# Changelog

## Score

- CAI 52 → 46 (-5.2)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 67 → 45 (-21.8)
- Architecture 82 → 83 (+1.0)
- Maturity 56 → 45 (-10.9)
- Readiness 67 → 67 (+0.3)
- Security 69 → 65 (-3.3)
- Domain Modelling 42 → 42 (+0.0)
- Accessibility 56 → 54 (-2.0)
- Performance 100 → 100 (+0.0)

## Resolved (16)

- Documentation: contradicts the code (doc/maintenance-tasks.md)
- Documentation: no usage examples (README.md)
- Off-boarding risk: anonymized user #1
- Outdated: blazer
- Outdated: brakeman
- Outdated: capybara-playwright-driver
- Outdated: honeybadger
- Outdated: listen
- Outdated: pg
- Outdated: pg_query
- Outdated: rails
- Outdated: rdoc
- Outdated: rubocop-minitest
- Outdated: shoryuken
- Outdated: simplecov
- Outdated: statsd-instrument

## New (32)

- Duplicated block (115–118 lines × 2) (config/environments/production.rb)
- Duplicated block (11–12 lines × 2) (config/initializers/statsd.rb)
- Duplicated block (8–9 lines × 2) (db/seeds.rb)
- Leaked secret: high-entropy-secret (script/dev)
- Low cohesion: RubygemsController (LCOM4 4) (app/controllers/rubygems_controller.rb)
- Off-boarding risk: anonymized user #1
- Orphaned file (app/controllers/api/v1/github_secret_scanning_controller.rb)
- Orphaned file (app/controllers/api/v1/owners_controller.rb)
- Orphaned file (app/controllers/api/v1/web_hooks_controller.rb)
- Orphaned file (app/models/api_key.rb)
- Orphaned file (app/models/dependency.rb)
- Orphaned file (app/models/gem_download.rb)
- Orphaned file (app/models/links.rb)
- Orphaned file (app/models/oidc/api_key_role.rb)
- Orphaned file (app/models/ownership.rb)
- Orphaned file (app/models/rubygem_contents/entry.rb)
- Orphaned file (app/models/web_hook.rb)
- Orphaned file (app/views/components/alert_component.rb)
- Orphaned file (app/views/components/events/table_component.rb)
- Orphaned file (config/environments/test.rb)
- …and 12 more

## Changes since last survey

- 74 commits — 71 feature/other, 3 fixes

## By area

- (root) — 11 commits
- (repo) — 8 commits
- config/locales — 8 commits
- app/avo — 6 commits
- .github/workflows — 5 commits
- config/deploy — 5 commits
- app/controllers — 4 commits
- app/models — 4 commits
- .github/actions — 3 commits
- config/initializers — 3 commits
- script/load-pg-dump — 3 commits
- test/system — 3 commits
- app/views — 2 commits
- .github/dependabot.yml — 1 commit
- app/javascript — 1 commit
- app/jobs — 1 commit
- config/environments — 1 commit
- db/migrate — 1 commit
- lib/rack_attack_reset.rb — 1 commit
- test/functional — 1 commit

## Notable commits

- fix: Fix a deprecation warning for `config.rails_semantic_logger.format` (#6932)
- fix: Fix gem push backoff reset discriminator normalization (#6969)
- fix: Fix production search replicas for maintenance jobs (#6944)
- change: Add `/security` and `/supporters` as top level routes (#6951)
- change: Add a sort dropdown to gem lists on profiles, organizations and search (#6909)
- change: Add an Avo action to rebuild Rubygem search (#6936)
- change: Add an Avo action to reset user gem push throttling (#6970)
- change: Add an Explore hub for discovering gems (#6917)
- change: Add and configure the `aws_advanced_ruby_driver_wrapper` gem
- change: Add instant gem-name filtering to profile and organization lists (#6945)
- change: Add mise tasks for services, setup and tests (#6928)
- change: Add tests for the `FactoryBot/RepeatedNestedCreate` cop
- change: Allow bulk yanking rubygems from the admin index (#6904)
- change: Build production Docker image for amd64 and arm64 (#6925)
- change: Bump avo from 3.32.4 to 3.33.1 (#6958)
- change: Bump capybara-playwright-driver (#6966)
- change: Bump ruby/setup-ruby in / (#6912)
- change: Bump ruby/setup-ruby in / (#6956)
- change: Bump ruby/setup-ruby in / (#6968)
- change: Bump the bundler group across 1 directory with 19 updates (#6961)
- …and 54 more

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)