chore: upgrade dependencies

dejacode/settings.py

@@ -473,6 +473,11 @@ def gettext_noop(s):
         "SSL": env.bool("DEJACODE_RQ_REDIS_SSL", default=False),
     },
 }
+# COMMIT_MODE "on_db_commit" enqueues jobs through transaction.on_commit(),
+# so a job is only picked up by a worker once its transaction is committed.
+RQ = {
+    "COMMIT_MODE": "on_db_commit",
+}
 
 # Cron jobs (scheduler)
 daily_at_3am = "0 3 * * *"
@@ -503,6 +508,11 @@ def get_fake_redis_connection(config, use_strict_redis):
 
     connection_utils.get_redis_connection = get_fake_redis_connection
 
+    # Default COMMIT_MODE is "on_db_commit": jobs are enqueued through
+    # transaction.on_commit(), which never fires inside a TestCase since its
+    # wrapping transaction is always rolled back. "auto" enqueues immediately.
+    RQ["COMMIT_MODE"] = "auto"
+
 
 DEJACODE_ASYNC = env.bool("DEJACODE_ASYNC", default=False)
 if not DEJACODE_ASYNC or IS_TESTS:

pyproject.toml

@@ -38,7 +38,7 @@ dependencies = [
     # Django
     "django==6.1.1",
     "asgiref==3.12.1",
-    "typing_extensions==4.15.0",
+    "typing-extensions==4.16.0",
     "sqlparse==0.6.0",
     # Django apps
     "django-crispy-forms==2.7",
@@ -69,18 +69,18 @@ dependencies = [
     "qrcode==8.2",
     "pypng==0.20220715.0",
     # Database
-    "psycopg==3.3.4",
+    "psycopg==3.3.5",
     # Cache
     "redis==8.1.0",
     # Antivirus
     "clamd==1.0.2",
     # Testing
     "model_bakery==1.23.3",
     # Task queue
-    "rq==2.9.0",
+    "rq==2.12.0",
     "croniter==6.2.4",
-    "django-rq==3.2.2",
-    "fakeredis==2.36.2",
+    "django-rq==4.2.0",
+    "fakeredis==2.38.0",
     # Libs
     "certifi==2026.7.22",
     "urllib3==2.7.0",
@@ -100,7 +100,7 @@ dependencies = [
     "markdown==3.10.2",
     "bleach==6.4.0",
     "bleach_allowlist==1.0.3",
-    "webencodings==0.5.1",
+    "webencodings==0.6.1",
     # Authentication
     "oauthlib==3.3.1",
     "python3-openid==3.2.0",
@@ -138,22 +138,22 @@ dependencies = [
     "rpds-py==0.30.0",
     "attrs==25.4.0",
     # CycloneDX
-    "cyclonedx-python-lib==11.6.0",
+    "cyclonedx-python-lib==11.12.0",
     "sortedcontainers==2.4.0",
     "py-serializable==2.1.0",
     # CSAF
     "pydantic==2.12.5",
     "pydantic-core==2.41.5",
-    "typing-inspection==0.4.2",
+    "typing-inspection==0.4.4",
     "maturin==1.11.5",
     "setuptools-rust==1.12.0",
     "annotated-types==0.7.0",
     "semantic-version==2.10.0",
     # OpenVEX
-    "msgspec==0.20.0",
+    "msgspec==0.21.1",
     # OpenDocument Format
     "odfdo==3.22.0",
-    "lxml==6.1.1",
+    "lxml==6.1.3",
 ]
 
 [project.optional-dependencies]