# Changelog

## Score

- CAI 61 → 62 (+1.2)

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 56 → 61 (+4.6)
- Readiness 72 → 72 (+0.0)
- Security 49 → 49 (+0.0)
- Event Sourcing 100 → 100 (+0.0)

## Resolved (3)

- PR-triggered workflow without a permissions block
- Release-publishing job runs with an unscoped token
- Workflow holding a long-lived secret is unscoped

## New (5)

- PR-triggered workflow without a permissions block (.github/workflows/lux.yml)
- PR-triggered workflow without a permissions block (.github/workflows/main.yml)
- Release-publishing job runs with an unscoped token (.github/workflows/release.yaml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/hex_pub.yml)
- Workflow token permissions not restricted (.github/workflows/asan.yml)

## Changes since last survey

- 1 commits — 0 feature/other, 1 fixes

## By area

- c_src/quicer_connection.c — 1 commit

## Notable commits

- fix: fix: clean up allocation failures and closed datagram sends