Upgrade to Django 6.0

.github/workflows/auto-fix-main-precommit.yml

@@ -95,15 +95,15 @@ jobs:
             ~/.cache/pypoetry
             ~/.cache/pip
             .venv
-          key: ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}-${{ hashFiles('**/pyproject.toml') }}
+          key: ${{ runner.os }}-poetry-py3.12-${{ hashFiles('**/poetry.lock') }}-${{ hashFiles('**/pyproject.toml') }}
           restore-keys: |
-            ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}-
-            ${{ runner.os }}-poetry-
+            ${{ runner.os }}-poetry-py3.12-${{ hashFiles('**/poetry.lock') }}-
+            ${{ runner.os }}-poetry-py3.12-
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.11.2'
+          python-version: '3.12'
 
       - name: Install Poetry
         run: pip install poetry

.github/workflows/auto-fix-pr-precommit.yml

@@ -108,15 +108,15 @@ jobs:
             ~/.cache/pypoetry
             ~/.cache/pip
             .venv
-          key: ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock', '**/pyproject.toml') }}
+          key: ${{ runner.os }}-poetry-py3.12-${{ hashFiles('**/poetry.lock', '**/pyproject.toml') }}
           restore-keys: |
-            ${{ runner.os }}-poetry-
+            ${{ runner.os }}-poetry-py3.12-
 
       - name: Set up Python
         if: steps.bot_check.outputs.skip == 'false'
         uses: actions/setup-python@v5
         with:
-          python-version: '3.11.2'
+          python-version: '3.12'
 
       - name: Install Poetry
         if: steps.bot_check.outputs.skip == 'false'

.github/workflows/ci-cd.yml

@@ -60,7 +60,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: 3.11.2
+          python-version: 3.12
 
       - name: Get Poetry cache directory
         id: poetry-cache
@@ -73,10 +73,10 @@ jobs:
             ~/.cache/pypoetry
             ~/.cache/pip
             .venv
-          key: ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}-${{ hashFiles('**/pyproject.toml') }}
+          key: ${{ runner.os }}-poetry-py3.12-${{ hashFiles('**/poetry.lock') }}-${{ hashFiles('**/pyproject.toml') }}
           restore-keys: |
-            ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}-
-            ${{ runner.os }}-poetry-
+            ${{ runner.os }}-poetry-py3.12-${{ hashFiles('**/poetry.lock') }}-
+            ${{ runner.os }}-poetry-py3.12-
 
       - name: Print memory usage
         run: free -h
@@ -102,7 +102,7 @@ jobs:
           repository: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name || github.repository }}
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.11.2
+          python-version: 3.12
       - name: Run pre-commit
         id: pre-commit
         run: |
@@ -281,7 +281,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.11.2
+          python-version: 3.12
       - name: Cache apt packages
         uses: actions/cache@v4
         id: apt-cache
@@ -299,7 +299,7 @@ jobs:
       - name: Install system dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y xvfb chromium-browser chromium-chromedriver
+          sudo apt-get install -y xvfb chromium-browser chromium-chromedriver libmemcached-dev zlib1g-dev
       - name: Copy apt cache to user directory
         if: always()
         run: |

.github/workflows/pre-commit-fix.yaml

@@ -45,7 +45,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Install pre-commit
         run: |

.github/workflows/regenerate-migrations.yml

@@ -43,7 +43,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Install Poetry
         run: |

.python-version

@@ -1 +1 @@
-3.11.2
+3.12

Dockerfile

@@ -1,5 +1,5 @@
 # Stage 1: Build stage
-FROM python:3.11.2 AS builder
+FROM python:3.12 AS builder
 
 ENV PYTHONUNBUFFERED 1
 WORKDIR /blt
@@ -42,13 +42,13 @@ RUN poetry install --no-root --no-interaction
 RUN pip install opentelemetry-api opentelemetry-instrumentation
 
 # Stage 2: Runtime stage
-FROM python:3.11.2-slim
+FROM python:3.12-slim
 
 ENV PYTHONUNBUFFERED 1
 WORKDIR /blt
 
 # Copy only necessary files from builder stage
-COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
 COPY --from=builder /usr/local/bin /usr/local/bin
 
 # Install runtime system dependencies

pyproject.toml

@@ -6,9 +6,9 @@ authors = ["OWASP BLT <you@example.com>"]
 license = "AGPLv3"
 
 [tool.poetry.dependencies]
-python = ">=3.11.2,<3.14"
+python = ">=3.12,<3.14"
 python-dotenv = "^1.1.0"
-Django = "^5.2.9"
+Django = "^6.0"
 dj-database-url = "^2.3.0"
 django-allauth = "^65.13.1"
 beautifulsoup4 = "^4.14.3"

website/migrations/0255_add_reviewer_contributor.py

@@ -37,7 +37,7 @@ class Migration(migrations.Migration):
         migrations.AddConstraint(
             model_name="githubreview",
             constraint=models.CheckConstraint(
-                check=models.Q(reviewer__isnull=False) | models.Q(reviewer_contributor__isnull=False),
+                condition=models.Q(reviewer__isnull=False) | models.Q(reviewer_contributor__isnull=False),
                 name="at_least_one_reviewer",
             ),
         ),

website/models.py

@@ -2402,7 +2402,7 @@ class GitHubReview(models.Model):
     class Meta:
         constraints = (
             models.CheckConstraint(
-                check=models.Q(reviewer__isnull=False) | models.Q(reviewer_contributor__isnull=False),
+                condition=models.Q(reviewer__isnull=False) | models.Q(reviewer_contributor__isnull=False),
                 name="at_least_one_reviewer",
             ),
         )