# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 55 → 67 (+12.4)
- Rubric changed (rubric-2026.08.15 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 100 → 79 (-21.3)
- Architecture 99 (new)
- Maturity 59 → 57 (-1.4)
- Readiness 44 → 78 (+33.7)
- Security 59 → 71 (+12.4)

## Resolved (30)

- Dimension evaluation failed
- High IaC: DS-0002 (tests/benchmarks/startup-time-src/Containerfile)
- High IaC: DS-0002 (tests/syntax-tests/source/Dockerfile/Dockerfile)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- …and 10 more

## New (79)

- App::config (cognitive 66) (src/bin/bat/app.rs)
- App::config (cyclomatic 49) (src/bin/bat/app.rs)
- ClassTooLong: App (src/bin/bat/app.rs)
- ClassTooLong: InteractivePrinter (src/printer.rs)
- Controller::print_file_ranges (cognitive 38) (src/controller.rs)
- Controller::print_file_ranges (cyclomatic 19) (src/controller.rs)
- Controller::run_with_error_handler (cognitive 30) (src/controller.rs)
- Controller::run_with_error_handler (cyclomatic 18) (src/controller.rs)
- Coverage not measured — no coverage collector is wired up
- Dependency advisory scan runs only on code events
- Dependency hygiene PARTLY measured — Cargo dependencies read, dependency currency not (crates.io unreachable)
- Dependency source pinned to a moving git ref
- Documentation: no contributor guidance (README.md)
- Documentation: no licence statement (README.md)
- Duplicated block (13–14 lines × 2) (src/vscreen.rs)
- Duplicated block (9 lines × 2) (src/vscreen.rs)
- End-of-life runtime: .NET net9.0
- FileTooLong: bat/clap_app.rs (src/bin/bat/clap_app.rs)
- FileTooLong: src/printer.rs (src/printer.rs)
- FunctionTooLong: bat::bin::bat::clap_app::build_app (src/bin/bat/clap_app.rs)
- …and 59 more

## Changes since last survey

- 34 commits — 20 feature/other, 14 fixes

## By area

- (repo) — 19 commits
- (root) — 10 commits
- assets/syntaxes — 2 commits
- src/bin — 2 commits
- tests/syntax-tests — 1 commit

## Notable commits

- fix: Fix doubled word in README
- fix: Merge branch 'master' into fix-binary-detection-across-lines-3554
- fix: Merge branch 'master' into fix-log-syntax-performance-3866
- fix: Merge branch 'master' into fix/3697-bat-auto-detect-language-from-stdin
- fix: Merge pull request #3747 from mvanhorn/fix/3697-bat-auto-detect-language-from-stdin
- fix: Merge pull request #3876 from Matei02355/fix-log-syntax-performance-3866
- fix: Merge pull request #3877 from Matei02355/fix-binary-detection-across-lines-3554
- fix: Merge pull request #3899 from rootsec1/fix/cargo-install-manifest-diagnostic
- fix: Merge pull request #4015 from mikehasa/fix/track-strikethrough-sgr9
- fix: fix(syntax): preserve log-level scopes in Syslog
- fix: fix(syntax): use start-of-line anchor for log levels
- fix: fix: avoid parsing syntax fixture as Cargo manifest
- fix: fix: use last occurrence in combined short flags
- fix: fix: use last occurrence in combined short flags
- change: Allow boolean flags to be repeated
- change: Merge pull request #3857 from MeGaurav4/master
- change: Merge pull request #3885 from latent-9/fix-doc-typos
- change: Merge pull request #3897 from cuishuang/master
- change: Merge pull request #3900 from sharkdp/dependabot/cargo/globset-0.4.20
- change: Merge pull request #3901 from sharkdp/dependabot/cargo/indexmap-2.14.1
- …and 14 more