# Changelog

## Score

- CAI 44 → 43 (-0.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 55 → 55 (-0.0)
- Architecture 99 → 99 (+0.6)
- Maturity 75 → 70 (-5.3)
- Readiness 44 → 44 (+0.0)
- Security 58 → 57 (-0.8)
- Accessibility 32 → 32 (+0.0)

## Resolved (24)

- Boundary-crossing change coupling: InMemoryNodeManager.java ↔ PrestoSparkInternalNodeManager.java (presto-main-base/src/main/java/com/facebook/presto/metadata/InMemoryNodeManager.java)
- Boundary-crossing change coupling: PrestoSparkInjectorFactory.java ↔ PrestoSparkConfiguration.java (presto-spark-base/src/main/java/com/facebook/presto/spark/PrestoSparkInjectorFactory.java)
- Boundary-crossing change coupling: ReadOnlySystemAccessControl.java ↔ AccessControl.java (presto-main-base/src/main/java/com/facebook/presto/security/ReadOnlySystemAccessControl.java)
- Boundary-crossing change coupling: ReadOnlySystemAccessControl.java ↔ AllowAllAccessControl.java (presto-main-base/src/main/java/com/facebook/presto/security/ReadOnlySystemAccessControl.java)
- Boundary-crossing change coupling: ReadOnlySystemAccessControl.java ↔ DenyAllAccessControl.java (presto-main-base/src/main/java/com/facebook/presto/security/ReadOnlySystemAccessControl.java)
- Boundary-crossing change coupling: TrackingRemoteTaskFactory.java ↔ HttpRemoteTaskFactory.java (presto-main-base/src/main/java/com/facebook/presto/execution/TrackingRemoteTaskFactory.java)
- High CVE: [GHSA redacted] (presto-ui/src/yarn.lock)
- High CVE: [GHSA redacted] (presto-ui/src/yarn.lock)
- High vulnerability: [GHSA redacted] (presto-ui/src/yarn.lock)
- Hotspot: presto-main-base/src/main/java/com/facebook/presto/sql/planner/optimizations/PushdownSubfields.java (presto-main-base/src/main/java/com/facebook/presto/sql/planner/optimizations/PushdownSubfields.java)
- LLM evaluation failed
- Off-boarding risk: anonymized user #1
- Off-boarding risk: anonymized user #10
- Off-boarding risk: anonymized user #11
- Off-boarding risk: anonymized user #12
- Off-boarding risk: anonymized user #2
- Off-boarding risk: anonymized user #3
- Off-boarding risk: anonymized user #4
- Off-boarding risk: anonymized user #5
- Off-boarding risk: anonymized user #6
- …and 4 more

## New (30)

- Boundary-crossing change coupling: Metadata.java ↔ ClassLoaderSafeConnectorMetadata.java (presto-main-base/src/main/java/com/facebook/presto/metadata/Metadata.java)
- Boundary-crossing change coupling: Metadata.java ↔ ConnectorMetadata.java (presto-main-base/src/main/java/com/facebook/presto/metadata/Metadata.java)
- Boundary-crossing change coupling: PrestoSparkQueryExecutionFactory.java ↔ QueryCompletedEvent.java (presto-spark-base/src/main/java/com/facebook/presto/spark/PrestoSparkQueryExecutionFactory.java)
- Boundary-crossing change coupling: PrestoSparkServiceFactory.java ↔ PrestoSparkLauncherCommand.java (presto-spark-base/src/main/java/com/facebook/presto/spark/PrestoSparkServiceFactory.java)
- Boundary-crossing change coupling: QueryInfo.java ↔ QueryCompletedEvent.java (presto-main-base/src/main/java/com/facebook/presto/execution/QueryInfo.java)
- Boundary-crossing change coupling: QueryStateMachine.java ↔ QueryCompletedEvent.java (presto-main-base/src/main/java/com/facebook/presto/execution/QueryStateMachine.java)
- Duplicated block (5 lines × 2) (presto-main-base/src/main/java/com/facebook/presto/sql/analyzer/ExpressionAnalyzer.java)
- High CVE: [GHSA redacted] (presto-ui/src/yarn.lock)
- High CVE: [GHSA redacted] (presto-ui/src/yarn.lock)
- High CVE: [GHSA redacted] (presto-ui/src/yarn.lock)
- Hotspot: presto-cassandra/src/main/java/com/facebook/presto/cassandra/CassandraType.java (presto-cassandra/src/main/java/com/facebook/presto/cassandra/CassandraType.java)
- Medium IaC: CKV_DOCKER_3 (docker/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (presto-native-execution/scripts/dockerfiles/centos-dependency.dockerfile)
- Medium IaC: CKV_DOCKER_3 (presto-native-execution/scripts/dockerfiles/prestissimo-runtime.dockerfile)
- Medium IaC: CKV_DOCKER_3 (presto-native-execution/scripts/dockerfiles/ubuntu-22.04-dependency.dockerfile)
- Medium IaC: CKV_DOCKER_9 (presto-native-execution/scripts/dockerfiles/ubuntu-22.04-dependency.dockerfile)
- Off-boarding risk: anonymized user #8
- Off-boarding risk: anonymized user #6
- Off-boarding risk: anonymized user #4
- Off-boarding risk: anonymized user #10
- …and 10 more

## Changes since last survey

- 15 commits — 9 feature/other, 6 fixes

## By area

- presto-docs/src — 4 commits
- presto-iceberg/src — 3 commits
- presto-lance/src — 2 commits
- presto-main-base/src — 2 commits
- presto-native-execution/velox — 2 commits
- presto-parser/src — 1 commit
- presto-ui/src — 1 commit

## Notable commits

- fix: fix(docs): Change brackets for array type hints (#28255)
- fix: fix(docs): Resolve duplicate function description warnings (#28253)
- fix: fix(docs): Resolve func reference target not found warnings (#28254)
- fix: fix(plugin-iceberg): Fix Iceberg ANALYZE failure when column names in metadata are not lowercase for Hive catalog (#28234)
- fix: fix(plugin-lance): List tables across all schemas when no schema is given (#28268)
- fix: fix: Properly delete Iceberg data files on DROP TABLE for S3 storage (#27938)
- change: chore(ci): Advance velox (#28257)
- change: chore(ci): Advance velox (#28260)
- change: chore(deps): Bump postcss from 8.5.13 to 8.5.23 in /presto-ui/src (#28226)
- change: feat!: Add scan-only raw input data size statistics (#28222)
- change: feat(analyzer): Reject non-deterministic functions in materialized views (#28220)
- change: feat(parser): Add support for ANSI SQL syntax in trim function (#28190)
- change: feat(plugin-iceberg): Add proxy support for Iceberg REST catalogs (#28217)
- change: feat(plugin-lance): Integrate lance-namespace API (#27481)
- change: refactor(docs): Refactor Deploying Presto page (#28258)