# Changelog

## Score

- CAI 28 → 36 (+7.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 56 (new)
- Architecture 88 (new)
- Maturity 13 → 40 (+27.1)
- Readiness 15 → 28 (+12.4)
- Security 100 → 60 (-39.6)
- Accessibility 32 (new)

## Resolved (3)

- Dependency hygiene not measured — no supported dependency manifest was read
- bus factor not measured — no commits were sampled
- single-commit history — no usable git history window to measure hotspots

## New (51)

- CommentedOutCode (Src/EngineAPI/Controllers/AboutController.cs)
- CommentedOutCode (Src/EngineAPI/Controllers/AccountController.cs)
- CommentedOutCode (Src/EngineAPI/Controllers/AccountController.cs)
- CommentedOutCode (Src/EngineAPI/Controllers/AppBaseController.cs)
- CommentedOutCode (Src/EngineAPI/Startup.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/EngineAPI/Utils/AzureStorageSaver.cs)
- CommentedOutCode (Src/Transversal/Extensions/CurrentUserFactory.cs)
- Critical CVE: System.Drawing.Common 4.7.0
- Critical CVE: System.Text.Encodings.Web 4.5.0
- High CVE: AutoMapper 10.1.1
- High CVE: Microsoft.Data.SqlClient 2.0.1
- High CVE: Newtonsoft.Json 10.0.1
- High CVE: Newtonsoft.Json 12.0.3
- High CVE: System.Net.Http 4.3.0
- High CVE: System.Text.RegularExpressions 4.3.0
- …and 31 more

## API surface

- 18 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (18)

- GET /api/about
- GET /api/accounts/confirmemail
- GET /api/accounts/userlist
- GET /home
- GET /image
- POST /api/about
- POST /api/about/setculture
- POST /api/accounts/bulkcreate
- POST /api/accounts/changepassword
- POST /api/accounts/create
- POST /api/accounts/forgetpassword
- POST /api/accounts/login
- POST /api/accounts/loginasync
- POST /api/accounts/makeadmin
- POST /api/accounts/register
- POST /api/accounts/removeadmin
- POST /api/accounts/resetpassword
- POST /image

## Architecture

- Containers 2 added · 0 removed · contexts 0 added · 0 removed · edges 0 added · 0 removed

## Added containers (2)

- database:Database
- web-api:EngineAPI