# Changelog

## Score

- CAI 59 → 55 (-4.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 67 → 67 (-0.1)
- Architecture 70 → 73 (+3.1)
- Maturity 51 → 41 (-10.1)
- Readiness 61 → 61 (+0.0)
- Security 83 → 83 (+0.0)
- Performance 76 → 76 (+0.0)

## Resolved (5)

- Fork-triggerable workflow runs with an unscoped write token
- Off-boarding risk: anonymized user #1
- Off-boarding risk: anonymized user #2
- Orphaned files with no living knowledge
- Workflow token permissions not restricted

## New (6)

- Fork-triggerable workflow runs with an unscoped write token (.github/workflows/pr-branch-labeler.yml)
- ItemValidator.itemError (cognitive 19) (cbor/shared/src/main/scala/fs2/data/cbor/low/internal/ItemValidator.scala)
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted (.github/workflows/ci.yml)
- Workflow token permissions not restricted (.github/workflows/clean.yml)

## Changes since last survey

- 7 commits — 6 feature/other, 1 fixes

## By area

- (repo) — 4 commits
- (root) — 1 commit
- .github/CODE_OF_CONDUCT.md — 1 commit
- project/plugins.sbt — 1 commit

## Notable commits

- fix: Merge pull request #810 from gnieh/fix-cbor-stackoverflow
- change: Add sbt-salad-days
- change: Adopt Typelevel CoC
- change: Merge pull request #814 from scala-steward/update/circe-core-0.14.17
- change: Merge pull request #815 from gnieh/coc-update
- change: Merge pull request #816 from gnieh/sbt-salad-days
- change: Update circe-core, circe-generic, ... to 0.14.17

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)