# Changelog

## Score

- CAI 49 → 45 (-3.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 85 → 91 (+5.9)
- Architecture 100 → 94 (-5.9)
- Maturity 48 → 49 (+1.0)
- Readiness 26 → 17 (-9.2)
- Security 100 → 100 (+0.0)

## Resolved (50)

- BinaryFileResponse.prepare (cognitive 62) (BinaryFileResponse.php)
- BinaryFileResponse.prepare (cyclomatic 29) (BinaryFileResponse.php)
- BinaryFileResponse.sendContent (cognitive 24) (BinaryFileResponse.php)
- BinaryFileResponse.sendContent (cyclomatic 17) (BinaryFileResponse.php)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Duplicated block (10 lines × 2) (File/File.php)
- Duplicated block (10 lines × 2) (Response.php)
- Duplicated block (11 lines × 2) (InputBag.php)
- Duplicated block (16 lines × 2) (Session/Storage/Handler/PdoSessionHandler.php)
- Duplicated block (5 lines × 2) (Session/Storage/Handler/PdoSessionHandler.php)
- Duplicated block (5 lines × 3) (Session/Storage/Handler/PdoSessionHandler.php)
- Duplicated block (9 lines × 2) (Request.php)
- FileTooLong: ./Request.php (Request.php)
- Further orphaned files (smaller)
- HeaderUtils.groupParts (cognitive 18) (HeaderUtils.php)
- HeaderUtils.parseQuery (cognitive 18) (HeaderUtils.php)
- Hotspot: BinaryFileResponse.php (BinaryFileResponse.php)
- Hotspot: IpUtils.php (IpUtils.php)
- Hotspot: Request.php (Request.php)
- …and 30 more

## New (20)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Duplicated block (10 lines × 2) (Tests/AcceptHeaderTest.php)
- Duplicated block (11 lines × 2) (Request.php)
- Duplicated block (11 lines × 2) (Tests/IpUtilsTest.php)
- Duplicated block (29 lines × 2) (Tests/RequestTest.php)
- Duplicated block (5 lines × 2) (Tests/HeaderUtilsTest.php)
- Duplicated block (5 lines × 2) (Tests/Session/Attribute/AttributeBagTest.php)
- Duplicated block (5 lines × 2) (Tests/Session/Storage/Handler/PdoSessionHandlerTest.php)
- Duplicated block (6 lines × 2) (Session/Storage/Handler/PdoSessionHandler.php)
- Duplicated block (6 lines × 2) (Tests/RequestTest.php)
- Duplicated block (7 lines × 2) (Tests/AcceptHeaderTest.php)
- Duplicated block (7 lines × 2) (Tests/Session/Storage/Handler/AbstractRedisSessionHandlerTestCase.php)
- Duplicated block (8 lines × 2) (Tests/UrlHelperTest.php)
- Duplicated block (8 lines × 5) (Tests/Test/Constraint/ResponseHeaderLocationSameTest.php)
- Duplicated block (9 lines × 2) (Tests/CookieTest.php)
- Duplicated block (9 lines × 2) (Tests/ResponseTest.php)
- Duplicated block (9 lines × 2) (Tests/ResponseTestCase.php)
- No tests found
- No usage example showing how an HttpFoundation object is instantiated or used. (README.md)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- (root) — 1 commit

## Notable commits

- change: [HttpFoundation] Reject a Cookie with an invalid __Secure-/__Host- prefix