diff --git a/pylintrc b/pylintrc index e64df332..ad5067a7 100644 --- a/pylintrc +++ b/pylintrc @@ -64,7 +64,7 @@ # SERIOUSLY. # # ------------------------------ -# Generated by edx-lint version: 5.3.6 +# Generated by edx-lint version: 6.2.0 # ------------------------------ [MASTER] ignore = migrations @@ -257,6 +257,8 @@ enable = deprecated-pragma, unrecognized-inline-option, useless-suppression, + + pii-invalid-no-pii-annotation, disable = bad-indentation, broad-exception-raised, @@ -287,7 +289,6 @@ disable = illegal-waffle-usage, logging-fstring-interpolation, - no-self-use, logging-format-interpolation, useless-suppression, @@ -386,4 +387,9 @@ int-import-graph = [EXCEPTIONS] overgeneral-exceptions = builtins.Exception -# 94445ea91ee8c0de6c53ae1fa510a8a063a86b78 +[PII] +pii-terms = + email, + username + +# 60d37920cf8a79e203302f4f46367ab038b7852a diff --git a/requirements/base.txt b/requirements/base.txt index 20008d43..72e10b3e 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -4,27 +4,27 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.4.1 +click==8.5.0 # via # celery # click-didyoumean @@ -36,13 +36,13 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -cryptography==48.0.0 +cryptography==50.0.1 # via pyjwt -django==5.2.14 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -67,7 +67,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -78,13 +78,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -92,25 +92,26 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in fastavro==1.12.2 # via openedx-events fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests jinja2==3.1.6 # via code-annotations kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -119,19 +120,19 @@ markupsafe==3.0.3 # xblock openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via kombu -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking @@ -141,9 +142,9 @@ python-dateutil==2.9.0.post0 # via # celery # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.2 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -156,7 +157,7 @@ requests==2.34.2 # via edx-drf-extensions semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -164,39 +165,39 @@ six==1.17.0 # event-tracking # fs # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.8.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 - # via edx-opaque-keys -tzdata==2026.2 +typing-extensions==4.16.0 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.9.1 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.11 # via xblock -xblock==6.1.0 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==84.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/ci.txt b/requirements/ci.txt index dd8adcff..f63d32be 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -4,39 +4,40 @@ # # make upgrade # -cachetools==7.1.4 +cachetools==7.2.0 # via tox colorama==0.4.6 # via tox -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -filelock==3.29.0 +filelock==4.0.6 # via # python-discovery # tox # virtualenv mock==5.2.0 # via -r requirements/ci.in -packaging==26.2 +packaging==26.3 # via # pyproject-api # tox -platformdirs==4.10.0 +platformdirs==4.12.1 # via - # python-discovery # tox # virtualenv pluggy==1.6.0 # via tox -pyproject-api==1.10.1 +pyproject-api==1.11.2 # via tox -python-discovery==1.4.0 +python-discovery==1.6.1 # via # tox # virtualenv tomli-w==1.2.0 # via tox -tox==4.55.0 +tox==4.64.4 # via -r requirements/ci.in -virtualenv==21.4.2 +typing-extensions==4.16.0 + # via tox +virtualenv==21.13.0 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index 72cc4cc8..f60f86e0 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -18,3 +18,26 @@ Django<6.0 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 + +# 2026-08-11: pip-tools is only tested against the latest pip released at the time +# pip-tools was released; also, pip-tools package dependencies are extremely permissive +# about the pip version required, so the dependency resolver will not prevent an unwanted +# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained +# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <-> +# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the +# past, but always removed it once the issue was "fixed". Removing this constraint was +# always a mistake. +# +# This is a semi-permanent constraint and should be manually bumped after each pip-tools +# release. +# +# Exceptional conditions for removal: +# - We stop using pip-tools, OR +# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257 +pip<26.2.1 # Known to work with pip-tools==7.6.1 diff --git a/requirements/dev.txt b/requirements/dev.txt index d38785f5..7a66994d 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -4,11 +4,11 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -16,25 +16,25 @@ astroid==4.0.4 # pylint-celery attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery -build==1.5.0 +build==1.6.1 # via pip-tools -cachetools==7.1.4 +cachetools==7.2.0 # via tox celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via # cryptography # pynacl -chardet==7.4.3 +chardet==7.6.0 # via diff-cover -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.4.1 +click==8.5.0 # via # celery # click-didyoumean @@ -51,7 +51,7 @@ click-log==0.4.0 # via edx-lint click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via @@ -59,21 +59,21 @@ code-annotations==3.0.0 # edx-toggles colorama==0.4.6 # via tox -coverage[toml]==7.14.1 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via # pyjwt # secretstorage ddt==1.7.2 # via -r requirements/test.in -diff-cover==10.3.0 +diff-cover==10.6.0 # via -r requirements/dev.in dill==0.4.1 # via pylint -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -django==5.2.14 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -99,7 +99,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -112,17 +112,17 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-i18n-tools==2.0.0 # via -r requirements/dev.in -edx-lint==6.1.0 +edx-lint==6.2.0 # via # -r requirements/dev.in # -r requirements/quality.in @@ -132,19 +132,20 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events -filelock==3.29.0 +filelock==4.0.6 # via # python-discovery # tox @@ -155,11 +156,11 @@ fs==2.4.16 # via xblock id==1.6.1 # via twine -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest -isort==8.0.1 +isort==9.0.2 # via # -r requirements/quality.in # pylint @@ -167,7 +168,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -181,14 +182,14 @@ keyring==25.7.0 # via twine kombu==5.6.2 # via celery -lxml[html-clean]==6.1.1 +lxml[html-clean]==6.1.3 # via # edx-i18n-tools # lxml-html-clean # xblock lxml-html-clean==0.4.5 # via lxml -mako==1.3.12 +mako==1.4.3 # via xblock markdown-it-py==4.2.0 # via rich @@ -207,11 +208,13 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +mypy-extensions==1.1.0 + # via isort +nh3==0.3.7 # via readme-renderer openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # build # kombu @@ -222,12 +225,11 @@ packaging==26.2 # wheel path==16.16.0 # via edx-i18n-tools -pip-tools==7.5.3 +pip-tools==7.6.1 # via -r requirements/dev.in -platformdirs==4.10.0 +platformdirs==4.12.1 # via # pylint - # python-discovery # tox # virtualenv pluggy==1.6.0 @@ -238,27 +240,27 @@ pluggy==1.6.0 # tox polib==1.2.0 # via edx-i18n-tools -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils -pycodestyle==2.14.0 +pycodestyle==2.15.0 # via -r requirements/quality.in pycparser==3.0 # via cffi pydocstyle==6.3.0 # via -r requirements/quality.in -pygments==2.20.0 +pygments==2.21.0 # via # diff-cover # pytest # readme-renderer # rich -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.9 # via # edx-lint # pylint-celery @@ -266,44 +268,44 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via # pylint-celery # pylint-django -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking pynacl==1.6.2 # via edx-django-utils -pyproject-api==1.10.1 +pyproject-api==1.11.2 # via tox -pyproject-hooks==1.2.0 +pyproject-hooks==1.3.3 # via # build # pip-tools -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-discovery==1.4.0 +python-discovery==1.6.1 # via # tox # virtualenv -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.2 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -313,7 +315,7 @@ pyyaml==6.0.3 # code-annotations # edx-i18n-tools # xblock -readme-renderer==44.0 +readme-renderer==46.0 # via twine requests==2.34.2 # via @@ -330,7 +332,7 @@ secretstorage==3.5.0 # via keyring semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -339,11 +341,11 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.8.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils @@ -352,21 +354,24 @@ text-unidecode==1.3 # via python-slugify tomli-w==1.2.0 # via tox -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint -tox==4.55.0 +tox==4.64.4 # via -r requirements/dev.in -twine==6.2.0 +twine==7.0.0 # via -r requirements/quality.in -typing-extensions==4.15.0 - # via edx-opaque-keys -tzdata==2026.2 +typing-extensions==4.16.0 + # via + # click-repl + # edx-opaque-keys + # tox +tzdata==2026.4 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via # id # requests @@ -376,19 +381,17 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.4.2 +virtualenv==21.13.0 # via tox -wcwidth==0.7.0 +wcwidth==0.9.1 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.11 # via xblock -wheel==0.47.0 +wheel==0.48.0 # via # -r requirements/quality.in # pip-tools -xblock==6.1.0 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/doc.txt b/requirements/doc.txt index b8678e2a..dbae8df6 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -8,11 +8,11 @@ accessible-pygments==0.0.5 # via pydata-sphinx-theme alabaster==1.0.0 # via sphinx -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -20,21 +20,21 @@ babel==2.18.0 # via # pydata-sphinx-theme # sphinx -beautifulsoup4==4.14.3 +beautifulsoup4==4.15.0 # via pydata-sphinx-theme -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.4.1 +click==8.5.0 # via # celery # click-didyoumean @@ -46,17 +46,17 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via pyjwt ddt==1.7.2 # via -r requirements/test.in -django==5.2.14 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -81,7 +81,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -100,13 +100,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -114,15 +114,16 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -130,21 +131,22 @@ freezegun==1.5.5 # via -r requirements/test.in fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests -imagesize==2.0.0 +imagesize==2.0.1 # via sphinx iniconfig==2.3.0 # via pytest jinja2==3.1.6 # via # code-annotations + # pydata-sphinx-theme # sphinx kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -155,7 +157,7 @@ mock==5.2.0 # via -r requirements/test.in openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest @@ -164,47 +166,47 @@ pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pydata-sphinx-theme==0.16.1 +pydata-sphinx-theme==0.20.0 # via sphinx-book-theme -pygments==2.20.0 +pygments==2.21.0 # via # accessible-pygments # doc8 # pydata-sphinx-theme # pytest # sphinx -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.2 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -216,6 +218,7 @@ pyyaml==6.0.3 requests==2.34.2 # via # edx-drf-extensions + # pydata-sphinx-theme # sphinx restructuredtext-lint==2.0.2 # via doc8 @@ -223,7 +226,7 @@ roman-numerals==4.1.0 # via sphinx semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -231,16 +234,16 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via sphinx -soupsieve==2.8.4 +soupsieve==2.10 # via beautifulsoup4 sphinx==9.1.0 # via # -r requirements/doc.in # pydata-sphinx-theme # sphinx-book-theme -sphinx-book-theme==1.2.0 +sphinx-book-theme==1.4.0 # via -r requirements/doc.in sphinxcontrib-applehelp==2.0.0 # via sphinx @@ -254,9 +257,9 @@ sphinxcontrib-qthelp==2.0.0 # via sphinx sphinxcontrib-serializinghtml==2.0.0 # via sphinx -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.8.0 +stevedore==5.9.1 # via # code-annotations # doc8 @@ -264,29 +267,27 @@ stevedore==5.8.0 # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via # beautifulsoup4 + # click-repl # edx-opaque-keys - # pydata-sphinx-theme -tzdata==2026.2 +tzdata==2026.4 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.9.1 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.11 # via xblock -xblock==6.1.0 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index ae6076a0..df8bedd6 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -4,21 +4,21 @@ # # make upgrade # -build==1.5.0 +build==1.6.1 # via pip-tools -click==8.4.1 +click==8.5.0 # via pip-tools -packaging==26.2 +packaging==26.3 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.1 # via -r requirements/pip-tools.in -pyproject-hooks==1.2.0 +pyproject-hooks==1.3.3 # via # build # pip-tools -wheel==0.47.0 +wheel==0.48.0 # via pip-tools # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip.txt b/requirements/pip.txt index f3c15550..582d6205 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -4,13 +4,15 @@ # # make upgrade # -packaging==26.2 +packaging==26.3 # via wheel -wheel==0.47.0 +wheel==0.48.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.1.2 - # via -r requirements/pip.in -setuptools==82.0.1 +pip==26.2 + # via + # -c requirements/common_constraints.txt + # -r requirements/pip.in +setuptools==84.0.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index beaf6049..0a3cd789 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -4,11 +4,11 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -16,19 +16,19 @@ astroid==4.0.4 # pylint-celery attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.4.1 +click==8.5.0 # via # celery # click-didyoumean @@ -44,15 +44,15 @@ click-log==0.4.0 # via edx-lint click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via # edx-lint # edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via # pyjwt # secretstorage @@ -60,7 +60,7 @@ ddt==1.7.2 # via -r requirements/test.in dill==0.4.1 # via pylint -django==5.2.14 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -85,7 +85,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -98,15 +98,15 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in -edx-lint==6.1.0 +edx-lint==6.2.0 # via -r requirements/quality.in edx-opaque-keys[django]==4.0.0 # via @@ -114,15 +114,16 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -132,11 +133,11 @@ fs==2.4.16 # via xblock id==1.6.1 # via twine -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest -isort==8.0.1 +isort==9.0.2 # via # -r requirements/quality.in # pylint @@ -144,7 +145,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -156,9 +157,9 @@ keyring==25.7.0 # via twine kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markdown-it-py==4.2.0 # via rich @@ -177,42 +178,44 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +mypy-extensions==1.1.0 + # via isort +nh3==0.3.7 # via readme-renderer openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest # twine # wheel -platformdirs==4.10.0 +platformdirs==4.12.1 # via pylint pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils -pycodestyle==2.14.0 +pycodestyle==2.15.0 # via -r requirements/quality.in pycparser==3.0 # via cffi pydocstyle==6.3.0 # via -r requirements/quality.in -pygments==2.20.0 +pygments==2.21.0 # via # pytest # readme-renderer # rich -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.9 # via # edx-lint # pylint-celery @@ -220,34 +223,34 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via # pylint-celery # pylint-django -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.2 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -256,7 +259,7 @@ pyyaml==6.0.3 # via # code-annotations # xblock -readme-renderer==44.0 +readme-renderer==46.0 # via twine requests==2.34.2 # via @@ -273,7 +276,7 @@ secretstorage==3.5.0 # via keyring semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -282,30 +285,32 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.8.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint -twine==6.2.0 +twine==7.0.0 # via -r requirements/quality.in -typing-extensions==4.15.0 - # via edx-opaque-keys -tzdata==2026.2 +typing-extensions==4.16.0 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via # id # requests @@ -315,19 +320,17 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.9.1 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.11 # via xblock -wheel==0.47.0 +wheel==0.48.0 # via -r requirements/quality.in -xblock==6.1.0 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==84.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/test.txt b/requirements/test.txt index 5c9dd145..1da1b6b6 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -4,27 +4,27 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.4.1 +click==8.5.0 # via # celery # click-didyoumean @@ -36,13 +36,13 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via pyjwt ddt==1.7.2 # via -r requirements/test.in @@ -80,13 +80,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -94,15 +94,16 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -110,7 +111,7 @@ freezegun==1.5.5 # via -r requirements/test.in fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest @@ -118,9 +119,9 @@ jinja2==3.1.6 # via code-annotations kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -131,7 +132,7 @@ mock==5.2.0 # via -r requirements/test.in openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest @@ -139,40 +140,40 @@ pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pygments==2.20.0 +pygments==2.21.0 # via pytest -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.2 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -185,7 +186,7 @@ requests==2.34.2 # via edx-drf-extensions semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -193,35 +194,35 @@ six==1.17.0 # event-tracking # fs # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.8.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 - # via edx-opaque-keys -tzdata==2026.2 +typing-extensions==4.16.0 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.9.1 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.11 # via xblock -xblock==6.1.0 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: