chore: upgrade multiple dependencies

Makefile

@@ -48,6 +48,8 @@ dev: virtualenv
 	uv sync --frozen --extra dev
 
 outdated:
+	@echo "-> Audit the project's dependencies for known vulnerabilities"
+	uv audit
 	@echo "-> Check for outdated packages (with 7 days cooldown)"
 	uv pip list --outdated \
 		--no-config \
@@ -59,11 +61,17 @@ upgrade:
 		echo "Usage: make upgrade PACKAGE=django==x.x.x"; \
 		exit 1; \
 	fi
-	@echo "-> Download $(PACKAGE) wheels"
-	@${ACTIVATE} pip download $(PACKAGE) \
+	@echo "-> Download $(PACKAGE) wheels for Linux x86_64"
+	pip download $(PACKAGE) \
+		--only-binary=:all: \
+		--platform manylinux_2_28_x86_64 \
+		--platform manylinux_2_17_x86_64 \
+		--python-version 3.14 \
+		--dest ./thirdparty/dist/
+	@echo "-> Download $(PACKAGE) wheels for macOS ARM64"
+	pip download $(PACKAGE) \
 		--only-binary=:all: \
 		--platform macosx_11_0_arm64 \
-		--platform manylinux2014_x86_64 \
 		--python-version 3.14 \
 		--dest ./thirdparty/dist/
 	@echo "-> Update pyproject.toml and uv.lock"

license_library/tests/test_views.py

@@ -137,15 +137,14 @@ def setUp(self):
         )
 
     def test_license_library_list_view_access(self):
-        url = resolve_url("license_library:license_list")
+        license_list_url = resolve_url("license_library:license_list")
 
-        response = self.client.get(url)
-        self.assertRedirects(
-            response, "{}?next={}".format(reverse("login"), reverse("license_library:license_list"))
-        )
+        response = self.client.get(license_list_url)
+        login_redirect_url = f"{reverse('login')}?next={license_list_url}"
+        self.assertRedirects(response, login_redirect_url)
 
         self.client.login(username="nexb_user", password="t3st")
-        response = self.client.get(url)
+        response = self.client.get(license_list_url)
 
         licenses_links = [
             '<a href="{}">'.format(self.license1.get_absolute_url()),
@@ -160,7 +159,7 @@ def test_license_library_list_view_access(self):
 
         # Making sure the user can't see license outside his dataspace
         self.client.login(username="other_user", password="t3st")
-        response = self.client.get(url)
+        response = self.client.get(license_list_url)
         for link in licenses_links:
             self.assertNotContains(response, link)
 

pyproject.toml

@@ -32,9 +32,9 @@ classifiers = [
 dependencies = [
     # Base configuration tools
     "setuptools==82.0.0",
-    "wheel==0.46.3",
-    "packaging==26.0",
-    "pip==26.0.1",
+    "wheel==0.47.0",
+    "packaging==26.2",
+    "pip==26.1",
     # Django
     "Django==6.0.4",
     "asgiref==3.11.1",
@@ -43,13 +43,13 @@ dependencies = [
     # Django apps
     "django-crispy-forms==2.6",
     "crispy_bootstrap5==2026.3",
-    "django-grappelli==4.0.3",
+    "django-grappelli==5.0.0",
     "django-filter==25.2",
     "django-registration==3.4",
     "confusable_homoglyphs==3.3.1",
-    "django-guardian==3.3.0",
+    "django-guardian==3.3.1",
     "django-environ==0.13.0",
-    "django-debug-toolbar==6.2.0",
+    "django-debug-toolbar==6.3.0",
     # CAPTCHA
     "altcha==1.0.0",
     "django_altcha==0.10.0",
@@ -59,28 +59,28 @@ dependencies = [
     "drf-yasg==1.21.15",
     "uritemplate==4.2.0",
     "inflection==0.5.1",
-    "pytz==2025.2",
+    "pytz==2026.2",
     # Track failed login attempts
     "django-axes==8.3.1",
     # Multi-factor authentication
     "django-otp==1.7.0",
     "qrcode==8.2",
     "pypng==0.20220715.0",
     # Database
-    "psycopg==3.3.3",
+    "psycopg==3.3.4",
     # Cache
-    "redis==7.3.0",
+    "redis==7.4.0",
     # Antivirus
     "clamd==1.0.2",
     # Testing
     "model_bakery==1.23.3",
     # Task queue
-    "rq==2.7.0",
+    "rq==2.8.0",
     "croniter==6.2.2",
     "django-rq==3.2.2",
-    "fakeredis==2.34.1",
+    "fakeredis==2.35.1",
     # Libs
-    "certifi==2026.2.25",
+    "certifi==2026.4.22",
     "urllib3==2.6.3",
     "python-dateutil==2.9.0.post0",
     "python-mimeparse==2.0.0",
@@ -89,7 +89,7 @@ dependencies = [
     "six==1.17.0",
     "requests==2.33.0",
     "idna==3.11",
-    "charset-normalizer==3.4.4",
+    "charset-normalizer==3.4.7",
     "PyYAML==6.0.3",
     "cython==3.2.4",
     "zipp==3.23.0",
@@ -121,7 +121,7 @@ dependencies = [
     "swapper==1.4.0",
     # AboutCode Toolkit
     "aboutcode_toolkit==11.1.1",
-    "click==8.3.1",
+    "click==8.3.3",
     "Jinja2==3.1.6",
     "MarkupSafe==3.0.3",
     "saneyaml==0.6.1",
@@ -130,7 +130,7 @@ dependencies = [
     # PackageURL
     "packageurl-python==0.17.6",
     # Gunicorn
-    "gunicorn==25.1.0",
+    "gunicorn==25.3.0",
     # SPDX validation
     "jsonschema==4.26.0",
     "jsonschema-specifications==2025.9.1",
@@ -142,9 +142,9 @@ dependencies = [
     "sortedcontainers==2.4.0",
     "py-serializable==2.1.0",
     # Git
-    "GitPython==3.1.46",
+    "gitpython==3.1.49",
     "gitdb==4.0.12",
-    "smmap==5.0.2",
+    "smmap==5.0.3",
     # CSAF
     "pydantic==2.12.5",
     "pydantic-core==2.41.5",
@@ -157,7 +157,7 @@ dependencies = [
     "msgspec==0.20.0",
     # OpenDocument Format
     "odfdo==3.22.0",
-    "lxml==6.0.2",
+    "lxml==6.1.0",
 ]
 
 [project.optional-dependencies]