# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 35 → 35 (+0.6)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 96 → 94 (-1.9)
- Architecture 100 → 100 (+0.0)
- Maturity 47 → 52 (+5.1)
- Readiness 30 → 30 (+0.0)
- Security 61 → 60 (-0.7)
- Domain Modelling 63 → 63 (+0.0)
- Accessibility 21 → 21 (+0.0)

## Resolved (16)

- Dormant codebase
- Duplicated block (10 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (10 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (10 lines × 2) (src/main/java/org/eclipse/cargotracker/interfaces/booking/web/ChangeArrivalDeadlineDialog.java)
- Duplicated block (11 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (13 lines × 2) (src/main/java/org/eclipse/cargotracker/interfaces/booking/facade/internal/assembler/CargoStatusDtoAssembler.java)
- Duplicated block (17 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (8 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- High IaC: DS-0002 (Dockerfile)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Largest orphaned file (src/main/webapp/resources/leaflet/leaflet-src.esm.js)
- Largest orphaned file (src/main/webapp/resources/leaflet/leaflet-src.js)
- The Getting Started section gives only the cargo:run command without explaining what cargo:run does or how Cargo fits into the application lifecycle. (README.md)
- dormant codebase — no living knowledge left to concentrate

## New (22)

- Duplicated block (10 lines × 3) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (12 lines × 2) (src/main/java/org/eclipse/cargotracker/interfaces/booking/facade/internal/assembler/CargoStatusDtoAssembler.java)
- Duplicated block (16 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (7 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (8 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (8 lines × 2) (src/main/java/org/eclipse/cargotracker/interfaces/booking/web/ChangeArrivalDeadlineDialog.java)
- Duplicated block (8 lines × 3) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (9 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (9 lines × 2) (src/main/java/org/eclipse/cargotracker/application/util/SampleDataGenerator.java)
- Duplicated block (9 lines × 2) (src/main/java/org/eclipse/cargotracker/domain/model/cargo/Itinerary.java)
- Further orphaned files (smaller)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Medium IaC: CKV_DOCKER_3 (Dockerfile)
- Medium IaC: CKV_K8S_21 (cargo-tracker.yml)
- Medium IaC: CKV_K8S_21 (cargo-tracker.yml)
- Medium IaC: CKV_K8S_21 (postgres.yml)
- Medium IaC: CKV_K8S_37 (cargo-tracker.yml)
- …and 2 more

## Changes since last survey

- 47 commits — 45 feature/other, 2 fixes

## By area

- src/main — 28 commits
- .github/workflows — 8 commits
- (root) — 6 commits
- src/test — 3 commits
- (repo) — 1 commit
- .mvn/wrapper — 1 commit

## Notable commits

- fix: Fix bug
- fix: Fix nightly GlassFish build: override jersey-media-multipart milestone dep
- change: Add unit tests
- change: Apply formatting
- change: Apply google-java-format
- change: Apply google-java-format 1.18.1 and enforce formatting in CI
- change: Auto-commit formatting changes back to master
- change: Bump Maven wrapper distribution to 3.9.16
- change: Bump actions to Node 24 versions: checkout@v7, setup-java@v5, cache@v6
- change: Bump actions/checkout, setup-java, cache to v4
- change: Clean up exception handling
- change: Fix formatting job: download google-java-format 1.18.1 directly, bypassing broken action
- change: Fix formatting job: pin google-java-format 1.18.1 (compatible with Java 17)
- change: Fix formatting job: use Java 21 for google-java-format compatibility
- change: Improve code
- change: Merge pull request #341 from eclipse-ee4j/dependabot/maven/org.assertj-assertj-core-3.27.7
- change: Modernize code
- change: Modernize code
- change: Modernize code
- change: Modernize code
- …and 27 more