# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 63 → 64 (+0.4)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 73 → 60 (-12.6)
- Architecture 92 → 93 (+0.3)
- Maturity 57 → 63 (+6.8)
- Readiness 62 → 62 (-0.1)
- Security 71 → 70 (-1.2)
- Performance 80 → 80 (+0.0)

## Resolved (6)

- Concentrated knowledge decay
- Most significant orphaned file (quill-sql/src/main/scala/io/getquill/context/QueryExecution.scala)
- Most significant orphaned file (quill-sql/src/main/scala/io/getquill/metaprog/Extractors.scala)
- Most significant orphaned file (quill-sql/src/main/scala/io/getquill/parser/Parser.scala)
- Release-publishing job runs with an unscoped token
- Workflow holding a long-lived secret is unscoped

## New (12)

- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Leaked secret: hardcoded-credential (docker-compose.yml)
- Outdated: dev.zio:zio-streams_3
- Outdated: dev.zio:zio_3
- Release-publishing job runs with an unscoped token (.github/workflows/release-drafter.yml)
- Workflow holding a long-lived secret is unscoped (.github/workflows/scala-steward.yml)

## Changes since last survey

- 5 commits — 5 feature/other, 0 fixes

## By area

- .github/workflows — 3 commits
- (root) — 2 commits

## Notable commits

- change: Bump release-drafter/release-drafter from 6 to 7 (#802)
- change: Bump scala-steward-org/scala-steward-action from 2.96.0 to 2.97.0 (#806)
- change: Update mysql-connector-j to 26.10.0 (#808)
- change: Update postgresql to 42.7.14 (#801)
- change: Update zio-sbt-ci to 0.8.6 (#800)