Set for 5.7.0

Copy publish github actions from flask to try to get working with latest upload/download artifacts.

Author: jwag956

.github/workflows/publish-too.yaml

@@ -6,6 +6,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    outputs:
+      artifact-id: ${{ steps.upload-artifact.outputs.artifact-id }}
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
@@ -21,19 +23,23 @@ jobs:
           pip install tox
           tox -e makedist-too
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        id: upload-artifact
         with:
-          path: ./dist
+          name: dist
+          path: dist/
+          if-no-files-found: error
   create-release:
     needs: [build]
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
       - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          artifact-ids: ${{ needs.build.outputs.artifact-id }}
+          path: dist/
       - name: create release
-        run: >
-          gh release create --draft --repo ${{ github.repository }}
-          ${{ github.ref_name }}-Too artifact/*
+        run: gh release create --draft --repo ${{ github.repository }} ${{ github.ref_name }}-Too dist/*
         env:
           GH_TOKEN: ${{ github.token }}
   publish-pypi-too:
@@ -48,6 +54,9 @@ jobs:
       id-token: write
     steps:
       - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          artifact-ids: ${{ needs.build.outputs.artifact-id }}
+          path: dist/
       - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
-          packages-dir: artifact/
+          packages-dir: dist/

.github/workflows/publish.yaml

@@ -6,6 +6,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    outputs:
+      artifact-id: ${{ steps.upload-artifact.outputs.artifact-id }}
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
@@ -21,19 +23,23 @@ jobs:
           pip install tox
           tox -e makedist
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        id: upload-artifact
         with:
-          path: ./dist
+          name: dist
+          path: dist/
+          if-no-files-found: error
   create-release:
     needs: [build]
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
       - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          artifact-ids: ${{ needs.build.outputs.artifact-id }}
+          path: dist/
       - name: create release
-        run: >
-          gh release create --draft --repo ${{ github.repository }}
-          ${{ github.ref_name }} artifact/*
+        run: gh release create --draft --repo ${{ github.repository }} ${{ github.ref_name }} dist/*
         env:
           GH_TOKEN: ${{ github.token }}
   publish-pypi:
@@ -48,6 +54,9 @@ jobs:
       id-token: write
     steps:
       - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          artifact-ids: ${{ needs.build.outputs.artifact-id }}
+          path: dist/
       - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
-          packages-dir: artifact/
+          packages-dir: dist/

.pre-commit-config.yaml

@@ -15,12 +15,12 @@ repos:
     -   id: check-merge-conflict
     -   id: fix-byte-order-marker
 -   repo: https://github.com/asottile/pyupgrade
-    rev: v3.21.0
+    rev: v3.21.1
     hooks:
     -   id: pyupgrade
         args: [--py310-plus]
 -   repo: https://github.com/psf/black
-    rev: 25.9.0
+    rev: 25.11.0
     hooks:
     -   id: black
 -   repo: https://github.com/pycqa/flake8

CHANGES.rst

@@ -6,7 +6,7 @@ Here you can see the full list of changes between each Flask-Security release.
 Version 5.7.0
 -------------
 
-Released XXX
+Released November 14, 2025
 
 This release contains a set of small backward incompatible changes. Please read these notes carefully.
 
@@ -17,21 +17,22 @@ Features & Improvements
 
 Fixes
 +++++
-- (:issue:`1109`) Fix broken link in docs and improve docstrings/typing for util classes.
+- (:pr:`1115`) Fix broken link in docs and improve docstrings/typing for util classes.
 - (:issue:`1127`) Add nonce to script tags if configured to support nonce-based Content-Security-Policy (ahanak).
 - (:issue:`1133`) Remove unnecessary (optional) dependency on sqlalchemy_utils.
 - (:pr:`1140`) Fix localization of tf_select choices.
-- (:pr:`xx`) Support bcrypt 5.0 - See below for important compatibility concerns.
+- (:pr:`1143`) Support bcrypt 5.0 - See below for important compatibility concerns.
    This also replaces passlib with libpass for all versions.
 
 Docs and Chores
 +++++++++++++++
+- (:pr:`1144`) Update ES and IT translations (gissimo)
 - (:pr:`1106`) Drop support for Python 3.9. This removes the dependency on importlib_resources,
    updates pypy to 3.10, and uses 3.12 as base python for tests/tox.
 - (:pr:`1112`) Flip :py:data:`SECURITY_USE_REGISTER_V2` default to ``True``.
 - (:pr:`1117`) Flip default mail package back to Flask-Mail (from Flask-Mailman).
 - (:issue:`1139`) Change external facing terminology from 'WebAuthn Credential' to 'passkey'.
-- (:pr:`xx`) Setting of xx_util_cls from kwargs which was deprecated in 5.6.1 has been removed.
+- (:pr:`1142`) Setting of xx_util_cls from kwargs which was deprecated in 5.6.1 has been removed.
    The BACKWARDS_COMPAT_UNAUTHN option (code) which has been deprecated since 5.4 has been removed.
 
 Backwards Compatibility Concerns

flask_security/models/sqla.py

@@ -38,7 +38,8 @@
 
 class FsModels:
     """
-    Helper class for model mixins.
+    Helper class for model mixins when utilizing the pre-packaged models
+    for Flask-SQLAlchemy-Lite.
     """
 
     roles_users = None

pyproject.toml

@@ -49,7 +49,7 @@ dependencies = [
 [project.optional-dependencies]
 babel = ["babel>=2.12.1", "flask_babel>=4.0.0"]
 fsqla = ["flask_sqlalchemy>=3.1.0", "sqlalchemy>=2.0.18"]
-common = ["argon2_cffi>=23.1.0", "bcrypt>4.2.1", "flask_mail>=0.10.0", "bleach>=6.0.0"]
+common = ["argon2_cffi>=23.1.0", "bcrypt>=4.2.1", "flask_mail>=0.10.0", "bleach>=6.0.0"]
 mfa = ["cryptography>=42.0.4", "qrcode>=7.4.2", "phonenumberslite>=8.13.11", "webauthn>=2.5.0"]
 low = [
     # Lowest supported versions