SpongePowered / SpongeAuth / 38100706738

96%

push

github

chore(deps): update dependencies (#1996)

* fix(deps): bump Django to 5.2.17 LTS

5.1 has been out of security support since December 2025. Tested
against PG 18.3: the suite passes, there are no new migrations, and
system checks are clean.

Signed-off-by: Gabriel Harris-Rouquette <gabizou@me.com>

* fix(settings): restore hashed static files on 5.1+

Django 5.1 removed STATICFILES_STORAGE, so prod had silently fallen
back to unhashed static files. Move the manifest storage to STORAGES;
collectstatic post-processes all 217 files and every template
{% static %} path is in the manifest.

Signed-off-by: Gabriel Harris-Rouquette <gabizou@me.com>

* fix(deps): bump runtime dependencies

- Pillow 12.3, crispy-forms 2.7, autocomplete-light 5.0, django-rq 4.2,
  rq 2.12, psycopg2-binary 2.9.13, requests 2.34, pytz 2026.5,
  sentry-sdk 2.71, gunicorn 26.2
- django-rq 4 enqueues on DB commit by default, so SSO pings from
  inside a transaction wait for it to commit; the ping tests now run
  on-commit callbacks, and the fakeredis hook patches the new
  connection_utils module
- Disable gunicorn 26's control socket, which writes to $HOME and
  breaks on a read-only root filesystem

Signed-off-by: Gabriel Harris-Rouquette <gabizou@me.com>

---------

Signed-off-by: Gabriel Harris-Rouquette <gabizou@me.com>

340 of 372 branches covered (91.4%)

Branch coverage included in aggregate %.

1621 of 1667 relevant lines covered (97.24%)

0.97 hits per line