chore: improve security and update dependencies

.pre-commit-config.yaml

@@ -39,7 +39,7 @@ repos:
     hooks:
       - id: ruff
 -   repo: https://github.com/PyCQA/bandit
-    rev: 1.7.5
+    rev: 1.7.10
     hooks:
     -   id: bandit
         exclude: tests/.*$

requirements.txt

@@ -6,5 +6,5 @@ passlib[bcrypt]==1.7.4
 pydantic>=2.0.0,<3.0.0
 pyjwt[crypto]==2.10.1
 python-dotenv==1.0.0
-python-multipart==0.0.19
+python-multipart==0.0.22
 sqlalchemy==2.0.20

setup.py

@@ -27,7 +27,7 @@ def get_version(version_file: str) -> str:
         "passlib[bcrypt] ==1.7.4",
         "email-validator >=1.1.0,<2.1",
         "pyjwt[crypto] ==2.10.1",
-        "python-multipart ==0.0.19",
+        "python-multipart ==0.0.22",
         "makefun >=1.11.2,<2.0.0",
         "pydantic>=2.0.0,<3.0.0",
         "python-dotenv",

src/filuta_fastapi_users/__init__.py

@@ -1,6 +1,6 @@
 """Ready-to-use and customizable users management for FastAPI."""
 
-__version__ = "12.1.1+9"
+__version__ = "12.1.1+10"
 
 from filuta_fastapi_users import models, schemas  # noqa: F401
 from filuta_fastapi_users.exceptions import InvalidID, InvalidPasswordException

src/filuta_fastapi_users/password.py

@@ -1,6 +1,6 @@
+import secrets
 from typing import Protocol
 
-from passlib import pwd
 from passlib.context import CryptContext
 
 
@@ -29,4 +29,4 @@ def hash(self, password: str) -> str:
         return self.context.hash(password)
 
     def generate(self) -> str:
-        return pwd.genword()
+        return secrets.token_urlsafe(32)

tests/test_package.py

@@ -6,7 +6,7 @@ def test_import() -> None:
 
 
 def test_version() -> None:
-    assert __version__ == "12.1.1+9"
+    assert __version__ == "12.1.1+10"
 
 
 def test_global_fixture(dummy_fixture: int) -> None: