Merge branch 'main' into claude/issue-4408-20250727-1301

Author: marcoacierno

.github/workflows/backend-checks.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.11.6"
+          python-version: "3.13.5"
       - name: Install uv
         uses: astral-sh/setup-uv@v4
         id: setup-uv

.github/workflows/backend-test.yml

@@ -38,7 +38,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.11.6"
+          python-version: "3.13.5"
       - name: Install uv
         uses: astral-sh/setup-uv@v4
         id: setup-uv

.tool-versions

@@ -1,6 +1,6 @@
 nodejs    18.17.1
 terraform 1.3.4
-python    3.11.2
+python    3.13.5
 rust      1.61.0
 pnpm      9
 opentofu  1.9.0

Dockerfile.python.local

@@ -1,6 +1,6 @@
 ARG FUNCTION_DIR="/home/app/"
 
-FROM python:3.11
+FROM python:3.13.5
 
 RUN apt update -y && apt install -y ffmpeg libsm6 libxext6
 

backend/Dockerfile

@@ -1,7 +1,7 @@
 # check=skip=SecretsUsedInArgOrEnv
 ARG FUNCTION_DIR="/home/app"
 
-FROM python:3.11-slim AS base
+FROM python:3.13.5-slim AS base
 
 ENV DJANGO_SETTINGS_MODULE=pycon.settings.prod \
     AWS_MEDIA_BUCKET=example \
@@ -72,7 +72,7 @@ ENV LIBRARY_PATH=/lib:/usr/lib LD_LIBRARY_PATH=/lib:/usr/lib
 
 RUN apt-get update -y && apt-get install -y curl
 
-RUN groupadd -r app && useradd -r -g app app && mkdir -p ${FUNCTION_DIR} && chown -R app:app ${FUNCTION_DIR} && mkdir -p /tmp/pycon && chown -R app:app /tmp/pycon
+RUN groupadd -r app && useradd -r -g app app && mkdir -p ${FUNCTION_DIR} && chown -R app:app ${FUNCTION_DIR}
 
 COPY --chown=app:app --from=js-stage ${FUNCTION_DIR}/dist/*.html ${FUNCTION_DIR}/custom_admin/templates/astro/
 COPY --chown=app:app --from=js-stage ${FUNCTION_DIR}/dist/widgets/*.html ${FUNCTION_DIR}/custom_admin/templates/astro/widgets/
@@ -83,8 +83,6 @@ COPY --chown=app:app . ${FUNCTION_DIR}
 
 USER app
 
-VOLUME ["/tmp/pycon"]
-
 RUN mkdir -p assets && .venv/bin/python manage.py collectstatic --noinput
 
 ENTRYPOINT ["/home/app/.venv/bin/gunicorn"]

backend/pyproject.toml

@@ -2,7 +2,7 @@
 [tool.ruff]
 line-length = 88
 exclude = ["migrations"]
-target-version = "py311"
+target-version = "py313"
 
 [tool.ruff.lint.isort]
 known-first-party = [
@@ -42,11 +42,11 @@ known-first-party = [
 
 
 [project]
-requires-python = "<3.13,>=3.11"
+requires-python = ">=3.13.5"
 dependencies = [
     "django==5.1.4",
     "django-environ==0.10.0",
-    "django-model-utils==4.5.1",
+    "django-model-utils==5.0.0",
     "django-timezone-field==7.0",
     "certifi==2024.7.4",
     "chardet==5.2.0",
@@ -56,7 +56,7 @@ dependencies = [
     "aniso8601==9.0.1",
     "whitenoise==6.7.0",
     "django-ordered-model==3.5",
-    "uWSGI==2.0.26",
+    "uwsgi==2.0.30",
     "django-storages==1.14.4",
     "sentry-sdk==2.11.0",
     "boto3==1.35.76",
@@ -66,7 +66,7 @@ dependencies = [
     "hashids<2.0.0,>=1.2.0",
     "django-autocomplete-light==3.9.4",
     "django-queryinspect<2.0.0,>=1.1.0",
-    "lxml<5.0.0,>=4.5.0",
+    "lxml==6.0.0",
     "unidecode<2.0.0,>=1.1.1",
     "strawberry-graphql==0.243.1",
     "Werkzeug<2.0.0,>=1.0.1",
@@ -89,7 +89,7 @@ dependencies = [
     "Jinja2>=3.1.3",
     "icalendar>=5.0.11",
     "pyclamd>=0.4.0",
-    "magika>=0.5.1",
+    "magika==0.6.2",
     "tzdata>=2024.1",
     "wagtail-factories==4.2.1",
     "google-auth-oauthlib>=1.2.1",

backend/uv.lock

@@ -55,8 +55,6 @@ def __init__(
         self.merged_file = None
 
     def run(self) -> list[str]:
-        os.makedirs("/tmp/pycon/", exist_ok=True)
-
         self.storage = storages["default"]
         self.s3_client = self._get_s3_client()
         self.download_link = self.get_download_link()
@@ -188,7 +186,7 @@ def merge_parts(self, parts: list[str]):
 
         self.merged_file = tempfile.NamedTemporaryFile(
             "wb",
-            prefix=f"/tmp/pycon/wetransfer_{self.wetransfer_to_s3_transfer_request.id}",
+            prefix=f"wetransfer_{self.wetransfer_to_s3_transfer_request.id}",
             suffix=self.extension,
             delete=False,
         )
@@ -209,7 +207,7 @@ def download_part(self, part_info: PartInfo) -> str:
 
             part_file = tempfile.NamedTemporaryFile(
                 "wb",
-                prefix=f"/tmp/pycon/wetransfer_{self.wetransfer_to_s3_transfer_request.id}.part{part_info.part_number}",
+                prefix=f"wetransfer_{self.wetransfer_to_s3_transfer_request.id}.part{part_info.part_number}",
                 suffix=self.extension,
                 delete=False,
             )

backend/video_uploads/transfer.py

@@ -25,7 +25,7 @@
     "@graphql-codegen/typescript-react-apollo": "^4.3.2",
     "@neshca/cache-handler": "^1.9.0",
     "@python-italia/pycon-styleguide": "0.1.210",
-    "@sentry/nextjs": "^8.45.0",
+    "@sentry/nextjs": "^9.42.0",
     "@vercel/analytics": "^1.1.1",
     "@vercel/og": "^0.6.5",
     "@vercel/speed-insights": "^1.0.12",
@@ -42,7 +42,7 @@
     "graphql-tag": "^2.12.6",
     "marksy": "^8.0.0",
     "moment": "^2.29.1",
-    "next": "15.2.3",
+    "next": "15.2.4",
     "next-cookies": "^2.0.3",
     "pdfkit": "^0.15.1",
     "react": "19.0.0",