[GH-ISSUE #1260] Bug: Web UI depends on a very out of date release of Django #772

New issue

Closed

opened 2026-03-01 14:46:12 +03:00 by kerem · 1 comment

kerem commented

2026-03-01 14:46:12 +03:00

Owner

Originally created by @jezcope on GitHub (Nov 1, 2023).
Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1260

ArchiveBox should probably be updated to use the current LTS branch of Django, 4.2.

Describe the bug

ArchiveBox's pyproject.toml currently depends on Django ≥3.1.3 and <3.2 (currently resolving to 3.1.14). 3.1 has not had any security updates for nearly 2 years, while 3.2 (the long-term support branch of the 3 series) has been out of active development for the same length of time and will stop getting security fixes in 5 months (April 2024). See release schedule at https://endoflife.date/django

ArchiveBox version

Affects latest dev branch, but for completeness...

ArchiveBox v0.6.2
Cpython Linux Linux-6.1.54-x86_64-with-glibc2.37 x86_64
IN_DOCKER=False DEBUG=False IS_TTY=True TZ=UTC SEARCH_BACKEND_ENGINE=ripgrep

[i] Dependency versions:
 √  ARCHIVEBOX_BINARY     v0.6.2          valid     /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/bin/archivebox 
 √  PYTHON_BINARY         v3.10.12        valid     /nix/store/pzf6dnxg8gf04xazzjdwarm7s03cbrgz-python3-3.10.12/bin/python3.10  
 √  DJANGO_BINARY         v3.1.14         valid     /nix/store/vn992k3ms5mydyxmjnb4c451xl2iiqih-python3.10-django-3.1.14/lib/python3.10/site-packages/django/bin/django-admin.py
 √  CURL_BINARY           v8.3.0          valid     /etc/profiles/per-user/jez/bin/curl                                         
 √  WGET_BINARY           v1.21.4         valid     /run/current-system/sw/bin/wget                                             
 √  NODE_BINARY           v18.18.0        valid     /etc/profiles/per-user/jez/bin/node                                         
 √  SINGLEFILE_BINARY     v1.0.54         valid     ./node_modules/single-file/cli/single-file                                  
 -  READABILITY_BINARY    -               disabled  ./node_modules/readability-extractor/readability-extractor                  
 √  MERCURY_BINARY        v1.0.0          valid     ./node_modules/@postlight/mercury-parser/cli.js                             
 √  GIT_BINARY            v2.42.0         valid     /etc/profiles/per-user/jez/bin/git                                          
 √  YOUTUBEDL_BINARY      v2021.12.17     valid     /nix/store/l9h2wz73m72p9d31gyh76s1sy5pnik00-python3.10-youtube-dl-2021.12.17/bin/youtube-dl
 √  CHROME_BINARY         v117.0.5938.149  valid     /etc/profiles/per-user/jez/bin/chromium-browser                             
 √  RIPGREP_BINARY        v13.0.0         valid     /etc/profiles/per-user/jez/bin/rg                                           

[i] Source-code locations:
 √  PACKAGE_DIR           23 files        valid     /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/lib/python3.10/site-packages/archivebox
 √  TEMPLATES_DIR         3 files         valid     /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/lib/python3.10/site-packages/archivebox/templates
 -  CUSTOM_TEMPLATES_DIR  -               disabled                                                                              

[i] Secrets locations:
 -  CHROME_USER_DATA_DIR  -               disabled                                                                              
 -  COOKIES_FILE          -               disabled                                                                              

[i] Data locations:
 √  OUTPUT_DIR            10 files        valid     /home/jez/Sync/Archivebox/data                                              
 √  SOURCES_DIR           48 files        valid     ./sources                                                                   
 √  LOGS_DIR              1 files         valid     ./logs                                                                      
 √  ARCHIVE_DIR           424 files       valid     ./archive                                                                   
 √  CONFIG_FILE           359.0 Bytes     valid     ./ArchiveBox.conf                                                           
 √  SQL_INDEX             5.4 MB          valid     ./index.sqlite3

Originally created by @jezcope on GitHub (Nov 1, 2023). Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1260 ArchiveBox should probably be updated to use the current LTS branch of Django, 4.2. #### Describe the bug ArchiveBox's `pyproject.toml` currently depends on Django ≥3.1.3 and <3.2 (currently resolving to 3.1.14). 3.1 has not had any security updates for nearly 2 years, while 3.2 (the long-term support branch of the 3 series) has been out of active development for the same length of time and will stop getting security fixes in 5 months (April 2024). See release schedule at https://endoflife.date/django #### ArchiveBox version Affects latest `dev` branch, but for completeness...  ```logs ArchiveBox v0.6.2 Cpython Linux Linux-6.1.54-x86_64-with-glibc2.37 x86_64 IN_DOCKER=False DEBUG=False IS_TTY=True TZ=UTC SEARCH_BACKEND_ENGINE=ripgrep [i] Dependency versions: √ ARCHIVEBOX_BINARY v0.6.2 valid /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/bin/archivebox √ PYTHON_BINARY v3.10.12 valid /nix/store/pzf6dnxg8gf04xazzjdwarm7s03cbrgz-python3-3.10.12/bin/python3.10 √ DJANGO_BINARY v3.1.14 valid /nix/store/vn992k3ms5mydyxmjnb4c451xl2iiqih-python3.10-django-3.1.14/lib/python3.10/site-packages/django/bin/django-admin.py √ CURL_BINARY v8.3.0 valid /etc/profiles/per-user/jez/bin/curl √ WGET_BINARY v1.21.4 valid /run/current-system/sw/bin/wget √ NODE_BINARY v18.18.0 valid /etc/profiles/per-user/jez/bin/node √ SINGLEFILE_BINARY v1.0.54 valid ./node_modules/single-file/cli/single-file - READABILITY_BINARY - disabled ./node_modules/readability-extractor/readability-extractor √ MERCURY_BINARY v1.0.0 valid ./node_modules/@postlight/mercury-parser/cli.js √ GIT_BINARY v2.42.0 valid /etc/profiles/per-user/jez/bin/git √ YOUTUBEDL_BINARY v2021.12.17 valid /nix/store/l9h2wz73m72p9d31gyh76s1sy5pnik00-python3.10-youtube-dl-2021.12.17/bin/youtube-dl √ CHROME_BINARY v117.0.5938.149 valid /etc/profiles/per-user/jez/bin/chromium-browser √ RIPGREP_BINARY v13.0.0 valid /etc/profiles/per-user/jez/bin/rg [i] Source-code locations: √ PACKAGE_DIR 23 files valid /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/lib/python3.10/site-packages/archivebox √ TEMPLATES_DIR 3 files valid /nix/store/liwmjaqqsgq8k0yyiimmn7larrx876yz-archivebox-0.6.2/lib/python3.10/site-packages/archivebox/templates - CUSTOM_TEMPLATES_DIR - disabled [i] Secrets locations: - CHROME_USER_DATA_DIR - disabled - COOKIES_FILE - disabled [i] Data locations: √ OUTPUT_DIR 10 files valid /home/jez/Sync/Archivebox/data √ SOURCES_DIR 48 files valid ./sources √ LOGS_DIR 1 files valid ./logs √ ARCHIVE_DIR 424 files valid ./archive √ CONFIG_FILE 359.0 Bytes valid ./ArchiveBox.conf √ SQL_INDEX 5.4 MB valid ./index.sqlite3 ```