Last 3 commits touching this section.
Answer conditional requests on the RSS feeds (#34) A subscribed reader polls the same feed URL every few minutes, forever, and the answer only changes when a new commit lands. Every poll was rebuilding and resending an identical document. The feeds now carry an ETag, a Last-Modified date and a Cache-Control header, and the view answers a matching If-None-Match or If-Modified-Since with an empty 304. For the ETag to be stable between polls the body has to be reproducible, so the rendering became a pure function of its arguments: feeds no longer reads the Flask request context, and the view passes the feed and logo URLs in. That also makes the serialized body cacheable, keyed on the commits it publishes, which removes the repeated rebuild. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: e6778dd0-0b33-4f13-b014-53a54aae7627
Fix the 500 on every commit view and pin the runtime contract `datetime.UTC` is an alias introduced in Python 3.11. The Azure App Service runs Python 3.10, so parsing a commit date raised AttributeError: module 'datetime' has no attribute 'UTC' on every request that listed commits. Pages that do not parse a date, the home page and the section index, kept working, which is why the failure looked like it was limited to one repository. The alias was not written by hand: ruff's UP017 rewrote the portable `datetime.timezone.utc` into it, because `target-version` claimed 3.13 while production had 3.10. The CI installed 3.13 too, so nothing ever exercised the runtime that actually serves the application. Three changes, so this class of failure cannot come back: * the portable `datetime.timezone.utc` spelling is used again, which runs on both versions and makes the runtime bump safe to land in either order; * the tests run on the deployed runtime as well as the target one, and UP017 is disabled until the App Service has been bumped; * the README documents that the App Service runtime, the CI matrix and the linter target have to be kept in step, with the command to raise the runtime. Verified on a real 3.10 interpreter: the reported URL and every other commit view answer 200, the suite passes on 3.10 and 3.13, and reintroducing the alias fails 17 tests on 3.10. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 372234e2-8676-4a29-8c30-4e689a0a406a
Drop the GitHub credential requirement and modernize the app The shared GITHUB_ACCESS_TOKEN had become a recurring chore: organizations can cap personal access token lifetimes to a few days, so the deployment depended on a manual renewal. Commits are now read from the public Atom feeds published by the GitHub web front-end, which need no credential and consume no REST API rate limit. The default branch is discovered from the branch-less feed title, which is required because repositories disagree on it (sql-docs uses `live`). The only remaining REST call is the directory listing, performed anonymously and cached. The oAuth login was removed with it: it only existed to raise limits that no longer apply, and it was the sole source of the SAML enforcement problem (#10). The `since` control is now available to everyone. Known limitation: GitHub serves commit feeds as a single, non paginated page of 20 entries, so a section can never show more than 20 commits. The previous implementation was capped at 20 too, so this is not a regression. Also fixed along the way: * RSS entries were published oldest first, and the channel link pointed at the feed instead of the HTML page. * The RSS author was an email field holding a display name; it is now dc:creator. * Commit messages were HTML escaped before being XML escaped, producing double escaped entities in the feeds. * A NameError was raised instead of the intended error page on GitHub failures. * The Flask secret key was regenerated on every start, breaking sessions across restarts and workers. * The page language was declared as French while the interface is English. Modernization: * Bootstrap 5.3 native colour modes replace the abandoned bootstrap-dark-5 fork; jQuery and js-cookie are gone and CDN assets are pinned with SRI. * Pages advertise their RSS feed through autodiscovery links. * PyGithub, flask_dance, authlib and Flask-Login dropped; dependencies pinned. * Added an offline test suite, ruff linting and formatting, and a CI workflow that lints and tests before deploying. The previous workflow relied on the retired v2 artifact actions and could no longer run. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 372234e2-8676-4a29-8c30-4e689a0a406a