# Changelog

## Score

- CAI 43 → 44 (+1.0)
- Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

## Lenses

- Code Health 55 → 59 (+4.5)
- Architecture 35 → 35 (+0.1)
- Maturity 55 → 54 (-0.3)
- Readiness 46 → 46 (-0.0)
- Security 46 → 51 (+5.2)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 64 → 64 (+0.0)

## Resolved (58)

- Boundary-crossing change coupling: index.ts ↔ index.ts (packages/react/src/components/index.ts)
- Boundary-crossing change coupling: viewStacks.ts ↔ IonRouterOutlet.ts (packages/vue-router/src/viewStacks.ts)
- Change coupling: alert-interface.ts ↔ loading-interface.ts (core/src/components/alert/alert-interface.ts)
- Change coupling: ios.enter.ts ↔ ios.leave.ts (core/src/components/modal/animations/ios.enter.ts)
- Change coupling: loading-interface.ts ↔ loading.tsx (core/src/components/loading/loading-interface.ts)
- Change coupling: loading-interface.ts ↔ toast-interface.ts (core/src/components/loading/loading-interface.ts)
- Change coupling: route-redirect.tsx ↔ route.tsx (core/src/components/route-redirect/route-redirect.tsx)
- Critical CVE: [GHSA redacted] (packages/react/test/apps/react18/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng19/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Critical CVE: [GHSA redacted] (packages/angular/test/apps/ng16/package-lock.json)
- Dependency hygiene not measured — no supported dependency manifest was read
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (core/package-lock.json)
- High CVE: [GHSA redacted] (packages/angular-server/package-lock.json)
- …and 38 more

## New (38)

- Change coupling: datetime-button.tsx ↔ datetime.tsx (core/src/components/datetime-button/datetime-button.tsx)
- Concentrated knowledge decay
- Critical CVE: [GHSA redacted] (package-lock.json)
- Critical CVE: [GHSA redacted] (packages/react/package-lock.json)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High CVE: [GHSA redacted] (packages/vue-router/package-lock.json)
- High CVE: [GHSA redacted] (core/package-lock.json)
- High CVE: [GHSA redacted] (core/package-lock.json)
- High CVE: [GHSA redacted] (packages/angular/package-lock.json)
- High CVE: [GHSA redacted] (packages/angular-server/package-lock.json)
- High CVE: [GHSA redacted] (core/package-lock.json)
- High CVE: [GHSA redacted] (packages/react/package-lock.json)
- High CVE: [GHSA redacted] (packages/angular-server/package-lock.json)
- High CVE: [GHSA redacted] (packages/angular-server/package-lock.json)
- Largest orphaned file (core/src/components/nav/nav.tsx)
- Largest orphaned file (core/src/components/popover/utils.ts)
- Largest orphaned file (core/src/utils/transition/ios.transition.ts)
- Low CVE: [GHSA redacted] (core/package-lock.json)
- Low CVE: [GHSA redacted] (core/package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- …and 18 more

## Changes since last survey

- 12 commits — 8 feature/other, 4 fixes

## By area

- core/src — 4 commits
- .github/workflows — 2 commits
- core/package-lock.json — 2 commits
- packages/angular — 2 commits
- (repo) — 1 commit
- packages/angular-server — 1 commit

## Notable commits

- fix: fix(angular): guard transition against destroyed router outlet (#31297)
- fix: fix(angular-server): fallback to scoped+annotations when SSR DOM lacks attachShadow (#30967)
- fix: fix(modal): keep focus on dialog for cycle sheet modals (#31293)
- fix: fix(select): prevent floating label and placeholder from overlapping when focused (#31276)
- change: chore(): update package lock files
- change: chore(deps): update dependency chalk to v6 (#31299)
- change: chore(deps): update github/codeql-action action to v4.37.3 (#31288)
- change: chore(deps): update playwright (#31298)
- change: ci(github): pin third-party actions to commit SHAs (#31277)
- change: merge release-8.8.15
- change: test(playwright): scope drag selection clear to firefox (#31301)
- change: v8.8.15