Replace bleach with nh3 (mozilla/bleach#698)

OpenRSVP/utils.py

@@ -8,7 +8,7 @@
 from uuid import uuid4
 
 import starlette
-from bleach import clean
+from nh3 import clean
 from markdown import markdown
 from sqlmodel import Session
 

pyproject.toml

@@ -12,8 +12,8 @@ dependencies = [
     "jinja2>=3.1.4",
     "python-multipart>=0.0.9",
     "markdown>=3.7",
-    "bleach>=6.1.0",
     "sqlmodel>=0.0.22",
+    "nh3>=0.2.18",
 ]
 
 [tool.uv]
@@ -51,4 +51,4 @@ replace = "version = \"{new_version}\""
 [[tool.bumpversion.files]]
 filename = "main.py"
 search = "__version__ = '{current_version}'"
-replace = "__version__ = '{new_version}'"
+replace = "__version__ = '{new_version}'"

requirements.txt

@@ -0,0 +1,103 @@
+# This file was autogenerated by uv via the following command:
+#    uv pip compile pyproject.toml
+annotated-types==0.7.0
+    # via pydantic
+anyio==4.6.2.post1
+    # via
+    #   httpx
+    #   starlette
+    #   watchfiles
+certifi==2024.8.30
+    # via
+    #   httpcore
+    #   httpx
+click==8.1.7
+    # via
+    #   typer
+    #   uvicorn
+dnspython==2.7.0
+    # via email-validator
+email-validator==2.2.0
+    # via fastapi
+fastapi==0.115.2
+    # via openrsvp (pyproject.toml)
+fastapi-cli==0.0.5
+    # via fastapi
+h11==0.14.0
+    # via
+    #   httpcore
+    #   uvicorn
+httpcore==1.0.6
+    # via httpx
+httptools==0.6.2
+    # via uvicorn
+httpx==0.27.2
+    # via fastapi
+idna==3.10
+    # via
+    #   anyio
+    #   email-validator
+    #   httpx
+jinja2==3.1.4
+    # via
+    #   openrsvp (pyproject.toml)
+    #   fastapi
+markdown==3.7
+    # via openrsvp (pyproject.toml)
+markdown-it-py==3.0.0
+    # via rich
+markupsafe==3.0.1
+    # via jinja2
+mdurl==0.1.2
+    # via markdown-it-py
+nh3==0.2.18
+    # via openrsvp (pyproject.toml)
+pydantic==2.9.2
+    # via
+    #   fastapi
+    #   sqlmodel
+pydantic-core==2.23.4
+    # via pydantic
+pygments==2.18.0
+    # via rich
+python-dotenv==1.0.1
+    # via uvicorn
+python-multipart==0.0.12
+    # via
+    #   openrsvp (pyproject.toml)
+    #   fastapi
+pyyaml==6.0.2
+    # via uvicorn
+rich==13.9.2
+    # via typer
+shellingham==1.5.4
+    # via typer
+sniffio==1.3.1
+    # via
+    #   anyio
+    #   httpx
+sqlalchemy==2.0.35
+    # via sqlmodel
+sqlmodel==0.0.22
+    # via openrsvp (pyproject.toml)
+starlette==0.39.2
+    # via fastapi
+typer==0.12.5
+    # via fastapi-cli
+typing-extensions==4.12.2
+    # via
+    #   fastapi
+    #   pydantic
+    #   pydantic-core
+    #   sqlalchemy
+    #   typer
+uvicorn==0.31.1
+    # via
+    #   fastapi
+    #   fastapi-cli
+uvloop==0.20.0
+    # via uvicorn
+watchfiles==0.24.0
+    # via uvicorn
+websockets==13.1
+    # via uvicorn