Bleach==5.0.1 is installed as part of django-bleech dependency.

- Use `.python-version` and `.nvmrc` in CI script, single source of
truth
- Update version of python and node. 
- Update version of alpinejs, htmx and other build js
- Update minor versions of python dependencies

- Update psycopg to 3 as it’s not supported by Django 4.2
- Replaced “BaseUserManager().make_random_password”, as it’s deprecated
- Update github action and breakup different checks, making them easier
to debug
- Updated the `makemigrations` checks to display the missing migration
and then fail
- Upgrade django-hijack to 3.4.2
- Update gunicorn to 21.2.0
- Upgrade django slack to 5.19.0
- Upgrade mistune to 3.0.2 (Bug fix release)
- Upgrade whitenoise to 6.6.0
- Update dev dependencies - black, ruff, pre-commit, pytest-django

Closes https://github.com/HyphaApp/hypha/issues/3362

Fixes #ISSUEID

This PR is depended on #3521 

- [x] Passwordless login
- [x] Passwordless signup 
- [x] Allow user to set a password after going to profile.
- [x] Allow user to change their email even if they don't have an email
set.
- [x] Allow user to add their name in the application form if name is
not present in the user account.
- [x] Don't display "Dashboard" link if the user does't have permission
to access to it.
- [x] Allow to use to setup 2FA without account password.
- [x] Display user content on the login screen, if configured (it is an
existing feature)
- [x] If 2FA is enforced, allow the user to submit the application
without setting up 2FA
- [x] Add email re-verification option to elevate, sudo mode, apart from
password
- [x] Update landing page after application submission, on success it
redirects now.
- [x] Update ENABLE_PUBLIC_SIGNUP and FORCE_LOGIN_FOR_APPLICATION to
true by default

# Login/Signup Flow


![image](https://github.com/HyphaApp/hypha/assets/236356/91c22cb1-bd1f-4665-98e2-0350829a5807)


## Updated Login Page with Registration Enabled

![Screenshot 2023-09-13 at 07 53
06@2x](https://github.com/HyphaApp/hypha/assets/236356/424fa2f6-a519-44e3-a9ec-449815dd39b2)


## After providing the email ID

The messaging is kept neutral to hide if the user is already registered
or not. The email will contain more detail, if the account exist or not.

![Screenshot 2023-09-13 at 07 57
27@2x](https://github.com/HyphaApp/hypha/assets/236356/7577447b-edf2-496e-94ca-3c98a8f2f075)

Login email copy
![Screenshot 2023-09-13 at 08 08
36@2x](https://github.com/HyphaApp/hypha/assets/236356/ab2d3e90-da2e-40ec-9f7e-bbb8d9e7235f)

## Signup

New Account Email copy
![Screenshot 2023-09-21 at 07 08
52@2x](https://github.com/HyphaApp/hypha/assets/236356/cb14350b-1cfb-4869-b863-ebbb95701089)

### Profile Page just after signup 
The user after clicking on the signup link in the email is redirect to
homepage. No dashboard is available as the user doesn't have applicant
role. If they click on the "profile" button they see this page with open
to update profile and setup a password and enable 2FA.

If the user decide to change the email, password is not asked if not
password is set, instead an email is sent to authorize the email change.

![Screenshot 2023-09-22 at 08 50
21@2x](https://github.com/HyphaApp/hypha/assets/236356/7ed0cb97-a7ca-49fe-aef5-de8f3890db1e)


## Updated "Sudo" mode page

### For account with password

![Screenshot 2023-10-31 at 7  49
38@2x](https://github.com/HyphaApp/hypha/assets/236356/fe27ad75-7e4b-4226-89c1-ddd7a5548944)

After clicking on the "Send a confirmation code to your email" link

![Screenshot 2023-10-31 at 8  03
28@2x](https://github.com/HyphaApp/hypha/assets/236356/bf7a4098-fd0f-4d55-9850-0862da69d808)


![Screenshot 2023-10-31 at 7  51
03@2x](https://github.com/HyphaApp/hypha/assets/236356/3768e87f-d105-4d54-9cd6-2e2b8a81fa2f)


### For account without password

![Screenshot 2023-10-31 at 7  53
44@2x](https://github.com/HyphaApp/hypha/assets/236356/8c84181a-43ce-4afe-a5be-758e3f0e55f8)


## Updated disable 2FA page

It requires "Sudo" mode, instead of password now. 

![Screenshot 2023-10-31 at 7  48
01@2x](https://github.com/HyphaApp/hypha/assets/236356/2b5c8bd1-27ea-42cd-9c84-608bb351631c)

Notes: 

Wagtail 5x has migrations:
```
You have 11 unapplied migration(s). Your project may not work properly until you apply the migrations for app(s): wagtailcore, wagtailsearchpromotions, wagtailusers.
```

- Upgrade Django, wagtail-purge,
Django-pwned-password,django-basic-auth-ip-whitelist
- Move logic from DeleteView -> delete() to form_valid()
- Make test more robust
- Upgrade dj-database-url to 2.x, and enable CONN_HEALTH_CHECKS
- Bump django-two-factor-auth to 1.15.x that has confirmed support for
Django 4.1
- Bump django-ratelimit to 4.1.0
- django-pwned-passwords seems be abandoned
https://github.com/jamiecounsell/django-pwned-passwords/pull/11
(replaced with it with it's fork)

These all have are non-breaking changes

With the latest updates to python-docx, older APIs that are relied upon
by htmldocx have broken. This pins the version so htmldocx can utilize
the old APIs. For more info on this breakage see
[here](https://github.com/python-openxml/python-docx/issues/1256#issuecomment-1756839793).

Co-authored-by: Saurabh Kumar <theskumar@users.noreply.github.com>
Co-authored-by: Sandeep Chauhan <sandeepsajan0@gmail.com>

Bumps [reportlab](http://www.reportlab.com/) from 3.6.12 to 3.6.13.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reportlab&package-manager=pip&previous-version=3.6.12&new-version=3.6.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/HyphaApp/hypha/network/alerts

).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fixes #3430

- [x] Simplified code
- [x] Use postgres FTS search
- [x] Improve UX for filters
- [x]  Improve submission listing
- [x] Add filter for submission date, OTF have asked about this.
- [x] Add submission ID search, see
https://github.com/HyphaApp/hypha/pull/3294
- [x]   Make sure the batch actions are working 
- [x]   Permissions check for batch actions
- [x] Ensure search index works after submissions is updated
- [x] ~Integrate Django messages framework with htmx responses~ (Not
needed)
- [x] [Fix Polynomial regular expression used on uncontrolled
data](https://github.com/HyphaApp/hypha/security/code-scanning/74

)
- [ ] make bulk update status working, currently it's hidden.

---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

Fixes #3395 

It was a package(django-formtools) issue, they have also mentioned it in
[latest
version](https://django-formtools.readthedocs.io/en/latest/changelog.html#id1).

Fixes #3018

- Update requirements - `wagtail` and `wagtail-cache`
- Update `BaseSetting` to `BaseSiteSettings`
- Fix Category StreamBlock at hypha/apply/categories/blocks.py
- Add migration changes
- Add `wagtail_reference_index_ignore = True` to models (See [this
issue](https://github.com/wagtail/wagtail/issues/9731

) on wagtail for
more info)
- Use checkboxes when selecting reviewers for a Round and a Lab
- Update `ReadOnlyPanel` to use `render_html()` method instead of
`render_as_object()`

---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

Fixes #ISSUEID

Introduce tailwindcss[1] utilities and django-web-component[2] for
frontend design isolation and reusability.

Notes:
- Saas rules take preference over the tailwind (we might want to change
it)
- In the future, the saas should be depreciated, and reusable classes
should be updated to use tailwindcss

[1] https://tailwindcss.com/
[2] https://github.com/Xzya/django-web-components



---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

- Add a guide on how to enable and setup sentry
- Upgrades sentry-sdk to 1.16.0
- Add optional performance monitoring
- Add Browser Javascript Tracking & Tracing

Fixes #3242

- Add htmx integration
- Add hx-boost for header nav; it degrades gracefully! 

Configure https://github.com/rstacruz/nprogress to show progress on ajax
activities.

Note: django-htmx is not used right now but will be used to add more
htmx-based functionalities.

Partial Fix #3127 

Upgrade following pip packages:
Production requirements
1. Sentry = 1.9.5 - 1.14.0
2. Babel = 2.9.1 - 2.11.0
3. boto3 = 1.26.27 - 1.26.57
4. celery = 5.2.2 - 5.2.7
5. django-anymail = 8.4 - 9.0
6. django-bleach = 3.0.0 - 3.0.1
7. django-countries = 7.2.1 - 7.5
8. django-extensions = 3.1.5 - 3.2.1
9. django-file-form = 3.4.1 - 3.4.3
10. django-fsm = 2.8.0 - 2.8.1
11. django-hijack = 3.1.4 - 3.2.6
12. django-redis = 5.1.0 - 5.2.0
13. django-salesforce = 4.0 - 4.1
14. django-select2 = 7.9.0 - 8.0
15. django-slack = 5.17.7 - 5.18.0
16. django-storages = 1.12.3 - 1.13.2
17. django-tables2 = 2.4.1 - 2.5.1
18. django-tinymce = 3.4.0 - 3.5.0
19. djangorestframework-api-key = 2.2.0 - 2.3.0
20. djangorestframework = 3.12.4 - 3.14.0
21. drf-yasg = 1.20.0 - 1.21.4
22. mailchimp3 = 3.0.16 - 3.0.17
23. mistune = 2.0.3 - 2.0.4
24. more-itertools = 8.12.0 - 9.0.0
25. phonenumberslite = 8.12.39 - 8.13.4
26. Pillow = 9.3.0 - 9.4.0
27. tablib = 3.2.1 - 3.3.0
28. xmltodict = 0.12.0 - 0.13.0
Dev requirements
29. django-debug-toolbar = 3.6.0 - 3.8.1
30. dslr = 0.3.1 - 0.4.0
31. ruff = 0.0.206 - 0.0.236
32. model-bakery = 1.7.0 - 1.10.1
33. pytest-xdist[psutil] = 2.5.0 - 3.1.0
34. responses = 0.21.0 - 0.22.0

Related https://github.com/HyphaApp/hypha-issues/issues/10

- Create/update superuser
- Set wagtail site domains

```
❯ ./manage.py initialize
Provide the details below to initialize Hypha Site. Press enter to keep the default value.

Domain of public site  [hypha.test]:
Domain of apply site  [apply.hypha.test]:
Superadmin Email  [superadmin@hypha.test]:
Superadmin Password  [hypha123]:
Site port [8090]:
>>> Created superuser with email superadmin@hypha.test.
>>> Set public site to hypha.test:8090
>>> Set apply site to apply.hypha.test:8090
```

https://www.djangoproject.com/weblog/2023/feb/01/security-releases/

Initial Fix [hypha-issues#8
](https://github.com/HyphaApp/hypha-issues/issues/8

)

Co-authored-by: sks444 <krishnasingh.ss30@gmail.com>
Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

- Fix test for EmailMessage task
 - Add tablib dependency for Wagtail ExportAdmin
 - Fix DeprecationWarning for django_table2
 - Fix depreciationwarning for beautifulSoup
 - Fix RemovedInDjango41Warning for default_app_config
 - Fix DjangoRemovedIn4.0 warning Middleware always require a function
 - Upgrade boto3 and scout-apm
 - Update pytest-cov to 4.0.0 from 3.0.0
 - Upgrade djangorestframework-api-key to 1.2.0
 - Rename “app” to “apps”

Bumps [pillow](https://github.com/python-pillow/Pillow) from 9.0.1 to 9.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/9.0.1...9.3.0

)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Use translations for email

This replaces the currently patched version of file field with
the upstream merged and released package.

More info at https://github.com/mbraak/django-file-form/pull/526