# Changelog

## Score

- CAI 59 → 58 (-1.7)

## Lenses

- Code Health 71 → 62 (-8.5)
- Architecture 96 → 97 (+0.9)
- Maturity 62 → 62 (+0.0)
- Readiness 49 → 48 (-1.1)
- Security 75 → 74 (-1.0)
- Accessibility 78 → 78 (+0.0)
- Performance 73 → 73 (+0.0)

## Resolved (42)

- Critical CVE: [GHSA redacted] (yarn.lock)
- Critical vulnerability: [GHSA redacted] (yarn.lock)
- Documentation: no contributor guidance (README.md)
- Documentation: no usage examples (README.md)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High vulnerability: [GHSA redacted] (yarn.lock)
- Low CVE: [GHSA redacted] (yarn.lock)
- Low CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- …and 22 more

## New (74)

- Deprecated: @humanwhocodes/config-array (yarn.lock)
- Deprecated: @humanwhocodes/object-schema (yarn.lock)
- Deprecated: @ungap/structured-clone (yarn.lock)
- Deprecated: eslint (package.json)
- Deprecated: eslint (yarn.lock)
- Deprecated: eslint (yarn.lock)
- Deprecated: glob (package.json)
- Deprecated: glob (yarn.lock)
- Deprecated: glob (yarn.lock)
- Deprecated: inflight (yarn.lock)
- Deprecated: intersection-observer (yarn.lock)
- Deprecated: rimraf (yarn.lock)
- Deprecated: tsconfck (yarn.lock)
- Deprecated: uuid (yarn.lock)
- Deprecated: whatwg-encoding (yarn.lock)
- FunctionTooLong: stylex-valid-styles.validateStyleValue (packages/@stylexjs/eslint-plugin/src/stylex-valid-styles.js)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- …and 54 more

## Changes since last survey

- 23 commits — 20 feature/other, 3 fixes

## By area

- (root) — 16 commits
- packages/@stylexjs — 6 commits
- packages/docs — 1 commit

## Notable commits

- fix: [babel-plugin] Fix value normalizers rewriting url() contents (#1983)
- fix: fix(docs): match fake cursor to word slide animation on landing page (#1932)
- fix: fix: recognize progress pseudo-elements (#1968)
- change: Bump @storybook/addon-vitest from 9.1.16 to 9.1.21 (#1994)
- change: Bump compression from 1.8.1 to 1.8.2 (#1953)
- change: Bump devalue from 5.9.2 to 5.9.4 (#1942)
- change: Bump fast-uri from 3.1.7 to 3.1.9 (#1987)
- change: Bump hono from 4.13.8 to 4.13.13 (#1971)
- change: Bump ip-address from 10.7.0 to 10.7.4 (#1934)
- change: Bump next from 16.3.3 to 16.3.8 (#1951)
- change: Bump next from 16.3.8 to 16.4.1 (#1993)
- change: Bump postcss-selector-parser from 7.1.4 to 7.1.6 (#1952)
- change: Bump proxy-addr from 2.0.7 to 2.0.8 (#1949)
- change: Bump source-map-js from 1.2.1 to 1.2.2 (#1954)
- change: Bump storybook from 9.1.20 to 9.1.21 (#1984)
- change: Bump vite from 7.3.2 to 7.3.7 (#1972)
- change: Bump webpack-dev-server from 5.2.4 to 5.2.6 (#1781)
- change: Bump zod from 4.3.4 to 4.6.6 (#1992)
- change: [babel-plugin] Sort a defineConsts at-rule key like the at-rule it names (#1989)
- change: [eslint-plugin] Remove empty README section and backtick rule headings (#1995)
- …and 3 more