chore: upgrade Django 4.2 → 5.2

apps/api/plane/db/migrations/0122_alter_draftissue_assignees_alter_issue_assignees_and_more.py

@@ -0,0 +1,29 @@
+# Generated by Django 5.2.15 on 2026-06-26 15:33
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('db', '0121_alter_estimate_type'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='draftissue',
+            name='assignees',
+            field=models.ManyToManyField(blank=True, related_name='draft_assignee', through='db.DraftIssueAssignee', through_fields=('draft_issue', 'assignee'), to=settings.AUTH_USER_MODEL),
+        ),
+        migrations.AlterField(
+            model_name='issue',
+            name='assignees',
+            field=models.ManyToManyField(blank=True, related_name='assignee', through='db.IssueAssignee', through_fields=('issue', 'assignee'), to=settings.AUTH_USER_MODEL),
+        ),
+        migrations.AlterField(
+            model_name='module',
+            name='members',
+            field=models.ManyToManyField(blank=True, related_name='module_members', through='db.ModuleMember', through_fields=('module', 'member'), to=settings.AUTH_USER_MODEL),
+        ),
+    ]

apps/api/plane/tests/contract/app/test_authentication.py

@@ -20,6 +20,33 @@
 from plane.license.models import Instance
 
 
+def _clear_auth_throttle_keys():
+    """Delete only the AuthenticationThrottle history keys from the shared cache.
+
+    DRF's SimpleRateThrottle stores request history under
+    ``throttle_<scope>_<ident>`` keys, so scoping the pattern to
+    ``throttle_authentication_`` removes just this throttle's entries instead
+    of wiping unrelated cache state.
+    """
+    cache.delete_pattern("throttle_authentication_*")
+
+
+@pytest.fixture(autouse=True)
+def _reset_auth_throttle_cache():
+    """Clear the auth throttle state around every test in this module.
+
+    The auth endpoints apply a per-IP throttle (AuthenticationThrottle) whose
+    request history lives in the Django cache. Because the test session reuses a
+    single cache, that count leaks across tests and trips RATE_LIMIT_EXCEEDED in
+    classes that don't reset it. This mirrors the per-class ``_clear_state``
+    fixtures already used by the throttle / verify-attempt classes, applied
+    module-wide so every auth test starts from a clean throttle state.
+    """
+    _clear_auth_throttle_keys()
+    yield
+    _clear_auth_throttle_keys()
+
+
 @pytest.fixture
 def setup_instance(db):
     """Create and configure an instance for authentication tests"""

apps/api/plane/urls.py

@@ -4,6 +4,7 @@
 
 """plane URL Configuration"""
 
+from django.apps import apps
 from django.conf import settings
 from django.urls import include, path, re_path
 from drf_spectacular.views import (
@@ -38,7 +39,7 @@
         ),
     ]
 
-if settings.DEBUG:
+if settings.DEBUG and apps.is_installed("debug_toolbar"):
     try:
         import debug_toolbar
 

apps/api/requirements/base.txt

@@ -1,45 +1,45 @@
 # base requirements
 
 # django
-Django==4.2.30
+Django==5.2.15
 # rest framework
-djangorestframework==3.15.2
+djangorestframework==3.17.1
 # postgres
-psycopg==3.3.0
-psycopg-binary==3.3.0
-psycopg-c==3.3.0
-dj-database-url==2.1.0
+psycopg==3.3.4
+psycopg-binary==3.3.4
+psycopg-c==3.3.4
+dj-database-url==3.0.1
 # redis
 redis==5.0.4
-django-redis==5.4.0
+django-redis==7.0.0
 # cors
-django-cors-headers==4.3.1
+django-cors-headers==4.9.0
 # celery
-celery==5.4.0
-django_celery_beat==2.6.0
-django-celery-results==2.5.1
+celery==5.5.3
+django_celery_beat==2.9.0
+django-celery-results==2.6.0
 # file serve
-whitenoise==6.11.0
+whitenoise==6.12.0
 # fake data
 faker==25.0.0
 # filters
-django-filter==24.2
+django-filter==25.2
 # json model
 jsonmodels==2.7.0
 # storage
-django-storages==1.14.2
+django-storages==1.14.6
 # user management
 django-crum==0.7.9
 # web server
 uvicorn==0.29.0
 # sockets
-channels==4.1.0
+channels==4.3.2
 # ai
 openai==1.63.2
 # slack
 slack-sdk==3.27.1
 # apm
-scout-apm==3.1.0
+scout-apm==3.5.3
 # xlsx generation
 openpyxl==3.1.2
 # logging
@@ -72,6 +72,6 @@ opentelemetry-instrumentation-django==0.49b1
 opentelemetry-exporter-otlp==1.28.1
 opentelemetry-exporter-otlp-proto-grpc==1.28.1
 # OpenAPI Specification
-drf-spectacular==0.28.0
+drf-spectacular==0.29.0
 # html sanitizer
 nh3==0.2.18

apps/api/requirements/local.txt

@@ -1,5 +1,5 @@
 -r base.txt
 # debug toolbar
-django-debug-toolbar==4.3.0
+django-debug-toolbar==6.0.0
 # formatter
 ruff==0.9.7

apps/api/requirements/test.txt

@@ -1,7 +1,7 @@
 -r base.txt
 # test framework
 pytest==9.0.3
-pytest-django==4.5.2
+pytest-django==4.12.0
 pytest-cov==4.1.0
 pytest-xdist==3.3.1
 pytest-mock==3.11.1