# Changelog

## Score

- CAI 58 → 62 (+4.2)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 98 → 98 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 41 → 50 (+9.2)
- Readiness 66 → 66 (+0.0)
- Security 61 → 61 (+0.0)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (3)

- Dependency hygiene not measured — no supported dependency manifest was read
- Off-boarding risk: anonymized user #1
- The eventsourced-postgres README is a stub with only the license and crate links, offering no build/run instructions or usage example. (eventsourced-postgres/README.md)

## New (5)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Off-boarding risk: anonymized user #1
- Scanner failed to run — not a clean result
- The README is a single line with only the crate name and license, missing any description of how Postgres integration works. (eventsourced-postgres/README.md)
- The README is a single-line title and only mentions 'Early support for the CQRS read side' with no license, despite the crate's Apache 2.0 licensing. (eventsourced-projection/README.md)

## Changes since last survey

- 15 commits — 15 feature/other, 0 fixes

## By area

- (repo) — 7 commits
- .github/workflows — 4 commits
- (root) — 3 commits
- .github/dependabot.yml — 1 commit

## Notable commits

- change: Merge pull request #401 from hseeberger/dependabot/github_actions/ci-patches-87c05db967
- change: Merge pull request #402 from hseeberger/dependabot/github_actions/ci-patches-74e2ed4dfa
- change: Merge pull request #404 from hseeberger/dependabot/cargo/cargo-patches-89a57de1b3
- change: Merge pull request #405 from hseeberger/dependabot/github_actions/ci-patch-471cd3f954
- change: Merge pull request #406 from hseeberger/dependabot/github_actions/ci-minor-6b514355f6
- change: Merge pull request #407 from hseeberger/dependabot/cargo/cargo-patch-958d082d10
- change: Merge pull request #408 from hseeberger/dependabot/cargo/cargo-major-acce43d472
- change: build(deps): bump async-nats in the cargo-major group across 1 directory
- change: build(deps): bump the cargo-patch group with 4 updates
- change: build(deps): bump the cargo-patches group across 1 directory with 2 updates
- change: ci(deps): bump MarcoIeni/release-plz-action in the ci-patches group
- change: ci(deps): bump taiki-e/install-action
- change: ci(deps): bump taiki-e/install-action in the ci-patches group
- change: ci(deps): bump the ci-patch group with 2 updates
- change: ci: group dependabot updates by semver level, run weekly