Notes: 

Wagtail 5x has migrations:
```
You have 11 unapplied migration(s). Your project may not work properly until you apply the migrations for app(s): wagtailcore, wagtailsearchpromotions, wagtailusers.
```

- Upgrade Django, wagtail-purge,
Django-pwned-password,django-basic-auth-ip-whitelist
- Move logic from DeleteView -> delete() to form_valid()
- Make test more robust
- Upgrade dj-database-url to 2.x, and enable CONN_HEALTH_CHECKS
- Bump django-two-factor-auth to 1.15.x that has confirmed support for
Django 4.1
- Bump django-ratelimit to 4.1.0
- django-pwned-passwords seems be abandoned
https://github.com/jamiecounsell/django-pwned-passwords/pull/11
(replaced with it with it's fork)

These all have are non-breaking changes

With the latest updates to python-docx, older APIs that are relied upon
by htmldocx have broken. This pins the version so htmldocx can utilize
the old APIs. For more info on this breakage see
[here](https://github.com/python-openxml/python-docx/issues/1256#issuecomment-1756839793).

Co-authored-by: Saurabh Kumar <theskumar@users.noreply.github.com>
Co-authored-by: Sandeep Chauhan <sandeepsajan0@gmail.com>

Bumps [reportlab](http://www.reportlab.com/) from 3.6.12 to 3.6.13.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reportlab&package-manager=pip&previous-version=3.6.12&new-version=3.6.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/HyphaApp/hypha/network/alerts

).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fixes #3430

- [x] Simplified code
- [x] Use postgres FTS search
- [x] Improve UX for filters
- [x]  Improve submission listing
- [x] Add filter for submission date, OTF have asked about this.
- [x] Add submission ID search, see
https://github.com/HyphaApp/hypha/pull/3294
- [x]  🏃🏼 Make sure the batch actions are working 
- [x]  🏃🏼 Permissions check for batch actions
- [x] Ensure search index works after submissions is updated
- [x] ~Integrate Django messages framework with htmx responses~ (Not
needed)
- [x] [Fix Polynomial regular expression used on uncontrolled
data](https://github.com/HyphaApp/hypha/security/code-scanning/74

)
- [ ] make bulk update status working, currently it's hidden.

---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

Fixes #3395 

It was a package(django-formtools) issue, they have also mentioned it in
[latest
version](https://django-formtools.readthedocs.io/en/latest/changelog.html#id1).

Fixes #3018

- Update requirements - `wagtail` and `wagtail-cache`
- Update `BaseSetting` to `BaseSiteSettings`
- Fix Category StreamBlock at hypha/apply/categories/blocks.py
- Add migration changes
- Add `wagtail_reference_index_ignore = True` to models (See [this
issue](https://github.com/wagtail/wagtail/issues/9731

) on wagtail for
more info)
- Use checkboxes when selecting reviewers for a Round and a Lab
- Update `ReadOnlyPanel` to use `render_html()` method instead of
`render_as_object()`

---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

Fixes #ISSUEID

Introduce tailwindcss[1] utilities and django-web-component[2] for
frontend design isolation and reusability.

Notes:
- Saas rules take preference over the tailwind (we might want to change
it)
- In the future, the saas should be depreciated, and reusable classes
should be updated to use tailwindcss

[1] https://tailwindcss.com/
[2] https://github.com/Xzya/django-web-components



---------

Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

- Add a guide on how to enable and setup sentry
- Upgrades sentry-sdk to 1.16.0
- Add optional performance monitoring
- Add Browser Javascript Tracking & Tracing

Fixes #3242

- Add htmx integration
- Add hx-boost for header nav; it degrades gracefully! 

Configure https://github.com/rstacruz/nprogress to show progress on ajax
activities.

Note: django-htmx is not used right now but will be used to add more
htmx-based functionalities.

Partial Fix #3127 

Upgrade following pip packages:
Production requirements
1. Sentry = 1.9.5 - 1.14.0
2. Babel = 2.9.1 - 2.11.0
3. boto3 = 1.26.27 - 1.26.57
4. celery = 5.2.2 - 5.2.7
5. django-anymail = 8.4 - 9.0
6. django-bleach = 3.0.0 - 3.0.1
7. django-countries = 7.2.1 - 7.5
8. django-extensions = 3.1.5 - 3.2.1
9. django-file-form = 3.4.1 - 3.4.3
10. django-fsm = 2.8.0 - 2.8.1
11. django-hijack = 3.1.4 - 3.2.6
12. django-redis = 5.1.0 - 5.2.0
13. django-salesforce = 4.0 - 4.1
14. django-select2 = 7.9.0 - 8.0
15. django-slack = 5.17.7 - 5.18.0
16. django-storages = 1.12.3 - 1.13.2
17. django-tables2 = 2.4.1 - 2.5.1
18. django-tinymce = 3.4.0 - 3.5.0
19. djangorestframework-api-key = 2.2.0 - 2.3.0
20. djangorestframework = 3.12.4 - 3.14.0
21. drf-yasg = 1.20.0 - 1.21.4
22. mailchimp3 = 3.0.16 - 3.0.17
23. mistune = 2.0.3 - 2.0.4
24. more-itertools = 8.12.0 - 9.0.0
25. phonenumberslite = 8.12.39 - 8.13.4
26. Pillow = 9.3.0 - 9.4.0
27. tablib = 3.2.1 - 3.3.0
28. xmltodict = 0.12.0 - 0.13.0
Dev requirements
29. django-debug-toolbar = 3.6.0 - 3.8.1
30. dslr = 0.3.1 - 0.4.0
31. ruff = 0.0.206 - 0.0.236
32. model-bakery = 1.7.0 - 1.10.1
33. pytest-xdist[psutil] = 2.5.0 - 3.1.0
34. responses = 0.21.0 - 0.22.0

Related https://github.com/HyphaApp/hypha-issues/issues/10

- Create/update superuser
- Set wagtail site domains

```
❯ ./manage.py initialize
Provide the details below to initialize Hypha Site. Press enter to keep the default value.

Domain of public site  [hypha.test]:
Domain of apply site  [apply.hypha.test]:
Superadmin Email  [superadmin@hypha.test]:
Superadmin Password  [hypha123]:
Site port [8090]:
>>> Created superuser with email superadmin@hypha.test.
>>> Set public site to hypha.test:8090
>>> Set apply site to apply.hypha.test:8090
```

https://www.djangoproject.com/weblog/2023/feb/01/security-releases/

Initial Fix [hypha-issues#8
](https://github.com/HyphaApp/hypha-issues/issues/8

)

Co-authored-by: sks444 <krishnasingh.ss30@gmail.com>
Co-authored-by: Fredrik Jonsson <frjo@xdeb.org>

- Fix test for EmailMessage task
 - Add tablib dependency for Wagtail ExportAdmin
 - Fix DeprecationWarning for django_table2
 - Fix depreciationwarning for beautifulSoup
 - Fix RemovedInDjango41Warning for default_app_config
 - Fix DjangoRemovedIn4.0 warning Middleware always require a function
 - Upgrade boto3 and scout-apm
 - Update pytest-cov to 4.0.0 from 3.0.0
 - Upgrade djangorestframework-api-key to 1.2.0
 - Rename “app” to “apps”

Bumps [pillow](https://github.com/python-pillow/Pillow) from 9.0.1 to 9.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/9.0.1...9.3.0

)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Use translations for email

This replaces the currently patched version of file field with
the upstream merged and released package.

More info at https://github.com/mbraak/django-file-form/pull/526

Chagelog: https://github.com/coderedcorp/wagtail-cache/compare/v1.0.2...v2.1.0

Changelog: https://github.com/torchbox/wagtail-purge/compare/0.1...main