Bleach is deprecrated

[mweinelt]

Problem and impact

The upstream announced that the library is deprecated and recommends consumer to look elsewhere for a replacement.

Expected behaviour

Security relevant libraries consumed should be supported.

Steps to reproduce

pretalx/src/setup.py

Line 97 in bd7c792

"bleach~=6.0.0", # https://bleach.readthedocs.io/en/latest/changes.html

Screenshots

n/a

Link

mozilla/bleach#698

Browser (software, desktop or mobile?) and version

No response

Operating system, dependency versions

No response

Version

2.3.2/master

[rixx]

Security relevant libraries consumed should be supported.

Bleach explicitly will continue to add security fixes, updates for new Python versions, and even bug fixes for really bad bugs. It's in the issue you linked.

I'm of course happy to merge a contribution that replaces our use of bleach with something else that provides an equivalent set of features and APIs, if you have something in mind that you'd like to see in pretalx, but until then, we'll stick with bleach.