# Changelog

## Score

- CAI 59 → 58 (-1.7)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 98 → 59 (-38.7)
- Architecture 99 → 99 (+0.1)
- Maturity 43 → 46 (+3.0)
- Readiness 54 → 60 (+5.3)
- Security 81 → 81 (+0.0)
- Performance 100 → 100 (+0.0)

## Resolved (3)

- Off-boarding risk: anonymized user #1
- Orphaned files with no living knowledge
- Workflow token permissions not restricted

## New (5)

- Off-boarding risk: anonymized user #1
- Outdated: io.grpc:grpc-netty
- Outdated: io.grpc:grpc-okhttp
- Workflow token permissions not restricted (.github/workflows/ci.yml)
- Workflow token permissions not restricted (.github/workflows/clean.yml)

## Changes since last survey

- 10 commits — 10 feature/other, 0 fixes

## By area

- (repo) — 5 commits
- (root) — 5 commits

## Notable commits

- change: Merge pull request #1386 from typelevel/update/circe-core-0.14.17
- change: Merge pull request #1387 from typelevel/update/ciris-3.15.2
- change: Merge pull request #1388 from typelevel/update/grpc-netty-1.84.1
- change: Merge pull request #1390 from typelevel/update/grpc-netty-1.84.2
- change: Merge pull request #1391 from typelevel/update/opentelemetry-exporter-otlp-1.67.0
- change: Update circe-core, circe-literal to 0.14.17
- change: Update ciris to 3.15.2
- change: Update grpc-netty, grpc-okhttp to 1.84.1
- change: Update grpc-netty, grpc-okhttp to 1.84.2
- change: Update opentelemetry-exporter-otlp, ... to 1.67.0

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)