# Changelog

## Score

- CAI 60 → 57 (-2.9)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 94 → 72 (-21.4)
- Architecture 75 → 79 (+3.8)
- Maturity 55 → 50 (-5.2)
- Readiness 52 → 54 (+2.1)
- Security 70 → 64 (-5.6)
- Performance 100 → 100 (+0.0)

## Resolved (3)

- Hotspot: http/src/main/java/org/http4s/blaze/http/parser/BodyAndHeaderParser.java (http/src/main/java/org/http4s/blaze/http/parser/BodyAndHeaderParser.java)
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted

## New (3)

- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted (.github/workflows/ci.yml)
- Workflow token permissions not restricted (.github/workflows/clean.yml)

## Changes since last survey

- 4 commits — 4 feature/other, 0 fixes

## By area

- (repo) — 2 commits
- (root) — 2 commits

## Notable commits

- change: Merge pull request #1081 from http4s/update/series/0.23/circe-generic-0.14.17
- change: Merge pull request #1084 from http4s/update/flake-lock
- change: Update circe-generic to 0.14.17 in series/0.23
- change: flake.lock: Update

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)