chore: upgrade certifi, uv, dependencies and service images

Makefile

@@ -58,7 +58,7 @@ migrate:
 
 build:
 	@echo "-> Build the dev Docker images"
-	${COMPOSE} build
+	${COMPOSE} build --pull
 
 superuser:
 	${MANAGE} createsuperuser

compose.demo.yml

@@ -4,7 +4,7 @@ x-description: "Minimal demo stack: web + db only, auto-created superuser, Codes
 
 services:
   db:
-    image: docker.io/library/postgres:16.13
+    image: docker.io/library/postgres:16.15
     env_file:
       - .env.demo
     volumes:

compose.dev.yml

@@ -4,7 +4,7 @@ x-description: "Development stack: source mounted, runserver with auto-reload"
 
 services:
   db:
-    image: docker.io/library/postgres:16.13
+    image: docker.io/library/postgres:16.15
     env_file:
       - docker.env
     volumes:

compose.yml

@@ -4,7 +4,7 @@ x-description: "Full DejaCode stack: all services, pre-built image, no checkout
 
 services:
   db:
-    image: docker.io/library/postgres:16.13
+    image: docker.io/library/postgres:16.15
     env_file:
       - docker.env
     volumes:
@@ -19,7 +19,7 @@ services:
       retries: 5
 
   redis:
-    image: docker.io/library/redis:8.6-alpine
+    image: docker.io/library/redis:8.8-alpine
     # Enable redis data persistence using the "Append Only File" with the
     # default policy of fsync every second. See https://redis.io/topics/persistence
     command: redis-server --appendonly yes
@@ -79,7 +79,7 @@ services:
       - web
 
   nginx:
-    image: docker.io/library/nginx:1.29-alpine
+    image: docker.io/library/nginx:1.30-alpine
     ports:
       - "${NGINX_PUBLISHED_HTTP_PORT:-80}:80"
       - "${NGINX_PUBLISHED_HTTPS_PORT:-443}:443"

pyproject.toml

@@ -41,11 +41,11 @@ dependencies = [
     # Django apps
     "django-crispy-forms==2.7",
     "crispy-bootstrap5==2026.9",
-    "django-grappelli==5.0.0",
+    "django-grappelli==5.0.1",
     "django-filter==26.2",
     "django-registration==5.2.1",
     "confusable_homoglyphs==3.3.1",
-    "django-guardian==3.5.0",
+    "django-guardian==3.5.1",
     "django-environ==0.14.0",
     "django-debug-toolbar==8.0.0",
     # Parallel testing
@@ -65,7 +65,7 @@ dependencies = [
     # Track failed login attempts
     "django-axes==8.3.1",
     # Multi-factor authentication
-    "django-otp==1.7.4",
+    "django-otp==1.7.5",
     "qrcode==8.2",
     # Database
     "psycopg==3.3.6",
@@ -79,9 +79,9 @@ dependencies = [
     "rq==2.12.0",
     "croniter==6.2.4",
     "django-rq==4.2.0",
-    "fakeredis==2.39.0",
+    "fakeredis==2.40.0",
     # Libs
-    "certifi==2026.7.22",
+    "certifi==2026.10.19",
     "urllib3==2.8.0",
     "python-dateutil==2.9.0.post0",
     "six==1.17.0",
@@ -91,7 +91,7 @@ dependencies = [
     "PyYAML==6.0.3",
     "XlsxWriter==3.2.9",
     # Markdown
-    "markdown==3.11",
+    "markdown==3.11.1",
     "bleach==6.4.0",
     "webencodings==0.6.1",
     # Authentication
@@ -133,7 +133,7 @@ dependencies = [
     # OpenVEX
     "msgspec==0.22.0",
     # OpenDocument Format
-    "odfdo==3.27.1",
+    "odfdo==3.27.2",
     "lxml==6.1.3",
 ]