hutch-stats.git - polls sourcehut activity, serves a contribution-calendar api.

	Commit message (Collapse)	Author	Age	Files	Lines
*	chore(deps): bump pydantic from 2.12.5 to 2.13.4	dependabot[bot]	2026-07-20	1	-67/+71
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.12.5 to 2.13.4. - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.12.5...v2.13.4) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.13.4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
*	chore(deps): upgrade starlette, mako, idna and pydantic-settings	Christian Cleberg	2026-07-20	1	-15/+15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Clears eight open Dependabot alerts. None were exploitable against this service as written -- it exposes no form endpoints, mounts no StaticFiles, never reads request.url, sets no secrets_dir, and runs on Linux while several of the advisories are Windows-only -- but the bumps are cheap and that analysis only holds until the surface changes. starlette 1.0.0 -> 1.3.1 resolves five advisories on its own and requires fastapi 0.135.3 -> 0.139.2 to satisfy its pin. Mako is a transitive alembic dependency used only to scaffold migrations. pytest is left at 8.4.2; its advisory is test-only and the fix would need the <9.0 constraint in pyproject.toml relaxed across a major version.
*	fix: reduce sr.ht poll API load with cached repo discovery	Christian Cleberg	2026-04-11	1	-0/+808