# Changelog

## Score

- CAI 58 → 57 (-0.7)

## Lenses

- Code Health 79 → 79 (+0.1)
- Architecture 88 → 86 (-2.1)
- Maturity 54 → 55 (+0.8)
- Readiness 45 → 43 (-1.9)
- Security 84 → 84 (+0.0)
- Performance 100 → 100 (+0.0)

## Resolved (8)

- Documentation: contradicts the code (docs/compose-improvements-plan.md)
- Documentation: contradicts the code (docs/compose-parity-plan.md)
- Duplicated block (10 lines × 5) (Sources/ContainerStack/Main.swift)
- Hotspot: Sources/ContainerStack/Compose.swift (Sources/ContainerStack/Compose.swift)
- Hotspot: Sources/ContainerStack/Views/ContainerDetail.swift (Sources/ContainerStack/Views/ContainerDetail.swift)
- Hotspot: Sources/ContainerStack/Views/Sheets.swift (Sources/ContainerStack/Views/Sheets.swift)
- Off-boarding risk: anonymized user #1
- Workflow token grant is wider than its jobs use

## New (5)

- Duplicated block (10 lines × 5) (Sources/ContainerStack/Main.swift)
- Leaked secret: hardcoded-credential (Sources/ContainerStack/Main.swift)
- Off-boarding risk: anonymized user #1
- Outdated: sparkle
- Workflow token grant is wider than its jobs use (.github/workflows/release.yml)

## Changes since last survey

- 6 commits — 6 feature/other, 0 fixes

## By area

- (root) — 2 commits
- .github/workflows — 2 commits
- Sources/ContainerStack — 2 commits

## Notable commits

- change: Add tooling to move the apple/container pin in one step (#30)
- change: Document contributing, and that main requires signed commits (#33)
- change: Pick which services a compose import brings up (#31) (#34)
- change: Stream file transfers on mounted paths through exec (#27) (#32)
- change: ci: bump actions/download-artifact from 8.0.1 to 8.0.2 (#28)
- change: ci: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#29)