# Changelog

## Score

- CAI 71 → 68 (-2.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 98 → 74 (-23.3)
- Architecture 89 → 88 (-0.6)
- Maturity 68 → 64 (-4.1)
- Readiness 67 → 69 (+1.7)
- Security 71 → 71 (+0.0)
- Performance 83 → 83 (+0.0)

## Resolved (3)

- Documentation: contradicts the code (docs/configuration.md)
- Off-boarding risk: anonymized user #1
- Workflow holding a long-lived secret is unscoped

## New (6)

- Off-boarding risk: anonymized user #1
- TestRunner.maxReuseTestRunner (cognitive 16) (modules/core/src/main/scala/stryker4s/run/TestRunner.scala)
- TestRunner.timeoutRunner (cognitive 16) (modules/core/src/main/scala/stryker4s/run/TestRunner.scala)
- Workflow holding a long-lived secret is unscoped (.github/workflows/ci.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/mutation-testing.yml)
- Workflow token permissions not restricted (.github/workflows/dependency-graph.yml)

## Changes since last survey

- 10 commits — 10 feature/other, 0 fixes

## By area

- project/Dependencies.scala — 5 commits
- .github/workflows — 1 commit
- maven/src — 1 commit
- modules/core — 1 commit
- modules/mill — 1 commit
- modules/testRunnerApi — 1 commit

## Notable commits

- change: build(deps): bump sbt/setup-sbt from 1.5.11 to 1.5.12 (#2182)
- change: build(deps): update circe, fs2 from 4.0.27 to 4.1.0 (#2183)
- change: build(deps): update circe-core from 0.14.16 to 0.14.17 (#2175)
- change: build(deps): update ciris from 3.15.1 to 3.15.2 (#2177)
- change: build(deps): update scopt from 4.1.0 to 4.2.0 (#2174)
- change: build(deps): update weapon-regex from 2.0.5 to 2.0.6 (#2173)
- change: build: update Scala to 3.9 LTS (#2180)
- change: chore(maven): read zinc version instead of hardcoded version (#2179)
- change: chore: cleanup protobuf schema and related code (#2181)
- change: chore: simplify syntax