# Changelog

## Score

- CAI 49 → 44 (-4.4)

## Lenses

- Code Health 33 → 32 (-1.8)
- Architecture 80 → 69 (-10.5)
- Maturity 74 → 76 (+2.5)
- Readiness 48 → 43 (-5.4)
- Security 80 → 79 (-1.3)
- Performance 60 (new)

## Resolved (31)

- (anonymous) (cognitive 47) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cognitive 59) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cyclomatic 37) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cyclomatic 51) (extensions/pr-artifact-explorer/assets/app.js)
- ClassTooLong: InstructionsCatalog (website/src/components/brand/InstructionsCatalog.tsx)
- Documentation: no installation or build instructions (extensions/repo-actions-hub/README.md)
- FileTooLong: brand/InstructionsCatalog.tsx (website/src/components/brand/InstructionsCatalog.tsx)
- FunctionTooLong: cache.downloadArchive (extensions/pr-artifact-explorer/cache.mjs)
- Hotspot: skills/daily-focus-board/assets/board.template.html (skills/daily-focus-board/assets/board.template.html)
- Hotspot: skills/daily-focus-board/examples/sample-board.html (skills/daily-focus-board/examples/sample-board.html)
- Job-level write token spans steps that do not need it
- Medium CVE: [GHSA redacted] (package-lock.json)
- Off-boarding risk: anonymized user #1
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #3
- Off-boarding risk: anonymized user #4
- Off-boarding risk: anonymized user #5
- Off-boarding risk: anonymized user #6
- The parameter 'method' is named after its type 'MethodDefinition'. The parameter 'typeDef' is an abbreviation for 'TypeDefinition'. The parameter 'handle' is generic. This is a mix of full type name and abbreviation. 'typeDef' is a common abbreviation, but 'method' is not abbreviated to 'methodDef'. This is a minor style inconsistency. However, 'method' is often used as a short name for 'MethodDefinition' in metadata contexts. 'typeDef' is also common. This is a style preference, not a semantic inconsistency.
- The parameter name 'handle' is used for different specific metadata handle types (TypeReferenceHandle, EntityHandle, TypeDefinitionHandle, TypeSpecificationHandle). While 'handle' is a generic term, in a context where specific handle types are distinct concepts, using the specific type name (e.g., 'typeRefHandle', 'entityHandle') or a more descriptive name improves clarity. However, since 'handle' is a standard convention for these Roslyn/MetadataReader parameters and they are distinct types, this is a minor style observation rather than a semantic inconsistency. Given the strict definition of 'same concept', these are different concepts (different handle types), so this is NOT an inconsistency.
- …and 11 more

## New (723)

- (anonymous) (cognitive 16) (extensions/foundry-agentic-loop-canvas/public/deck.js)
- (anonymous) (cognitive 21) (.github/extensions/duplicate-review-board/lib/state.mjs)
- (anonymous) (cognitive 29) (extensions/foundry-agentic-loop-canvas/public/app.js)
- (anonymous) (cognitive 33) (extensions/foundry-agentic-loop-canvas/public/app.js)
- (anonymous) (cognitive 70) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cognitive 70) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cyclomatic 17) (extensions/foundry-agentic-loop-canvas/public/deck.js)
- (anonymous) (cyclomatic 21) (.github/extensions/duplicate-review-board/lib/state.mjs)
- (anonymous) (cyclomatic 21) (extensions/foundry-agentic-loop-canvas/public/deck.js)
- (anonymous) (cyclomatic 25) (extensions/foundry-agentic-loop-canvas/public/app.js)
- (anonymous) (cyclomatic 28) (extensions/foundry-agentic-loop-canvas/public/app.js)
- (anonymous) (cyclomatic 54) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous) (cyclomatic 61) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous).trackable (cognitive 21) (extensions/pr-artifact-explorer/assets/app.js)
- (anonymous).trackable (cyclomatic 24) (extensions/pr-artifact-explorer/assets/app.js)
- BeginEndRule._getCachedCompiledPatterns (cognitive 16) (extensions/github-security/extension.mjs)
- CatalogResourceSizeControl.CatalogResourceSizeControl (cyclomatic 17) (website/src/components/brand/CatalogResourceSizeControl.tsx)
- Change coupling: state.mjs ↔ app.js (.github/extensions/open-pr-board/lib/state.mjs)
- Classify ADR enforcement: 7400-Series Logic ICs Specification (skills/legacy-circuit-mockups/references/7400-series.md)
- Classify ADR enforcement: MOS Technology 6502 Microprocessor Specification (skills/legacy-circuit-mockups/references/6502.md)
- …and 703 more

## Changes since last survey

- 279 commits — 222 feature/other, 57 fixes

## By area

- (repo) — 95 commits
- .github/extensions — 43 commits
- .github/plugin — 25 commits
- website/src — 21 commits
- extensions/foundry-agentic-loop-canvas — 16 commits
- extensions/foundry-agentic-loop-workflow — 11 commits
- extensions/pr-artifact-explorer — 6 commits
- (root) — 5 commits
- extensions/ai-credits-breakdown — 5 commits
- skills/foundry-agentic-loop — 5 commits
- skills/markdown-to-word-mermaid — 5 commits
- docs/README.skills.md — 4 commits
- skills/pr-address-feedback — 4 commits
- extensions/github-security — 3 commits
- extensions/signals-dashboard — 3 commits
- instructions/sql-server-safe-tsql.instructions.md — 3 commits
- cookbook/copilot-sdk — 2 commits
- extensions/sentry-triage — 2 commits
- skills/azure-logic-apps-standard-cli — 2 commits
- skills/java-add-graalvm-native-image-support — 2 commits

## Notable commits

- fix: Fix Java collection and JDBC batching guidance
- fix: Fix Java skill review examples and native scope boundaries
- fix: Fix Open PR board GraphQL 502 refresh
- fix: Fix VS Code install accessible names
- fix: Fix codespell: unparsable
- fix: Fix launchPreferences resolution in open function
- fix: Merge branch 'main' into fix/independent-desk-sessions
- fix: Merge pull request #5195 from jennyf19/fix/independent-desk-sessions
- fix: Merge pull request #5201 from github/aaronpowell-fix-open-prs-graphql-reload
- fix: Merge pull request #5202 from github/aaronpowell-fix-plugin-localized-pages
- fix: fix main merge: AgentsCatalog pages by pageSize again
- fix: fix(boards): keep refreshed previews and approvals commit-safe
- fix: fix(boards): reject stale feedback and out-of-order details
- fix: fix(boards): retain approval commit provenance across refreshes
- fix: fix(canvas): authorize registered localhost handoffs
- fix: fix(canvas): bound handoff transport and preserve diagnostics
- fix: fix(canvas): bound reads and preserve live review updates
- fix: fix(canvas): bound reviews and reconcile shared lifecycle
- fix: fix(canvas): classify expected notices across handoff capture
- fix: fix(canvas): coordinate scans and qualify child evidence
- …and 259 more

## Architecture

- Unchanged — 0 containers · 1 contexts · 0 edges