github actions on django 4.2 and 5.2

[nossila]

This PR updates the GitHub Actions workflow to test against Django minor versions (4.2 and 5.2) instead of specific patch versions (4.2.15 and 5.2.1), ensuring tests always run against the latest patch releases. The PR also adds an ignore flag for a new CVE vulnerability in protobuf.

Changes:

• Updated Django version matrix from specific patch versions to minor versions using "~=" compatibility operator
• Modified conditional checks from exact version matching to prefix matching using startsWith()
• Added GHSA-7gcm-g887-7qv7 to the list of ignored vulnerabilities in pip-audit

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow configuration to optimize testing processes and vulnerability scanning procedures.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

The pull request simplifies Django version matrix identifiers in a GitHub Actions workflow from explicit versions to shortened format (e.g., "4.2", "5.2"), and refactors version-matching logic to use startsWith() pattern instead of exact equality checks. Additionally, pip-audit configuration is updated with expanded ignore comments and new CVE entries.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Configuration .github/workflows/github-actions.yml	Django matrix versions simplified from explicit patch versions to major-minor identifiers; version condition checks refactored from equality (==) to prefix matching (startsWith()); pip-audit step updated to skip editable installs and ignore two CVEs (CVE-2025-61783, CVE-2026-0994) with added explanatory comments; coverage upload condition aligned with new version pattern.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 Matrix versions trimmed so clean,
From patch-specific to lean,
startsWith() hops through the flow,
CVEs acknowledged, we all know—
Workflows hop lighter, faster they go! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: updating GitHub Actions to test against Django 4.2 and 5.2 versions instead of specific patch versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR updates the GitHub Actions workflow to test against Django minor versions (4.2 and 5.2) instead of specific patch versions (4.2.15 and 5.2.1), ensuring tests always run against the latest patch releases. The PR also adds an ignore flag for a new CVE vulnerability in protobuf.

Changes:

• Updated Django version matrix from specific patch versions to minor versions using "~=" compatibility operator
• Modified conditional checks from exact version matching to prefix matching using startsWith()
• Added CVE-2026-0994 to the list of ignored vulnerabilities in pip-audit

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.