[Nitrocosm]

Django 4.2 has been out of security support since April 2026; 5.2 LTS is supported until April 2028.

• Django <5.0 → ~=5.2 (5.2.18); no other package changes in Pipfile.lock
• USE_L10N removed (always on in Django 5; we already had it on, so no change)
• CI runs black from Pipfile.lock instead of the pinned 24.8.0 action; manage.py reformatted (one blank line)
• pre-commit was broken (flake8 from GitLab with an empty rev, black 20.8b1): flake8, black and isort now run through pipenv, same as Cosmos

Tested with Python 3.12 and PostgreSQL 17: check, collectstatic, smoke test (no deprecation warnings), black, flake8.