Update python packages (#4659)

Author: frjo

.github/workflows/codeql-analysis.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/deploy-docs.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/hypha-ci.yml

@@ -18,8 +18,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version-file: ".python-version"
 
@@ -58,13 +58,13 @@ jobs:
         group: [1, 2, 3]
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version-file: ".python-version"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
           cache-dependency-glob: "requirements**.txt"

.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: "0.6.14"
+    rev: "0.9.22"
     hooks:
       - id: uv-export
         name: uv-export requirements/prod.txt
@@ -36,7 +36,7 @@ repos:
           ]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.11.6"
+    rev: "v0.14.10"
     hooks:
       # Run the linter.
       - id: ruff
@@ -45,7 +45,7 @@ repos:
       - id: ruff-format
 
   - repo: https://github.com/rtts/djhtml
-    rev: "3.0.7"
+    rev: "3.0.10"
     hooks:
       - id: djhtml
         files: .*/templates/.*\.html$
@@ -62,7 +62,7 @@ repos:
         types_or: [html, css]
 
   - repo: https://github.com/biomejs/pre-commit
-    rev: "v2.0.0-beta.1"
+    rev: "v2.3.10"
     hooks:
       - id: biome-check
         additional_dependencies: ["@biomejs/biome@1.9.4"]
@@ -77,11 +77,11 @@ repos:
           - stylelint@16.11.0
           - stylelint-config-standard-scss@13.1.0
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.24.3
+    rev: v8.30.0
     hooks:
       - id: gitleaks
 
   - repo: https://github.com/crate-ci/typos
-    rev: v1.31.1
+    rev: v1.41.0
     hooks:
       - id: typos

.python-version

@@ -1 +1 @@
-3.12.11
+3.12

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12.11-bookworm
+FROM python:3.12-bookworm
 
 # Add venv/bin to PATH.
 ENV PATH="/opt/app/.venv/bin:/usr/local/bin:$PATH"
@@ -10,11 +10,11 @@ ENV UV_LINK_MODE=copy
 WORKDIR /opt/app
 
 # Install node.
-COPY --from=node:24.1-slim /usr/local/bin /usr/local/bin
-COPY --from=node:24.1-slim /usr/local/lib/node_modules /usr/local/lib/node_modules
+COPY --from=node:24-slim /usr/local/bin /usr/local/bin
+COPY --from=node:24-slim /usr/local/lib/node_modules /usr/local/lib/node_modules
 
 # Install uv.
-COPY --from=ghcr.io/astral-sh/uv:0.5.13 /uv /uvx /usr/local/bin
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin
 
 # Install node dependencies.
 COPY package*.json ./

docker/prod/Dockerfile

@@ -1,7 +1,7 @@
 #
 # Builder stage.
 #
-FROM python:3.12.11-bookworm AS builder
+FROM python:3.12-bookworm AS builder
 
 # Add venv/bin to PATH.
 ENV PATH="/opt/app/.venv/bin:/usr/local/bin:$PATH"
@@ -19,11 +19,11 @@ WORKDIR /opt/app
 RUN mkdir -p ./hypha/static_compiled && mkdir -p ./hypha/media
 
 # Install node.
-COPY --from=node:24.1-slim /usr/local/bin /usr/local/bin
-COPY --from=node:24.1-slim /usr/local/lib/node_modules /usr/local/lib/node_modules
+COPY --from=node:24-slim /usr/local/bin /usr/local/bin
+COPY --from=node:24-slim /usr/local/lib/node_modules /usr/local/lib/node_modules
 
 # Install uv.
-COPY --from=ghcr.io/astral-sh/uv:0.5.13 /uv /uvx /usr/local/bin
+COPY --from=ghcr.io/astral-sh/uv:0.5.36 /uv /uvx /usr/local/bin
 
 # Install node dependencies.
 COPY package*.json ./
@@ -45,7 +45,7 @@ RUN npm run build && python manage.py collectstatic --noinput --verbosity=0
 #
 # Production stage.
 #
-FROM python:3.12.11-slim-bookworm
+FROM python:3.12-slim-bookworm
 
 # Add venv/bin to PATH.
 ENV PATH="/opt/app/.venv/bin:/usr/local/bin:$PATH"

docs/references/workflows.md

@@ -43,7 +43,7 @@ Once an application is submitted (`INITIAL_STATE`) — it can transition into th
 
 ### 👳 Request with same time review
 
-This workflow is a single stage process with an advisory council review or external review stage -- includes functionalties for external reviewers like advisory board members to access applications and submit reviews.
+This workflow is a single stage process with an advisory council review or external review stage -- includes functionalities for external reviewers like advisory board members to access applications and submit reviews.
 
 It is very similar to the "Request with external review" workflow, see below, but the internal and external review step happens at the same step.
 
@@ -62,7 +62,7 @@ Once an application is submitted (`INITIAL_STATE`) — it can transition into th
 
 ### 👳 Request with external review
 
-This workflow is a single stage process with an advisory council review or external review stage -- includes functionalties for external reviewers like advisory board members to access applications and submit reviews.
+This workflow is a single stage process with an advisory council review or external review stage -- includes functionalities for external reviewers like advisory board members to access applications and submit reviews.
 
 Proposal Persona: This funding organization relies on external partners for evaluations. Proposals submitted to this workflow are reviewed by staff members and an advisory board that is made up of trusted community members.
 
@@ -86,7 +86,7 @@ Once an application is submitted (`INITIAL_STATE`) — it can transition into th
 
 ### 👪 Request with community review
 
-This workflow is a single stage application process with functionalties for external reviewers, including applicants to carry out peer review of each other applications.
+This workflow is a single stage application process with functionalities for external reviewers, including applicants to carry out peer review of each other applications.
 
 **Proposal Persona:** 
 

hypha/apply/users/urls.py

@@ -3,7 +3,8 @@
 from django.urls import include, path, reverse_lazy
 from django.views.generic import RedirectView
 from django_ratelimit.decorators import ratelimit
-from elevate.views import elevate as elevate_view
+
+from hypha.elevate.views import elevate as elevate_view
 
 from .views import (
     AccountView,

hypha/apply/users/views.py

@@ -37,9 +37,6 @@
 from django_htmx.http import HttpResponseClientRedirect
 from django_otp import devices_for_user
 from django_ratelimit.decorators import ratelimit
-from elevate.mixins import ElevateMixin
-from elevate.utils import grant_elevated_privileges
-from elevate.views import redirect_to_elevate
 from hijack.views import AcquireUserView
 from social_django.utils import psa
 from social_django.views import complete
@@ -54,6 +51,9 @@
 from wagtail.users.views.users import change_user_perm
 
 from hypha.core.mail import MarkdownMail
+from hypha.elevate.mixins import ElevateMixin
+from hypha.elevate.utils import grant_elevated_privileges
+from hypha.elevate.views import redirect_to_elevate
 
 from .decorators import require_oauth_whitelist
 from .forms import (