Last 2 commits touching this section.
Trim the README and remove the cookiecutter and history leftovers The README documented how the application got here rather than what it is: the rationale for dropping the access token, the "not a regression" note on the 20 commit cap, and the issue numbers behind each feature. It also inlined the twenty watched repositories, which config.py and the home page already own. It is now 90 lines describing the current state, with the history left to HISTORY.md. The same pass removed what no longer carries its weight: * utils.py held a single function resolving a repository against the list in config.py, so it moved next to that list. * GITHUB_WEB_BASE and GITHUB_API_BASE were undocumented env overrides nobody set, tests included; they are plain constants again. * python-dotenv only serves `flask run`, so it is a dev dependency now. The production install was verified to still import the app without it. * pyproject.toml ignored SLF001 for tests, a rule the select list never enabled. * AUTHORS.md ("Contributors: None yet"), an unreferenced favicon.png and a committed .impeccable tool cache pointing at another worktree are gone, and .gitignore dropped the Django, Scrapy, SageMath and Jupyter blocks while gaining the .ruff_cache it was missing. * CONTRIBUTING.md repeated a line verbatim, installed the wrong requirements file and pinned a single Python version the CI matrix disagreed with. HISTORY.md dated releases 1.0.0 to 1.3.0 in 2021, but the repository has no commit that year: they all shipped in November 2022, which is also why 0.1.0 appeared to postdate them. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8d82c73e-0c71-4c9c-8543-aeaff2ecc8bf
Drop the GitHub credential requirement and modernize the app The shared GITHUB_ACCESS_TOKEN had become a recurring chore: organizations can cap personal access token lifetimes to a few days, so the deployment depended on a manual renewal. Commits are now read from the public Atom feeds published by the GitHub web front-end, which need no credential and consume no REST API rate limit. The default branch is discovered from the branch-less feed title, which is required because repositories disagree on it (sql-docs uses `live`). The only remaining REST call is the directory listing, performed anonymously and cached. The oAuth login was removed with it: it only existed to raise limits that no longer apply, and it was the sole source of the SAML enforcement problem (#10). The `since` control is now available to everyone. Known limitation: GitHub serves commit feeds as a single, non paginated page of 20 entries, so a section can never show more than 20 commits. The previous implementation was capped at 20 too, so this is not a regression. Also fixed along the way: * RSS entries were published oldest first, and the channel link pointed at the feed instead of the HTML page. * The RSS author was an email field holding a display name; it is now dc:creator. * Commit messages were HTML escaped before being XML escaped, producing double escaped entities in the feeds. * A NameError was raised instead of the intended error page on GitHub failures. * The Flask secret key was regenerated on every start, breaking sessions across restarts and workers. * The page language was declared as French while the interface is English. Modernization: * Bootstrap 5.3 native colour modes replace the abandoned bootstrap-dark-5 fork; jQuery and js-cookie are gone and CDN assets are pinned with SRI. * Pages advertise their RSS feed through autodiscovery links. * PyGithub, flask_dance, authlib and Flask-Login dropped; dependencies pinned. * Added an offline test suite, ruff linting and formatting, and a CI workflow that lints and tests before deploying. The previous workflow relied on the retired v2 artifact actions and could no longer run. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 372234e2-8676-4a29-8c30-4e689a0a406a