Upgrade and pin dependencies

.github/workflows/testing.yml

@@ -5,7 +5,7 @@ jobs:
     runs-on: ubuntu-latest # operating system your code will run on
     services:
       postgres:
-        image: postgres:13
+        image: postgres:16
         env:
           POSTGRES_USER: sadilar
           POSTGRES_PASSWORD: sadilar

app/templates/base.html

@@ -13,7 +13,7 @@
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.min.css" integrity="sha256-9kPW/n5nn53j4WMRYAxe9c1rCY96Oogo/MKSVdKzPmI=" crossorigin="anonymous">
     <link rel="icon" href="{% static 'img/favicon.png' %}" sizes="32x32" />
     {# htmx JS at the end of body seems to create problems when navigating through browser history #}
-    <script src="https://cdn.jsdelivr.net/npm/[email protected].1/dist/htmx.min.js" integrity="sha256-bUqqSw0+i0yR+Nl7kqNhoZsb1FRN6j9mj9w+YqY5ld8=" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/[email protected].2/dist/htmx.min.js" integrity="sha256-4XRtl1nsDUPFwoRFIzOjELtf1yheusSy3Jv0TXK1qIc=" crossorigin="anonymous"></script>
     <meta name="htmx-config" content='{% include "app/htmx-config.json" %}'>
     <style>{% include "app/css/local.css" %}</style>
 </head>

doc/upgrades.md

@@ -0,0 +1,48 @@
+Upgrades
+========
+Dependencies are currently spread out in a number of areas. This file tries to
+summarise them.
+
+Policy around upgrades will eventually emerge. At the start of the project, the
+focus is on the future, and therefore on the latest versions, possibly with a
+focus on long-term support (LTS) versions.
+
+
+Python
+------
+See the Python version in `Dockerfile`, and maybe in some CI related bits.
+
+PostgreSQL
+----------
+Check `docker-compose.ytml`, test setups in CI and probably things in any real
+deployments.
+
+Python dependencies
+-------------------
+Review `requirements.txt` and related files. We should still move to transitive
+pinning with something like poetry in future. We upgrade Django aggressively
+until we reach version 5.2 (LTS), and after that we will likely stay on LTS
+releases.
+
+Look up each package at https://pypi.org/
+
+CSS
+---
+Bootstrap is the main consideration. Versions are available here:
+https://getbootstrap.com/docs/versions/
+
+To review supported devices, see the appropriate page for the version, e.g.
+https://getbootstrap.com/docs/5.3/getting-started/browsers-devices/
+
+Obviously you might want to consider support information from
+https://caniuse.com or MDN
+https://developer.mozilla.org/en-US/docs/Web/CSS/word-break
+
+JavaScript
+----------
+We try to keep JS dependencies minimal. Check `base.html`. Obviously some JS is
+also included via Django, but we only consider Django as a whole. Some minimal
+JS is also part of Bootstrap (see above).
+
+For HTMX, release information is available here:
+https://github.com/bigskysoftware/htmx/releases

docker-compose.yml

@@ -3,7 +3,7 @@
 
 services:
   db:
-    image: postgres:12
+    image: postgres:16
     container_name: sadilar-terminology-db
     environment:
       - POSTGRES_DB=term_db

requirements-dev.txt

@@ -1,6 +1,6 @@
 -r requirements.txt
 django-debug-toolbar
 django-extensions
+faker
 pygraphviz
 ruff
-faker

requirements-test.txt

@@ -1,5 +1,5 @@
 -r requirements.txt
 django-debug-toolbar
 django-extensions
-ruff
 faker
+ruff

requirements.txt

@@ -1,11 +1,11 @@
-django==5.0.6
-django-environ
-django-htmx
-django-simple-history
-gunicorn
-psycopg2-binary
-whitenoise
-pillow
-python-magic
-pypdf
-django-filter
+django-environ==0.11.2
+django-filter==24.3
+django-htmx==1.19.0
+django-simple-history==3.7.0
+django==5.0.8
+gunicorn==23.0.0
+pillow==10.4.0
+psycopg2-binary==2.9.9
+pypdf==4.3.1
+python-magic==0.4.27
+whitenoise==6.7.0