# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 66 → 71 (+5.0)
- Rubric changed (rubric-2026.09.8 → rubric-2026.09.16) — scores are not directly comparable.

## Lenses

- Code Health 99 → 99 (-0.0)
- Architecture 69 → 69 (+0.0)
- Maturity 49 → 59 (+10.3)
- Readiness 90 → 90 (+0.0)
- Security 94 → 95 (+1.5)

## Resolved (4)

- Documentation: no usage examples (README.md)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Orphaned files with no living knowledge

## New (6)

- Fragmented and inconsistent naming for ignore/subscription management. `ignore_actions` and `ignore` suggest different mechanisms but likely configure the same underlying ignore list. `ignore?` is a predicate while others are mutators. `set_ignores` is ambiguous (does it replace? append?). `ignore_nothing` is a specific state reset.
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Inconsistent verb usage for setup/integration methods. `attach_to_` implies a passive connection, whereas `setup` (used in `Lograge.setup(app)`) implies initialization. Other methods use `set_` or direct verbs. The distinction between 'attaching' and 'setting up' is unclear.

## Changes since last survey

- 5 commits — 3 feature/other, 2 fixes

## By area

- (repo) — 2 commits
- (root) — 2 commits
- .github/workflows — 1 commit

## Notable commits

- fix: Merge pull request #405 from roidrage/ci/fix-json3-and-rubocop
- fix: ci: fix pre-existing failures from json 3.x and RuboCop 1.91
- change: Add 'logger' as dependency in gemspec
- change: Merge pull request #401 from leoarnold/leoarnold/gemspec
- change: ci: run RuboCop once instead of across the whole matrix