Bound unread item query count

[Skulldorom]

Motivation

• Prevent dashboard integrations from requesting an unbounded number of items and ensure invalid values are rejected before contacting FreshRSS.
• Make the valid n range explicit in the documentation for dashboard authors and operators.

Description

• Add an upper bound to the n query parameter in freshrss_unread with Query(default=10, ge=1, le=100) in main.py.
• Update README.md to document the valid n range as 1–100 for the /freshrss/unread endpoint.
• Add API-level tests in tests/test_main.py that use fastapi.testclient.TestClient to verify out-of-range values (0 and 101) return HTTP 422 without contacting FreshRSS and that boundary values (1 and 100) are accepted and forwarded.
• Add httpx2 to the development dependency group in pyproject.toml to satisfy TestClient's transport requirement.

Testing

• python -m py_compile main.py tests/test_main.py ran successfully and reported no syntax errors.
• git diff --check was run and reported no issues.
• uv run pytest attempted test collection but failed because starlette.testclient requires the httpx2 package; httpx2 was added to the dev dependencies, however installation could not be completed in this environment due to inability to fetch packages from PyPI, so pytest could not complete here.

---

Codex Task

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f4b57ef9c1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Regenerate the lockfile for the new test dependency

The checked workflow .github/workflows/docker.yml installs with uv sync --frozen before running pytest; uv sync --help defines --frozen as “Sync without updating the uv.lock file.” Because this commit does not add httpx2 to uv.lock, that install omits it, and the new from fastapi.testclient import TestClient fails during collection with Starlette's RuntimeError requiring httpx2. Update and commit uv.lock so the test job can run.

Useful? React with 👍 / 👎.