Version 2.9.1 brings in the fix for the 'uv version' issue.

…ers (#833)

As of Juju 3.6 Charms can have non-root users. We want to make use of the non-root charm containers. We had some issues with some file/folder permissions because we are creating/modifying some files from the charm code.

This PR fixes these permission issues by creating the folders inside the rockcraft.yaml file and setting the user as _daemon_. Adds a new part into all 12 Factor extensions called logging. This part creates the folders necessary for logging and sets their user to _daemon_ so that the non-root charms can interact with them.

For Flask and Django extensions, it also sets the gunicorn.conf.py file and its parent folder to _daemon_ user.
Again for Flask and Django extensions, it creates the /var/log/django and /var/log/flask folders and sets their user to _daemon_.

The lack of a minimum version makes osv-scanner complain about basically
every CVE ever published for Django. Version 5.2.1 is quite new (from May 7),
but this patch release itself addresses a CVE, so we might as well set it
as a baseline.

ref: https://docs.djangoproject.com/en/5.2/releases/5.2.1/

Co-authored-by: JJ Coldiron <jj.coldiron@canonical.com>

Co-authored-by: Tiago Nobrega <tiago.nobrega@canonical.com>

❯ uv lock --upgrade
Resolved 205 packages in 4.46s
Updated astroid v3.3.9 -> v3.3.10
Updated cachecontrol v0.14.2 -> v0.14.3
Updated charset-normalizer v3.4.1 -> v3.4.2
Updated click v8.1.8 -> v8.2.1
Updated coverage v7.8.0 -> v7.8.2
Updated craft-application v5.2.0 -> v5.3.0
Updated craft-parts v2.9.1 -> v2.10.0
Updated craft-platforms v0.8.0 -> v0.9.0
Updated craft-providers v2.2.0 -> v2.3.0
Updated cryptography v44.0.2 -> v45.0.3
Updated exceptiongroup v1.2.2 -> v1.3.0
Updated pbs-installer v2025.4.9 -> v2025.5.17
Updated platformdirs v4.3.7 -> v4.3.8
Updated pluggy v1.5.0 -> v1.6.0
Updated poetry v2.1.2 -> v2.1.3
Updated poetry-core v2.1.2 -> v2.1.3
Updated protobuf v6.30.2 -> v6.31.1
Updated pydantic v2.11.3 -> v2.11.5
Updated pydantic-core v2.33.1 -> v2.33.2
Updated pylint v3.3.6 -> v3.3.7
Updated pytest-mock v3.14.0 -> v3.14.1
Updated python-apt v2.4.0+ubuntu4, v2.7.7+ubuntu3, v2.9.0+ubuntu1, v2.9.9 -> v2.4.0+ubuntu4, v2.7.7+ubuntu3, v2.9.0+ubuntu1, v3.0.0
Updated ruamel-yaml v0.18.10 -> v0.18.11
Updated setuptools v80.0.0 -> v80.9.0
Updated snowballstemmer v2.2.0 -> v3.0.1
Updated sphinx-toolbox v3.9.0 -> v3.10.0
Updated trove-classifiers v2025.4.28.22 -> v2025.5.9.12
Updated types-docutils v0.21.0.20241128 -> v0.21.0.20250526
Updated types-pygments v2.19.0.20250305 -> v2.19.0.20250516
Updated types-pyyaml v6.0.12.20250402 -> v6.0.12.20250516
Updated types-setuptools v80.0.0.20250429 -> v80.8.0.20250521
Updated typing-inspection v0.4.0 -> v0.4.1
Updated virtualenv v20.30.0 -> v20.31.2
Updated zipp v3.21.0 -> v3.22.0

This issue: canonical/craft-providers#753
is preventing builds on non-Ubuntu.

Due to:

- https://osv.dev/vulnerability/PYSEC-2023-62
- https://osv.dev/vulnerability/PYSEC-2023-177

Version 80.9.0 gives a very early warning about the deprecation of
pkg_resources in another dependency.