chore: finalize 1.7.0 modernization and documentation

- Configured .bumpversion.cfg to manage pyproject.toml and __init__.py versions
- Documented release process in CONTRIBUTING.rst
- Enforced Python 3.10+ requirement in pyproject.toml
- Bumped coverage, ruff, pip-audit, freezegun, tox, and mypy to latest versions
- Cleaned up unused imports in tests.py
- Updated CHANGELOG.rst for the 1.7.0 release

Author: neuhaus

.bumpversion.cfg

@@ -0,0 +1,12 @@
+[bumpversion]
+current_version = 1.7.0
+commit = True
+tag = True
+
+[bumpversion:file:pyproject.toml]
+search = version = "{current_version}"
+replace = version = "{new_version}"
+
+[bumpversion:file:snappass/__init__.py]
+search = __version__ = '{current_version}'
+replace = __version__ = '{new_version}'

CHANGELOG.rst

@@ -1,9 +1,18 @@
 Version 1.7.0
 -------------
-* Migrate encryption to client-side (browser) using AES-GCM and Web Crypto API.
-* Remove `cryptography` dependency.
-* APIs now expect pre-encrypted secrets.
-* Migrate to `pyproject.toml` and modern Python formatting.
+* **BREAKING:** Migrate encryption to client-side (browser) using AES-GCM and Web Crypto API.
+  The server only stores encrypted data and never sees the password.
+* **BREAKING:** APIs now expect pre-encrypted secrets.
+* Remove `cryptography` python dependency.
+* Removed external JavaScript dependencies (jQuery, Bootstrap JS, Clipboard.js) 
+  in favor of modern vanilla browser APIs.
+* Security: Integrated Trivy and Hadolint into the Docker build pipeline.
+* Security: Upgraded base Docker image to `python:3.14-slim-trixie` and added `pip-audit` to CI pipelines.
+* Modernization: Consolidated all dependencies into `pyproject.toml` (removed legacy requirements.txt).
+* Modernization: Enforced Python 3.10+ as the minimum supported version.
+* Modernization: Bumped Flask to 3.1+, Flask-Babel to 4.0+, and redis-py to 5.0+.
+* Modernization: Configured `bumpversion` to handle automated version releases.
+* Fix: Extracted Redis database logic into a dedicated `storage.py` abstraction layer.
 
 Version 1.6.0
 -------------

CONTRIBUTING.rst

@@ -115,3 +115,23 @@ Before you submit a pull request, check that it meets these guidelines:
    your new functionality into a function with a docstring, and add the
    feature to the list in README.rst.
 3. The pull request should work on all supported Python versions.
+
+Releasing a New Version
+-----------------------
+
+This project uses `bumpversion <https://github.com/peritus/bumpversion>`_ to manage releases.
+The `.bumpversion.cfg` file is configured to automatically update the version strings in both `pyproject.toml` and `snappass/__init__.py`, create a new git commit, and generate a git tag.
+
+When you are ready to make a release, ensure you are on the main branch with a clean working directory, and run one of the following commands depending on the type of release (major, minor, or patch):
+
+::
+
+    $ bumpversion patch  # (e.g. 1.7.0 -> 1.7.1)
+    $ bumpversion minor  # (e.g. 1.7.0 -> 1.8.0)
+    $ bumpversion major  # (e.g. 1.7.0 -> 2.0.0)
+
+Then, push the commit and the tags to GitHub:
+
+::
+
+    $ git push origin master --tags

README.rst

@@ -44,7 +44,7 @@ Requirements
 ------------
 
 * `Redis`_ 6.2.0 or newer
-* Python 3.8+
+* Python 3.10+
 
 .. _Redis: https://redis.io/
 

pyproject.toml

@@ -11,6 +11,7 @@ authors = [
     {name = "Pinterest", email = "joec@pinterest.com"}
 ]
 license = {file = "LICENSE"}
+requires-python = ">=3.10"
 classifiers = [
     "License :: OSI Approved :: MIT License",
     "Programming Language :: Python",
@@ -36,15 +37,15 @@ select = ["E", "F", "S"]
 
 [project.optional-dependencies]
 dev = [
-    "coverage==7.6.0",
+    "coverage>=7.15.2",
     "fakeredis>=2.26.0",
-    "ruff==0.6.2",
-    "pip-audit==2.7.3",
-    "freezegun==1.5.1",
+    "ruff>=0.16.0",
+    "pip-audit>=2.10.1",
+    "freezegun>=1.5.5",
     "pytest>=9.0.3",
     "pytest-cov==5.0.0",
-    "tox==4.23.0",
+    "tox>=4.58.0",
     "bumpversion==0.6.0",
     "wheel>=0.46.2",
-    "mypy==1.11.1"
+    "mypy>=2.3.0"
 ]