This week was a full-on dependency maintenance marathon. With 122 commits across more than 20 repositories and 59 PR approvals, the throughput was remarkable — not because of any single dramatic feature, but because of the sheer breadth of the ecosystem being kept healthy. Ruby gems, npm packages, Cargo crates, Gradle plugins, and GitHub Actions all got attention in the same week.
The most interesting narrative arc was the commit volume curve: a steady warmup through Monday to Thursday, then an absolute explosion on Saturday (224) and Sunday (275). That weekend burst accounts for nearly half the week's commits, suggesting a focused automation or merge session to clear the dependency backlog. The one genuine feature moment was mdts v0.21.0 shipping, which included a mermaid rendering fix and a security-conscious restriction of the /api/markdown endpoint to markdown-only files.
Cross-org reach was wide this week — circleci-tools, bitflyer-tools, irasutoya-tools, and deariary all saw activity alongside the personal unhappychoice repos. The blog also got a new engineering article merged. It's a week that won't make headlines, but it's the kind of unglamorous infrastructure work that keeps a large multi-repo portfolio from quietly rotting.
deep-dive
mdts v0.21.0: mermaid fixes and API hardening
The headline ship of the week was mdts v0.21.0, which pinned mermaid's look and layout to pre-v12 defaults — a pragmatic rollback to avoid upstream rendering regressions. The release also restricted /api/markdown to only serve actual markdown files, closing a subtle attack surface. Fifteen PRs were merged into mdts this week alone, making it the busiest single repo by a wide margin.
release v0.21.0
repo unhappychoice/mdts
PRs merged 15
bug fixes 2 notable
activity-pattern
Flat week, then a weekend avalanche
Commits were steady but modest Monday through Friday (ranging 31–85/day), then the weekend hit differently: 224 on Saturday and 275 on Sunday. That two-day burst alone accounts for roughly 41% of the week's 122 commits. This pattern strongly suggests a batch merge session — likely clearing a queue of Dependabot PRs across the full portfolio.
peak day Sun 275
weekend total 499 commits
weekday avg 57/day
review-summary
59 approvals, zero rejections — the merge machine
Every single one of the 59 reviews this week was an approval. That's not laziness — it reflects a workflow where Dependabot PRs are vetted by compatibility scores and changelogs before hitting the queue. The review spread covered 20+ distinct repos across 5 orgs, which means this wasn't rubber-stamping one project but actively shepherding an entire ecosystem.
reviews 59 approved
repos reviewed 20+
rejections 0
repo-summary
20+ repos touched across 5 orgs
unhappychoice/mdts led the pack with 15 PRs, followed by circleci-tools/circleci-cli (6) and unhappychoice/splashboard (6). The bitflyer-tools org saw Android and Electron updates across DroidFlyer, cycle-flyer, and bitflyer-cli. irasutoya-tools got regexp_parser and unicode-display_width bumps in both its repos. The deariary org had github-weekly-reporter and .github both updated.
unhappychoice/mdts 15 PRs
circleci-tools/circleci-cli 6 PRs
unhappychoice/splashboard 6 PRs
orgs touched 5
contribution-summary
Cross-org maintenance: circleci, bitflyer, irasutoya, deariary
A significant chunk of the week's work happened outside personal repos. circleci-tools/circleci-cli absorbed 6 Ruby dependency merges including faraday-http-cache jumping a major version (2.x → 3.0.0). bitflyer-tools saw Android Gradle plugin and PubNub SDK bumps in DroidFlyer, plus an Electron patch in cycle-flyer. The deariary/github-weekly-reporter got its Anthropic SDK and other JS deps updated, and deariary/.github had its integrations docs refreshed.
external orgs 4
faraday-http-cache 2.x → 3.0.0
electron 44.3.0 → 44.4.2
deep-dive
splashboard keeps its LLM pricing fresh
Among the non-Dependabot commits, unhappychoice/splashboard had two manual 'chore: sync llm pricing from LiteLLM' commits this week — a recurring maintenance task to keep the tool's model cost data current. This ran alongside four Cargo dependency bumps (clap, toml, ratatui-image, netdev), showing splashboard getting both data and library maintenance simultaneously.
repo unhappychoice/splashboard
llm sync 2 runs
cargo bumps 4
