| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | chore(deps): allow pytest 9 and upgrade to 9.1.1 | Christian Cleberg | 2026-07-20 | 1 | -4/+4 |
| | | | | | | | | | | Closes CVE-2025-71176 (tmpdir handling). Test-only dependency, never in the runtime image. Floor raised to 9.0.3 rather than just dropping the <9.0 ceiling: with the floor left at 8.2 a fresh resolve could still land on a vulnerable 8.x and the advisory would stay open. | ||||
| * | chore(deps): upgrade starlette, mako, idna and pydantic-settings | Christian Cleberg | 2026-07-20 | 1 | -15/+15 |
| | | | | | | | | | | | | | | | | Clears eight open Dependabot alerts. None were exploitable against this service as written -- it exposes no form endpoints, mounts no StaticFiles, never reads request.url, sets no secrets_dir, and runs on Linux while several of the advisories are Windows-only -- but the bumps are cheap and that analysis only holds until the surface changes. starlette 1.0.0 -> 1.3.1 resolves five advisories on its own and requires fastapi 0.135.3 -> 0.139.2 to satisfy its pin. Mako is a transitive alembic dependency used only to scaffold migrations. pytest is left at 8.4.2; its advisory is test-only and the fix would need the <9.0 constraint in pyproject.toml relaxed across a major version. | ||||
| * | fix: reduce sr.ht poll API load with cached repo discovery | Christian Cleberg | 2026-04-11 | 1 | -0/+808 |
 |
index : hutch-stats.git | |
| polls sourcehut activity, serves a contribution-calendar api. | krz |
| summaryrefslogtreecommitdiff |