Try to keep current working

Author: AlanCoding

pyproject.toml

@@ -133,23 +133,26 @@ legacy_tox_ini = """
 
     [testenv:py310-django5]
     deps =
-        Django>=5.2
         -r{toxinidir}/requirements/requirements_all.txt
         -r{toxinidir}/requirements/requirements_dev.txt
+    commands_pre =
+        python -m pip install --upgrade "Django==5.2.8"
     docker = db
 
     [testenv:py311-django5]
     deps =
-        Django>=5.2
         -r{toxinidir}/requirements/requirements_all.txt
         -r{toxinidir}/requirements/requirements_dev.txt
+    commands_pre =
+        python -m pip install --upgrade "Django==5.2.8"
     docker = db
 
     [testenv:py312-django5]
     deps =
-        Django>=5.2
         -r{toxinidir}/requirements/requirements_all.txt
         -r{toxinidir}/requirements/requirements_dev.txt
+    commands_pre =
+        python -m pip install --upgrade "Django==5.2.8"
     docker = db
 
     [docker:db]

requirements/requirements.in

@@ -3,7 +3,7 @@
 # if you are add a new feature which requires dependencies they should be in a separate requirements_<feature>.in file
 #
 cryptography
-Django>=5.2
+Django>=4.2.21,<4.3.0 # CVE-2024-45230, CVE-2024-56374
 djangorestframework
 django-crum
 inflection

requirements/requirements_all.txt

@@ -24,6 +24,18 @@ defusedxml==0.8.0rc2
     # via
     #   python3-openid
     #   social-auth-core
+django==4.2.21
+    # via
+    #   -r requirements/requirements.in
+    #   channels
+    #   django-auth-ldap
+    #   django-crum
+    #   django-flags
+    #   django-oauth-toolkit
+    #   django-redis
+    #   djangorestframework
+    #   drf-spectacular
+    #   social-auth-app-django
 django-auth-ldap==5.1.0
     # via -r requirements/requirements_authentication.in
 django-crum==0.7.9

requirements/requirements_dev.txt

@@ -1,6 +1,7 @@
 ansible                 # Used in build process to generate some configs
 black==25.1.0           # Linting tool, if changed update pyproject.toml as well
 build
+django==4.2.21
 django-debug-toolbar
 django-extensions
 djangorestframework