# Changelog

## Score

- CAI 61 → 59 (-2.1)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 72 → 60 (-12.2)
- Architecture 91 → 90 (-1.5)
- Maturity 49 → 50 (+0.6)
- Readiness 65 → 68 (+3.1)
- Security 79 → 73 (-6.0)
- Performance 79 → 79 (+0.0)

## Resolved (4)

- Off-boarding risk: anonymized user #1
- Orphaned files with no living knowledge
- Outdated: org.scalatest:scalatest_3
- PR-triggered workflow without a permissions block

## New (8)

- Further sole-owners (lower concentration)
- High secret: WD-SECRET-0005 (boot/src/main/scala/BootConfiguration.scala)
- High secret: WD-SECRET-0005 (launch/BootConfiguration.scala)
- High secret: WD-SECRET-0005 (launch/src/main/scala/xsbt/boot/BootConfiguration.scala)
- No ADRs found
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block (.github/workflows/ci.yml)
- TodoComment (internal/zinc-apiinfo/src/test/scala/xsbt/api/LegacyHashAPI.scala)

## Changes since last survey

- 34 commits — 31 feature/other, 3 fixes

## By area

- (repo) — 8 commits
- zinc/src — 8 commits
- internal/zinc-apiinfo — 6 commits
- internal/zinc-scripted — 5 commits
- internal/compiler-bridge — 3 commits
- (root) — 1 commit
- contributing-docs/03_scripted_tests.md — 1 commit
- project/Dependencies.scala — 1 commit
- project/build.properties — 1 commit

## Notable commits

- fix: Merge pull request #1843 from retronym/fix-pipelining-failed-upstream
- fix: Merge pull request #1845 from retronym/fix/implicit-scope-ancestor-companion
- fix: [2.x] fix: Recompile clients when an ancestor's companion gains an implicit in another project
- change: Accumulate unordered hashes in reusable UnorderedHashers
- change: Benchmark and pin the per-class API hashing over a real corpus
- change: Capture the output of scripted run per thread
- change: Compile the bridges for scripted instead of publishing them
- change: Explain why the class kind is hashed
- change: Fail scripted on an unknown test without exiting the JVM
- change: Give each scripted test its own logger
- change: Group definitions by name with a hash table, not a sort
- change: Guard Java parent changes seen from Scala and Java
- change: Hash a top-level class's modifiers, access and annotations
- change: Hash the definition type of a class
- change: Let a pipelined scripted compile finish before failing the command
- change: Make NameHashing's hashers a val and a lazy val
- change: Merge pull request #1834 from hoangmaihuy/perf/bootclasspath-pass-through
- change: Merge pull request #1841 from retronym/claude/final-parent-class
- change: Merge pull request #1849 from retronym/claude/macro-type-argument-deps-ed2500
- change: Merge pull request #1851 from retronym/claude/tree-printer-no-selfcheck
- …and 14 more

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)