[Snyk] Security upgrade django from 3.2.25 to 4.2.28

[nicholas-lockhart]

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

• examples/django/requirements.txt

⚠️ Warning

celery 5.3.0 requires kombu, which is not installed.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 SQL Injection

---

Note

Medium Risk
Upgrading Django across major versions can introduce breaking changes in the example app/runtime behavior, though the change is limited to a dependency version constraint.

Overview
Updates examples/django/requirements.txt to require django>=4.2.28 (from >=2.2.1) to address a reported security vulnerability.

^{Written by Cursor Bugbot for commit f6d435e. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Django 4.x removed url function breaks import

High Severity

Upgrading Django to >=4.2.28 breaks compatibility with existing code. The examples/django/proj/urls.py imports url from django.urls, but this function was deprecated in Django 3.1 and removed entirely in Django 4.0. After this upgrade, the application will crash at startup with ImportError: cannot import name 'url' from 'django.urls'. The url() function needs to be replaced with re_path() for regex patterns, or the import needs to be removed if unused.