# Changelog

## Score

- CAI 57 → 55 (-2.3)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 96 → 73 (-22.2)
- Architecture 100 → 100 (+0.0)
- Maturity 57 → 53 (-3.3)
- Readiness 65 → 67 (+2.5)
- Security 45 → 45 (+0.0)

## Resolved (3)

- Base-context workflow trigger runs with an unscoped token
- Off-boarding risk: anonymized user #1
- Workflow holding a long-lived secret is unscoped

## New (14)

- Base-context workflow trigger runs with an unscoped token (.github/workflows/rebase.yml)
- Off-boarding risk: anonymized user #1
- Orphaned file (src/main/scala/dev/mauch/spark/excel/ExcelFileFormat.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelGenerator.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelHelper.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelInferSchema.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelOptionsTrait.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelParser.scala)
- Orphaned file (src/main/scala/dev/mauch/spark/excel/v2/ExcelScan.scala)
- Workflow holding a long-lived secret is unscoped (.github/workflows/ci.yml)
- Workflow token permissions not restricted (.github/workflows/changelog.yaml)
- Workflow token permissions not restricted (.github/workflows/clean.yml)
- Workflow token permissions not restricted (.github/workflows/dependency-graph.yml)
- Workflow token permissions not restricted (.github/workflows/potential-duplicates.yml)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- (root) — 1 commit

## Notable commits

- change: chore: Update commons-codec from 1.22.1 to 1.23.0 (#1078)