# Changelog

## Score

- CAI 40 → 37 (-3.3)

## Lenses

- Code Health 36 → 34 (-2.4)
- Architecture 63 → 60 (-3.1)
- Maturity 83 → 82 (-0.5)
- Readiness 43 → 42 (-0.4)
- Security 47 → 47 (-0.0)
- Accessibility 36 → 30 (-5.7)
- Performance 60 → 60 (+0.0)

## Resolved (24)

- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- Hotspot: lib/db/notion/filterCollectionViewData.js (lib/db/notion/filterCollectionViewData.js)
- Hotspot: themes/claude/components/NavBar.js (themes/claude/components/NavBar.js)
- Hotspot: themes/claude/components/SocialButton.js (themes/claude/components/SocialButton.js)
- Hotspot: themes/endspace/components/MobileNav.js (themes/endspace/components/MobileNav.js)
- Hotspot: themes/endspace/components/SideNav.js (themes/endspace/components/SideNav.js)
- Hotspot: themes/fukasawa/components/SocialButton.js (themes/fukasawa/components/SocialButton.js)
- Hotspot: themes/gitbook/components/SocialButton.js (themes/gitbook/components/SocialButton.js)
- Hotspot: themes/heo/index.js (themes/heo/index.js)
- Hotspot: themes/hexo/components/SocialButton.js (themes/hexo/components/SocialButton.js)
- Hotspot: themes/hexo/index.js (themes/hexo/index.js)
- Hotspot: themes/magzine/components/SocialButton.js (themes/magzine/components/SocialButton.js)
- Hotspot: themes/simple/components/SocialButton.js (themes/simple/components/SocialButton.js)
- Hotspot: themes/typography/components/SocialButton.js (themes/typography/components/SocialButton.js)
- LayoutSlug (cognitive 16) (themes/heo/index.js)
- Low CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Outdated (npm): @supabase/supabase-js
- PR-triggered workflow without a permissions block
- …and 4 more

## New (219)

- (anonymous) (cognitive 17) (components/AlgoliaSearchModal.js)
- (anonymous) (cyclomatic 17) (components/AlgoliaSearchModal.js)
- Classify ADR enforcement: RFC: 代码块侧栏预览 (docs/developer/rfc/issue-2941-code-sidebar.md)
- Classify ADR enforcement: RFC: 代码折叠块桌面与移动端 UI 收敛 (docs/developer/rfc/issue-2941-code-block-ui-refinement.md)
- Classify ADR enforcement: RFC: 支持 Notion 选项卡块 (docs/developer/rfc/issue-3948-notion-tabs.md)
- Classify ADR enforcement: 原创存证体验优化任务 (docs/developer/rfc/2026-originality-proof-ux.md)
- Classify ADR enforcement: 原创存证自动公开清单任务 (docs/developer/rfc/2026-originality-proof-auto-manifest.md)
- Deprecated: @clerk/clerk-react (yarn.lock)
- Deprecated: @clerk/types (yarn.lock)
- Deprecated: @clerk/types (yarn.lock)
- Deprecated: @humanwhocodes/config-array (yarn.lock)
- Deprecated: @humanwhocodes/object-schema (yarn.lock)
- Deprecated: @ungap/structured-clone (yarn.lock)
- Deprecated: abab (yarn.lock)
- Deprecated: crypto-js (yarn.lock)
- Deprecated: domexception (yarn.lock)
- Deprecated: eslint (package.json)
- Deprecated: glob (yarn.lock)
- Deprecated: glob (yarn.lock)
- Deprecated: glob (yarn.lock)
- …and 199 more

## Changes since last survey

- 12 commits — 6 feature/other, 6 fixes

## By area

- (root) — 6 commits
- (repo) — 2 commits
- __tests__/lib — 2 commits
- __tests__/themes — 1 commit
- themes/heo — 1 commit

## Notable commits

- fix: Merge pull request #4588 from 88lin/fix/review-followups-20261014
- fix: Merge pull request #4591 from 88lin/fix/endspace-unlock-controls
- fix: fix(endspace): 同步工具栏解锁状态并避免密码页误跳 404
- fix: fix(heo): improve mobile notice bar display and make rotation interval configurable (#4607)
- fix: fix(rss): 同步 /api/rss 兜底与静态订阅源并补充自动发现声明 (#4602)
- fix: fix: Page 缺少 Date 时 %category% 自定义路径回退为 /category/slug (#4335) (#4600)
- change: chore: bump @next/bundle-analyzer from 15.5.27 to 15.5.28 (#4597)
- change: chore: bump @supabase/supabase-js from 2.117.3 to 2.118.0 (#4598)
- change: chore: bump @vercel/functions from 3.9.11 to 3.10.1 (#4595)
- change: chore: bump follow-redirects from 1.16.0 to 1.16.1 (#4599)
- change: chore: bump next from 15.5.27 to 15.5.28 (#4596)
- change: chore: bump the dev-dependencies group across 1 directory with 8 updates (#4594)