Force-pull pre_start hook images under pull_policy: always
- change: Resolve pre_start hook images alongside service images
- change: build(deps): bump actions/checkout from 7.0.0 to 7.0.1
- change: build(deps): bump actions/stale from 10.4.0 to 11.0.0
- change: build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
- change: build(deps): bump docker/github-builder/.github/workflows/bake.yml
- change: build(deps): bump github.com/moby/buildkit from 0.31.1 to 0.31.2
- change: build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1
- change: build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
- change: bump buildkit v0.32.1
- change: bump buildx v0.36.0 and buildkit v0.32.0
- change: bump compose-go to version v2.14.0
- change: bump go-archive to version v0.3.0
- change: chore(deps): bump github.com/moby/go-archive v0.3.2
- change: chore(deps): github.com/docker/buildx v0.36.0-rc2, buildkit v0.32.0-rc2
- …and 2 more