[Vishalan]

Summary

Upgrades Django from 4.2.30 (end of life) to 5.2.17, and djangorestframework from 3.15.2 to 3.18.2.

• CTO-5250: Django CVE-2026-15307, CVE-2026-15337, CVE-2026-15830 are fixed in 5.2.17 (ticket's fix version).
• CTO-5553: DRF GHSA-3547-9m27-7rxg is fixed in 3.18.2. DRF 3.18 requires Django >= 5.2, so the two pins must move together.

Stacked on #354: the base branch is fix/cto-dep-bumps-enigma-nov26. Merge that first.

Testing

• Local venv (Python 3.11, sqlite): pytest 140 passed, 8 skipped. Same as main.
• manage.py check: no issues.
• manage.py makemigrations --check --dry-run: no changes.
• pylama and semgrep: clean.
• Docker image build not run yet: Colima VM disk lock on this machine.

Review notes

• The other pins that depend on Django (django-filter 22.1, django-mysql 4.7.1, django-stubs 1.14.0, django-ajax-datatable, social-auth-app-django) resolved with Django 5.2.17 without changes. The resolver confirmed this, and the test suite passed.
• This PR changes no application code. A runtime smoke test on staging is still recommended.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Central YAML (base), Organization UI (inherited), Workspace UI (inherited); Enforced overrides: Organization
• Review profile: ASSERTIVE
• Plan: Enterprise
• Run ID: ceb1df37-7c6d-4286-931c-5e1fefea60ff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts