Prepare 1.4.0 for Wagtail 7.0 through 7.4

.github/workflows/release.yml

@@ -15,17 +15,17 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           enable-cache: true
 
@@ -62,7 +62,7 @@ jobs:
         run: uvx twine check dist/*
 
       - name: Upload built distributions
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: python-package-distributions
           path: dist/
@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Download built distributions
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: python-package-distributions
           path: dist/

.github/workflows/test.yml

@@ -19,11 +19,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Set up uv
         id: setup-uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ matrix.python }}
           enable-cache: true
@@ -54,11 +54,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Set up uv
         id: setup-uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ matrix.python }}
           enable-cache: true
@@ -83,7 +83,7 @@ jobs:
 
     services:
       mariadb:
-        image: mysql:8.0
+        image: mysql:8.4
         env:
           MYSQL_ROOT_PASSWORD: mysql
         options: >-
@@ -96,11 +96,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Set up uv
         id: setup-uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ matrix.python }}
           enable-cache: true

.pre-commit-config.yaml

@@ -1,24 +1,24 @@
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.11.7
+    rev: 0.11.29
     hooks:
       - id: uv-lock
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.11
+    rev: v0.15.21
     hooks:
       - id: ruff-check
         args: [--fix]
       - id: ruff-format
   - repo: https://github.com/jackdewinter/pymarkdown
-    rev: v0.9.36
+    rev: v0.9.39
     hooks:
       - id: pymarkdown
         args:
           - --disable-rules
           - line-length
           - scan
   - repo: https://github.com/adamchainz/django-upgrade
-    rev: "1.30.0"  # replace with latest tag on GitHub
+    rev: "1.31.1"
     hooks:
       - id: django-upgrade
-        args: [--target-version, "5.2"]   # Replace with Django version
+        args: [--target-version, "6.0"]

CHANGELOG

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 
 ## Unreleased
 
+- Release version 1.4.0 with Wagtail 7.0 through 7.4 support on compatible Django 5.2 and 6.0 combinations.
+- Drop support for Django 4.2 and 5.1, and Wagtail versions before 7.0; earlier package releases remain available for older projects.
+- Refresh locked development dependencies, pre-commit hooks, GitHub Actions, and MySQL CI to current releases.
+
 ## [1.3.1] - 2026-07-16
 
 - Ignore malformed honeypot timestamps instead of raising an exception.

README.md

@@ -173,8 +173,10 @@ The field should be visibly hidden and not be available to receive any value fro
 Wagtail honey pot can be used in environments:
 
 - Python 3.10+
-- Django 4.2+
-- Wagtail 6.3+
+- Django 5.2 or 6.0
+- Wagtail 7.0 through 7.4
+
+Use a Django and Python version supported by the selected Wagtail release; see Wagtail's [compatible Django / Python versions](https://docs.wagtail.org/en/stable-7.4.x/releases/upgrading.html#compatible-django-python-versions).
 
 ## Contributions
 

docs/developer.md

@@ -11,9 +11,9 @@ uv python install 3.12
 uv sync
 ```
 
-The default synced environment is intended to track the latest tested local stack for this repo: Python 3.12 with Django 6.0 and Wagtail 7.3. Use `tox` for the broader compatibility matrix.
+The default synced environment is intended to track the latest tested local stack for this repo: Python 3.12 with Django 6.0 and Wagtail 7.4. Use `tox` for the broader compatibility matrix.
 
-There is a [testapp](../tests/testapp/) provided that is a fully configured minimal setup using Wagtail v6.3+
+There is a [testapp](../tests/testapp/) provided that is a fully configured minimal setup using Wagtail 7.4.
 
 Setup the app:
 

docs/superpowers/plans/2026-07-15-invalid-honeypot-time.md

@@ -22,12 +22,14 @@
 ### Task 1: Fail Closed for Malformed Honeypot Timestamps
 
 **Files:**
+
 - Modify: `tests/test_methods.py:19-31`
 - Modify: `tests/test_form.py:93-103`
 - Modify: `wagtail_honeypot/models.py:44-48`
 - Modify: `CHANGELOG:5-8`
 
 **Interfaces:**
+
 - Consumes: `HoneypotFormSubmissionMixin.time_diff(value, interval)` and the existing `HoneypotFormPageTestCase.post_form(**overrides)` helper.
 - Produces: unchanged `time_diff(value, interval) -> bool`; values that cannot be converted with `int(value)` produce `False`.