Hashavatar API 0.10.0

[eldryoth]

hashavatar-api 0.10.0

Added

• Updated to hashavatar 0.10.0.
• Added demo/API support for avatar style options:
  • accessory
  • color
  • expression
  • shape
• Added UI handling for avatar families that do not support accessory/expression layers.

Security

• Reworked rate limiter storage to bounded O(1) LRU updates.
• Hardened trusted proxy X-Forwarded-For handling.
• Replaced Open Graph PNG panic path with logged error handling.
• Changed local default bind to 127.0.0.1; container deployment explicitly binds 0.0.0.0.

Validation

• Updated docs, OpenAPI metadata, smoke tests, and security invariants.
• Verified local checks, local smoke, and Wolfi container smoke before release.

---

This discussion was created from the release Hashavatar API 0.10.0.