# Changelog

## Baseline

- First survey — no prior run to compare against. CAI 41.

## Lenses

- Code Health 53
- Architecture 69
- Maturity 87
- Readiness 22
- Security 56

## Changes since last survey

- 300 commits — 209 feature/other, 91 fixes

## By area

- (root) — 50 commits
- .github/workflows — 34 commits
- src/sinks — 24 commits
- website/cue — 18 commits
- src/sources — 16 commits
- lib/vector-core — 11 commits
- vdev/src — 10 commits
- src/transforms — 9 commits
- website/yarn.lock — 9 commits
- website/content — 8 commits
- .github/actions — 6 commits
- distribution/docker — 5 commits
- lib/vector-buffers — 5 commits
- lib/vector-vrl — 5 commits
- src/config — 4 commits
- tests/e2e — 4 commits
- .github/dependabot.yml — 3 commits
- scripts/environment — 3 commits
- src/enrichment_tables — 3 commits
- src/topology — 3 commits

## Notable commits

- fix: chore(ci): fix race between labeler and docs-review-on-hold workflow (#25676)
- fix: chore(deps): bump anyhow, memmap2, quick-junit to fix RUSTSEC advisories (#25753)
- fix: chore(deps): bump mongodb to 3.7.0 and fix RUSTSEC-2026-0119 (#25499)
- fix: chore(deps): bump rand to 0.8.6 and fix RUSTSEC-2026-0097 (#25505)
- fix: chore(deps): bump wasm-pack to 0.15.0 and fix playground LICENSE (#25769)
- fix: chore(dev): bump rust toolchain to 1.95 and fix clippy lints (#25606)
- fix: chore(metrics): add a regression test for component cpu metric (#25672)
- fix: chore(regression): add scale regression cases (#25762)
- fix: docs(buffers): note known restart bugs in disk buffer docs (#25679)
- fix: docs(codecs): fix duplicated word in Avro decoder doc comment (#25651)
- fix: docs(deprecation policy): add dedicated section for security and critical bug exceptions (#25694)
- fix: docs(website): Fix typo in aggregator documentation (#25574)
- fix: docs(website): fix option example rendering (#25961)
- fix: docs(website): fix stale references and add FIPS disclaimer (#25674)
- fix: docs: fix Integration/E2E badge link in README (#25618)
- fix: docs: fix broken REVIEWING.md links in SECURITY.md (#25833)
- fix: fix(aggregate transform): Fix incorrectly dropped events bug in metrics aggregate transform (#25486)
- fix: fix(aws_kinesis_firehose source): add missing sources-http_server feature dependency (#25814)
- fix: fix(azure_blob sink): Fix Shared Key auth for multipart uploads (#25978)
- fix: fix(buffers): drop over-limit disk_v2 records instead of crashing (#25795)
- …and 280 more