Upgrade django

[pkfec]

Summary (required)

• Resolves [July 2023] eRegs parsing requirements #772, [Snyk:High] Django Regular Expression Denial of Service (ReDoS)(due by 08/17/2023) #773

This ticket fixes the snyk vulnerbilities in requirements-parsing.txt and requirements.txt. The following packages are upgraded:

• In requirements.txt
  - django==3.2.20
• In requirements-parsing.txt
  - django==3.2.20
  - cryptography==41.0.2
  - pygments==2.15.1

Required reviewers 1 developers

Impacted areas of the application

General components of the application that this PR will affect:

• eregs, regulations-parser, regulations-core, regulations-site repos

Related PRs

1. Regulations-Parser PR
2. Regulations-Site PR
3. Regulations-Core PR

How to test

1. Checkout this branch
2. Change regparser, regulations, and regcore to point to my branch in requirements.txt and requirements-parsing.txt

regparser
-e git+https://github.com/fecgov/regulations-parser.git@773-upgrade-django-parser#egg=regparser
regsite
-e git+https://github.com/fecgov/regulations-site@773-upgrade-django-site#egg=regulations
regcore
-e git+https://github.com/fecgov/regulations-core@773-upgrade-django-core#egg=regcore

Terminal One:
3. pyenv virtualenv (your virtual environment)
4. pip install -r requirements.txt
5. snyk test --file=requirements.txt --package-manager=pip
6. rm -rf node_modules
7. npm i
8. npm run build
9. dropdb eregs_local
10. createdb eregs_local
11. python manage.py migrate
12. python manage.py compile_frontend
13. python manage.py runserver (leave running)

Terminal Two:
14. pyenv virtualenv (your virtual environment)
15. pip install -r requirements-parsing.txt
16. snyk test --file=requirements-parsing.txt --package-manager=pip
17. python load_regs/load_fec_regs.py local
18. Go to http://127.0.0.1:8000/ to view 45 regulations

For more detailed instructions follow the wiki on how to setup/parse regulations on local environment

NOTE: Merge other repo PRs first

[cnlucas]

Works for me!

I'm not sure if the recommended way to pull a remote branch is adding .git or not, it seems to work either way. I would lean towards keeping .git and adding it to the other branches.

[tmpayton]

Works for me!