chore(setup): migrate from setuptools to hatchling

.editorconfig

@@ -32,3 +32,7 @@ indent_size = 2
 # Dockerfile
 [Dockerfile]
 indent_size = 4
+
+# Align TOML indenting with Tombi
+[*.toml]
+indent_size = 2

.github/workflows/i18n-push.yml

@@ -13,4 +13,5 @@ jobs:
     uses: inveniosoftware/invenio-i18n/.github/workflows/i18n-push-base.yml@master
     with:
       extract-backend: true
+      backend-package-path: flask_security
     secrets: inherit

.github/workflows/pypi-publish.yml

@@ -17,3 +17,4 @@ jobs:
     secrets: inherit
     with:
       babel-compile-catalog: true
+      backend-package-path: flask_security

.gitignore

@@ -55,3 +55,4 @@ Session.vim
 
 .venv
 
+uv.lock

.tx/config

@@ -6,9 +6,9 @@
 
 #
 # 1) Create message catalog:
-#    $ python setup.py extract_messages
-#    $ python setup.py init_catalog -l <lang>
-#    $ python setup.py compile_catalog
+#    $ pybabel extract -F pyproject.toml -o flask_security/translations/messages.pot flask_security
+#    $ pybabel init -i flask_security/translations/messages.pot -d flask_security/translations -l <lang>
+#    $ pybabel compile -d flask_security/translations --use-fuzzy
 # 2) Ensure project has been created on Transifex under the inveniosoftware
 #    organisation.
 # 3) Install the transifex-client

CHANGES

@@ -4,6 +4,14 @@ Flask-Security-Invenio Changelog
 Here you can see the full list of changes between each Flask-Security-Invenio
 release.
 
+Version 4.2.2
+-------------
+
+Released July 2nd 2026
+
+- chore(setup): migrate build backend from setuptools to hatchling
+- chore(format): reformat with black
+
 Version 4.2.1
 -------------
 

flask_security/__init__.py

@@ -58,7 +58,7 @@
     url_for_security,
 )
 
-__version__ = "4.2.1"
+__version__ = "4.2.2"
 __all__ = (
     "AnonymousUser",
     "auth_required",

flask_security/views.py

@@ -113,7 +113,7 @@ def register():
     return _security.render_template(
         config_value("REGISTER_USER_TEMPLATE"),
         register_user_form=form,
-        **_ctx("register")
+        **_ctx("register"),
     )
 
 
@@ -131,7 +131,7 @@ def send_confirmation():
     return _security.render_template(
         config_value("SEND_CONFIRMATION_TEMPLATE"),
         send_confirmation_form=form,
-        **_ctx("send_confirmation")
+        **_ctx("send_confirmation"),
     )
 
 
@@ -204,7 +204,7 @@ def forgot_password():
     return _security.render_template(
         config_value("FORGOT_PASSWORD_TEMPLATE"),
         forgot_password_form=form,
-        **_ctx("forgot_password")
+        **_ctx("forgot_password"),
     )
 
 
@@ -246,7 +246,7 @@ def reset_password(token):
         config_value("RESET_PASSWORD_TEMPLATE"),
         reset_password_form=form,
         reset_password_token=token,
-        **_ctx("reset_password")
+        **_ctx("reset_password"),
     )
 
 
@@ -269,7 +269,7 @@ def change_password():
     return _security.render_template(
         config_value("CHANGE_PASSWORD_TEMPLATE"),
         change_password_form=form,
-        **_ctx("change_password")
+        **_ctx("change_password"),
     )
 
 

pyproject.toml

@@ -1,3 +1,84 @@
+# SPDX-FileCopyrightText: 2022 CERN.
+# SPDX-FileCopyrightText: 2026 TU Wien.
+# SPDX-License-Identifier: MIT
+
+[project]
+name = "Flask-Security-Invenio"
+description = "Simple security for Flask apps."
+readme = "README.rst"
+requires-python = ">=3.9"
+license = "MIT"
+authors = [
+  { name = "CERN/TU Wien/JRC", email = "info@inveniosoftware.org" },
+]
+keywords = [
+  "flask",
+  "security",
+]
+classifiers = [
+  "Development Status :: 5 - Production/Stable",
+]
+dependencies = [
+  "email-validator>=1.0.5",
+  "flask>=1.1.4",
+  "flask-babel>=2.0.0",
+  "flask-login>=0.4.1",
+  "flask-mail>=0.9.1",
+  "flask-principal>=0.4.0",
+  "flask-wtf>=1.1.0",
+  "itsdangerous>=2.0",
+  "libpass>=1.9.0",
+  "markupsafe>=2.1.5",
+  "speaklater>=1.3",
+  "zxcvbn>=4.4.28",
+]
+dynamic = ["version"]
+
+[project.urls]
+Repository = "https://github.com/inveniosoftware/flask-security-invenio"
+
+[project.optional-dependencies]
+tests = [
+  "bcrypt>=3.1.0,<5.0.0",
+  "coverage>=5.3,<6",
+  "flask-sphinx-themes>=1.0.2",
+  "flask-sqlalchemy>=2.5.1",
+  "mock>=1.3.0",
+  "msgcheck>=2.9",
+  "pytest-black-ng>=0.4.0",
+  "pytest-cov>=2.10.1",
+  "pytest-flask>=1.0.0",
+  "pytest-isort>=1.2.0",
+  "pytest-pycodestyle>=2.2.0",
+  "pytest-pydocstyle>=2.2.0",
+  "pytest>=6,<9",
+  "sphinx>=4.2.0",
+]
+
 [build-system]
-requires = ["setuptools", "wheel", "babel>2.8"]
-build-backend = "setuptools.build_meta"
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.version]
+path = "flask_security/__init__.py"
+
+[tool.hatch.build.targets.wheel]
+packages = [
+  "/flask_security",
+]
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "/flask_security",
+]
+
+[tool.isort]
+profile = "black"
+
+[tool.pydocstyle]
+add_ignore = "D401"
+
+[tool.pytest.ini_options]
+addopts = "--black --isort --cov=flask_security --cov-report=term-missing --cache-clear"
+testpaths = "tests flask_security"
+live_server_scope = "module"

run-tests.sh

@@ -13,7 +13,6 @@ set -o errexit
 # Quit on unbound symbols
 set -o nounset
 
-python -m check_manifest --ignore ".*-requirements.txt"
 python -m sphinx.cmd.build -qnN docs docs/_build/html
 python -m pytest
 tests_exit_code=$?