misc fixups

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "pip" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

requirements.txt

@@ -30,4 +30,5 @@ pyright==1.1.390
 ruff==0.8.2
 httpx==0.27.2
 questionary==2.1.0
-pathspec==0.12.1
+pathspec==0.12.1
+bleach==6.2.0

src/utilities/syntax_checker_functions.py

@@ -3,6 +3,7 @@
 import sass
 from lxml import etree
 import re
+import bleach
 from src.utilities.print_formatters import print_formatted
 
 
@@ -145,10 +146,7 @@ def parse_vue_basic(content):
     if template_part_response != "Valid syntax":
         return template_part_response
 
-    try:
-        script = re.search(r'<script[^>]*>(.*?)</script>', content, re.DOTALL).group(1)
-    except AttributeError:
-        return "Script part has no valid open/closing tags."
+    script = bleach.clean(content, tags=[], strip=True)
     script_part_response = check_bracket_balance(script)
     if script_part_response != "Valid syntax":
         return script_part_response