Apply Upcoming Django Security Patch

[magajh]

Apply upcoming Django security release
https://groups.google.com/g/django-announce/c/gmyqS48O138

Django versions 5.1.4, 5.0.10, and 4.2.17 will be released on Wednesday, December 4 around 15:00 UTC. They will fix 2 security defects with severities: moderate and high.

For details of severity levels, see: https://docs.djangoproject.com/en/dev/internals/security/#how-django-discloses-security-issues

Open edX services to upgrade (taken from https://openedx.atlassian.net/wiki/spaces/COMM/pages/4558782480/Sumac.master)

• course-discovery
• credentials
• edx-notes-api
• edx-platform
• enterprise-access
• enterprise-catalog
• event-bus-redis
• license-manager
• platform-plugin-aspects
• xqueue

[magajh]

@farhaanbukhsh tagging you here for the review and merge of these PRs

[magajh]

PR in edx-platform is also ready for review/merge, all the tests were successful

[farhaanbukhsh]

@magajh I have reviewed it and I am going to merge it too. :)

[farhaanbukhsh]

I can merge all of it but I am waiting for the CCs of those repos to do that!

[magajh]

@farhaanbukhsh Got it! But I think that’s unlikely, especially with the release so close. For past security patches, it’s usually the release manager who tests and merges most of the PRs – for example, #386

[farhaanbukhsh]

@magajh No issues will merge them 👍🏾

[magajh]

Awesome, thank you! we should incorporate this patch into this release cc @cmltaWt0

[farhaanbukhsh]

@magajh We will :) I am testing these PRs by building the image :)

[magajh]

Thanks so much, @farhaanbukhsh! I'm closing this issue now that all the PRs have been merged