Log Message:
py-django-cors-headers: updated to 4.2.0

4.2.0 (2023-07-10)
------------------

* Drop Python 3.7 support.

4.1.0 (2023-06-14)
------------------

* Support Python 3.12.

4.0.0 (2023-05-12)
------------------

* Add ``CORS_ALLOW_PRIVATE_NETWORK`` setting, which enables support for the \ 
Local Network Access draft specification.

* Remove three headers from the default "accept list": \ 
``accept-encoding``, ``dnt``, and ``origin``.
  These are `Forbidden header names \ 
<https://developer.mozilla.org/en-US/docs/Glossary/Forbidden_header_name>`__, \ 
which means requests JavaScript can never set them.
  Consequently, allowing them via CORS has no effect.

* Drop the ``CORS_REPLACE_HTTPS_REFERER`` setting and ``CorsPostCsrfMiddleware``.
  Since Django 1.9, the ``CSRF_TRUSTED_ORIGINS`` setting has been the preferred \ 
solution to making CSRF checks pass for CORS requests.
  The removed setting and middleware only existed as a workaround for Django \ 
versions before 1.9.

* Add async support to the middleware, reducing overhead on async views.