Deps: raise floors to the Dependabot targets, bump checkout/setup-python to v7

django-q2>=1.10.0, croniter>=6.2.4, gunicorn>=26.0.0, Brotli>=1.2.0,
redis>=8.0.1, psutil>=7.2.2 (PRs #9-#14) and actions/checkout@v7 +
actions/setup-python@v7 (#6, #15). The full core suite (1644 tests) already
ran green against these exact versions on a fresh Python 3.14 venv. The
python:3.14-slim base image bump (#8) is deliberately held until the Docker
end-to-end pass has covered it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Author: hassancs91

.github/workflows/ci.yml

@@ -16,8 +16,8 @@ jobs:
       ENCRYPTION_KEY: QUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE=
       DEBUG: "True"
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.13"
           cache: pip
@@ -36,8 +36,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.13"
       # Pinned to the same version as .pre-commit-config.yaml so CI and the

requirements.txt

@@ -1,13 +1,13 @@
 Django>=6.0,<6.1
-django-q2>=1.6.0
-croniter>=2.0.0
+django-q2>=1.10.0
+croniter>=6.2.4
 django-tailwind>=4.4.0
 django-axes>=7.0.0
-gunicorn>=21.0.0
+gunicorn>=26.0.0
 whitenoise>=6.6.0
 # Enables WhiteNoise to emit Brotli-compressed (.br) static assets at
 # collectstatic time, in addition to gzip — smaller payloads for modern browsers.
-Brotli>=1.1.0
+Brotli>=1.2.0
 resend>=0.7.0
 cryptography>=42.0.0
 python-dotenv>=1.0.0
@@ -16,7 +16,7 @@ psycopg[binary]>=3.1.0
 dj-database-url>=2.1.0
 # Redis cache backend (opt-in via REDIS_URL; DatabaseCache is the default and
 # needs nothing extra). Only imported when REDIS_URL is set.
-redis>=5.0.0
-psutil>=5.9.0
+redis>=8.0.1
+psutil>=7.2.2
 boto3>=1.34.0
 claude-agent-sdk>=0.2.101,<0.3.0