From 664f165652c939f318e2ece3602ad67ac79f4400 Mon Sep 17 00:00:00 2001 From: edX requirements bot Date: Tue, 28 Jul 2026 11:57:58 -0400 Subject: [PATCH 1/2] chore: Upgrade Python requirements --- requirements/base.txt | 37 +++++++------- requirements/ci.txt | 16 +++--- requirements/common_constraints.txt | 6 +++ requirements/dev.txt | 77 ++++++++++++++--------------- requirements/doc.txt | 54 ++++++++++---------- requirements/pip-tools.txt | 4 +- requirements/pip.txt | 2 +- requirements/quality.txt | 61 +++++++++++------------ requirements/test.txt | 39 +++++++-------- 9 files changed, 149 insertions(+), 147 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 20008d43..13e9b343 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -16,15 +16,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -40,9 +40,9 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -92,6 +92,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -121,7 +122,7 @@ openedx-events==11.2.0 # via event-tracking packaging==26.2 # via kombu -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils @@ -143,7 +144,7 @@ python-dateutil==2.9.0.post0 # xblock python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via # -r requirements/base.in # event-tracking @@ -166,18 +167,18 @@ six==1.17.0 # python-dateutil sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -186,17 +187,15 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==83.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/ci.txt b/requirements/ci.txt index dd8adcff..b904732e 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -4,13 +4,13 @@ # # make upgrade # -cachetools==7.1.4 +cachetools==7.1.6 # via tox colorama==0.4.6 # via tox -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -filelock==3.29.0 +filelock==3.32.0 # via # python-discovery # tox @@ -21,22 +21,22 @@ packaging==26.2 # via # pyproject-api # tox -platformdirs==4.10.0 +platformdirs==4.11.0 # via # python-discovery # tox # virtualenv pluggy==1.6.0 # via tox -pyproject-api==1.10.1 +pyproject-api==1.11.0 # via tox -python-discovery==1.4.0 +python-discovery==1.5.0 # via # tox # virtualenv tomli-w==1.2.0 # via tox -tox==4.55.0 +tox==4.58.0 # via -r requirements/ci.in -virtualenv==21.4.2 +virtualenv==21.7.0 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index 72cc4cc8..edb1bcb8 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -18,3 +18,9 @@ Django<6.0 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 diff --git a/requirements/dev.txt b/requirements/dev.txt index d38785f5..0519425e 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -20,21 +20,21 @@ billiard==4.2.4 # via celery build==1.5.0 # via pip-tools -cachetools==7.1.4 +cachetools==7.1.6 # via tox celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl chardet==7.4.3 # via diff-cover -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -59,21 +59,21 @@ code-annotations==3.0.0 # edx-toggles colorama==0.4.6 # via tox -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via # pyjwt # secretstorage ddt==1.7.2 # via -r requirements/test.in -diff-cover==10.3.0 +diff-cover==10.4.1 # via -r requirements/dev.in dill==0.4.1 # via pylint -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -132,6 +132,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -140,11 +141,11 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.36.0 # via factory-boy fastavro==1.12.2 # via openedx-events -filelock==3.29.0 +filelock==3.32.0 # via # python-discovery # tox @@ -167,7 +168,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -207,7 +208,7 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +nh3==0.3.6 # via readme-renderer openedx-events==11.2.0 # via event-tracking @@ -222,9 +223,9 @@ packaging==26.2 # wheel path==16.16.0 # via edx-i18n-tools -pip-tools==7.5.3 +pip-tools==7.6.0 # via -r requirements/dev.in -platformdirs==4.10.0 +platformdirs==4.11.0 # via # pylint # python-discovery @@ -238,7 +239,7 @@ pluggy==1.6.0 # tox polib==1.2.0 # via edx-i18n-tools -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils @@ -258,7 +259,7 @@ pyjwt[crypto]==2.13.0 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.6 # via # edx-lint # pylint-celery @@ -266,7 +267,7 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via @@ -278,13 +279,13 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pyproject-api==1.10.1 +pyproject-api==1.11.0 # via tox pyproject-hooks==1.2.0 # via # build # pip-tools -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -297,13 +298,13 @@ python-dateutil==2.9.0.post0 # celery # freezegun # xblock -python-discovery==1.4.0 +python-discovery==1.5.0 # via # tox # virtualenv python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via # -r requirements/base.in # event-tracking @@ -313,7 +314,7 @@ pyyaml==6.0.3 # code-annotations # edx-i18n-tools # xblock -readme-renderer==44.0 +readme-renderer==45.0 # via twine requests==2.34.2 # via @@ -339,11 +340,11 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils @@ -352,19 +353,19 @@ text-unidecode==1.3 # via python-slugify tomli-w==1.2.0 # via tox -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint -tox==4.55.0 +tox==4.58.0 # via -r requirements/dev.in -twine==6.2.0 +twine==7.0.0 # via -r requirements/quality.in -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via @@ -376,19 +377,17 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.4.2 +virtualenv==21.7.0 # via tox -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock wheel==0.47.0 # via # -r requirements/quality.in # pip-tools -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/doc.txt b/requirements/doc.txt index b8678e2a..e1db7b90 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -12,7 +12,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -20,21 +20,21 @@ babel==2.18.0 # via # pydata-sphinx-theme # sphinx -beautifulsoup4==4.14.3 +beautifulsoup4==4.15.0 # via pydata-sphinx-theme billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -50,13 +50,13 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt ddt==1.7.2 # via -r requirements/test.in -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -114,6 +114,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -122,7 +123,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.36.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -139,6 +140,7 @@ iniconfig==2.3.0 jinja2==3.1.6 # via # code-annotations + # pydata-sphinx-theme # sphinx kombu==5.6.2 # via celery @@ -164,13 +166,13 @@ pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pydata-sphinx-theme==0.16.1 +pydata-sphinx-theme==0.20.0 # via sphinx-book-theme pygments==2.20.0 # via @@ -189,7 +191,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -204,7 +206,7 @@ python-dateutil==2.9.0.post0 # xblock python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via # -r requirements/base.in # event-tracking @@ -216,6 +218,7 @@ pyyaml==6.0.3 requests==2.34.2 # via # edx-drf-extensions + # pydata-sphinx-theme # sphinx restructuredtext-lint==2.0.2 # via doc8 @@ -231,16 +234,16 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via sphinx -soupsieve==2.8.4 +soupsieve==2.9.1 # via beautifulsoup4 sphinx==9.1.0 # via # -r requirements/doc.in # pydata-sphinx-theme # sphinx-book-theme -sphinx-book-theme==1.2.0 +sphinx-book-theme==1.4.0 # via -r requirements/doc.in sphinxcontrib-applehelp==2.0.0 # via sphinx @@ -256,7 +259,7 @@ sphinxcontrib-serializinghtml==2.0.0 # via sphinx sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # doc8 @@ -264,14 +267,13 @@ stevedore==5.8.0 # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via # beautifulsoup4 # edx-opaque-keys - # pydata-sphinx-theme -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -280,13 +282,11 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index ae6076a0..20aa67f1 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -6,13 +6,13 @@ # build==1.5.0 # via pip-tools -click==8.4.1 +click==8.4.2 # via pip-tools packaging==26.2 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.0 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index f3c15550..d7766d39 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -12,5 +12,5 @@ wheel==0.47.0 # The following packages are considered to be unsafe in a requirements file: pip==26.1.2 # via -r requirements/pip.in -setuptools==82.0.1 +setuptools==83.0.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index beaf6049..252b6199 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -20,15 +20,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -50,9 +50,9 @@ code-annotations==3.0.0 # via # edx-lint # edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via # pyjwt # secretstorage @@ -60,7 +60,7 @@ ddt==1.7.2 # via -r requirements/test.in dill==0.4.1 # via pylint -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -114,6 +114,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -122,7 +123,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.36.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -144,7 +145,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -177,7 +178,7 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +nh3==0.3.6 # via readme-renderer openedx-events==11.2.0 # via event-tracking @@ -187,13 +188,13 @@ packaging==26.2 # pytest # twine # wheel -platformdirs==4.10.0 +platformdirs==4.11.0 # via pylint pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils @@ -212,7 +213,7 @@ pyjwt[crypto]==2.13.0 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.6 # via # edx-lint # pylint-celery @@ -220,7 +221,7 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via @@ -232,7 +233,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -247,7 +248,7 @@ python-dateutil==2.9.0.post0 # xblock python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via # -r requirements/base.in # event-tracking @@ -256,7 +257,7 @@ pyyaml==6.0.3 # via # code-annotations # xblock -readme-renderer==44.0 +readme-renderer==45.0 # via twine requests==2.34.2 # via @@ -282,28 +283,28 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint -twine==6.2.0 +twine==7.0.0 # via -r requirements/quality.in -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via @@ -315,19 +316,17 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock wheel==0.47.0 # via -r requirements/quality.in -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==83.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/test.txt b/requirements/test.txt index 5c9dd145..ec7061a0 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -16,15 +16,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -40,9 +40,9 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt ddt==1.7.2 # via -r requirements/test.in @@ -94,6 +94,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -102,7 +103,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.36.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -139,7 +140,7 @@ pluggy==1.6.0 # via # pytest # pytest-cov -prompt-toolkit==3.0.52 +prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils @@ -157,7 +158,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -172,7 +173,7 @@ python-dateutil==2.9.0.post0 # xblock python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via # -r requirements/base.in # event-tracking @@ -195,18 +196,18 @@ six==1.17.0 # python-dateutil sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -215,13 +216,11 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: From a8947eb038d8d7c3cae2543e396e3cb9042f5f98 Mon Sep 17 00:00:00 2001 From: Jillian Vogel Date: Tue, 29 Sep 2026 15:17:23 +0930 Subject: [PATCH 2/2] chore: make upgrade + pylint fixes Run to consolidate these package updates with the dependabot updates that have come in since this PR was opened. --- pylintrc | 12 ++- requirements/base.txt | 62 ++++++++-------- requirements/ci.txt | 19 ++--- requirements/common_constraints.txt | 17 +++++ requirements/dev.txt | 110 ++++++++++++++-------------- requirements/doc.txt | 69 ++++++++--------- requirements/pip-tools.txt | 12 +-- requirements/pip.txt | 12 +-- requirements/quality.txt | 88 +++++++++++----------- requirements/test.txt | 64 ++++++++-------- 10 files changed, 252 insertions(+), 213 deletions(-) diff --git a/pylintrc b/pylintrc index e64df332..ad5067a7 100644 --- a/pylintrc +++ b/pylintrc @@ -64,7 +64,7 @@ # SERIOUSLY. # # ------------------------------ -# Generated by edx-lint version: 5.3.6 +# Generated by edx-lint version: 6.2.0 # ------------------------------ [MASTER] ignore = migrations @@ -257,6 +257,8 @@ enable = deprecated-pragma, unrecognized-inline-option, useless-suppression, + + pii-invalid-no-pii-annotation, disable = bad-indentation, broad-exception-raised, @@ -287,7 +289,6 @@ disable = illegal-waffle-usage, logging-fstring-interpolation, - no-self-use, logging-format-interpolation, useless-suppression, @@ -386,4 +387,9 @@ int-import-graph = [EXCEPTIONS] overgeneral-exceptions = builtins.Exception -# 94445ea91ee8c0de6c53ae1fa510a8a063a86b78 +[PII] +pii-terms = + email, + username + +# 60d37920cf8a79e203302f4f46367ab038b7852a diff --git a/requirements/base.txt b/requirements/base.txt index 13e9b343..72e10b3e 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -4,7 +4,7 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs @@ -12,19 +12,19 @@ asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.9 +charset-normalizer==3.5.1 # via requests -click==8.4.2 +click==8.5.0 # via # celery # click-didyoumean @@ -36,13 +36,13 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -cryptography==49.0.0 +cryptography==50.0.1 # via pyjwt -django==5.2.16 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -67,7 +67,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -78,13 +78,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -97,21 +97,21 @@ edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in fastavro==1.12.2 # via openedx-events fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests jinja2==3.1.6 # via code-annotations kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -120,7 +120,7 @@ markupsafe==3.0.3 # xblock openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via kombu prompt-toolkit==3.0.53 # via click-repl @@ -128,11 +128,11 @@ psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking @@ -142,9 +142,9 @@ python-dateutil==2.9.0.post0 # via # celery # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.3.post1 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -157,7 +157,7 @@ requests==2.34.2 # via edx-drf-extensions semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -165,9 +165,9 @@ six==1.17.0 # event-tracking # fs # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.9.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils @@ -175,27 +175,29 @@ stevedore==5.9.0 text-unidecode==1.3 # via python-slugify typing-extensions==4.16.0 - # via edx-opaque-keys -tzdata==2026.3 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.8.2 +wcwidth==0.9.1 # via prompt-toolkit -webob==1.8.10 +webob==1.8.11 # via xblock -xblock==6.3.1 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==83.0.0 +setuptools==84.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/ci.txt b/requirements/ci.txt index b904732e..f63d32be 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -4,39 +4,40 @@ # # make upgrade # -cachetools==7.1.6 +cachetools==7.2.0 # via tox colorama==0.4.6 # via tox distlib==0.4.3 # via virtualenv -filelock==3.32.0 +filelock==4.0.6 # via # python-discovery # tox # virtualenv mock==5.2.0 # via -r requirements/ci.in -packaging==26.2 +packaging==26.3 # via # pyproject-api # tox -platformdirs==4.11.0 +platformdirs==4.12.1 # via - # python-discovery # tox # virtualenv pluggy==1.6.0 # via tox -pyproject-api==1.11.0 +pyproject-api==1.11.2 # via tox -python-discovery==1.5.0 +python-discovery==1.6.1 # via # tox # virtualenv tomli-w==1.2.0 # via tox -tox==4.58.0 +tox==4.64.4 # via -r requirements/ci.in -virtualenv==21.7.0 +typing-extensions==4.16.0 + # via tox +virtualenv==21.13.0 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index edb1bcb8..f60f86e0 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -24,3 +24,20 @@ elasticsearch<7.14.0 # Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 social-auth-app-django<6.0.0 social-auth-core<5.0.0 + +# 2026-08-11: pip-tools is only tested against the latest pip released at the time +# pip-tools was released; also, pip-tools package dependencies are extremely permissive +# about the pip version required, so the dependency resolver will not prevent an unwanted +# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained +# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <-> +# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the +# past, but always removed it once the issue was "fixed". Removing this constraint was +# always a mistake. +# +# This is a semi-permanent constraint and should be manually bumped after each pip-tools +# release. +# +# Exceptional conditions for removal: +# - We stop using pip-tools, OR +# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257 +pip<26.2.1 # Known to work with pip-tools==7.6.1 diff --git a/requirements/dev.txt b/requirements/dev.txt index 0519425e..7a66994d 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -4,7 +4,7 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs @@ -16,25 +16,25 @@ astroid==4.0.4 # pylint-celery attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery -build==1.5.0 +build==1.6.1 # via pip-tools -cachetools==7.1.6 +cachetools==7.2.0 # via tox celery==5.6.3 # via event-tracking certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl -chardet==7.4.3 +chardet==7.6.0 # via diff-cover -charset-normalizer==3.4.9 +charset-normalizer==3.5.1 # via requests -click==8.4.2 +click==8.5.0 # via # celery # click-didyoumean @@ -51,7 +51,7 @@ click-log==0.4.0 # via edx-lint click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via @@ -59,21 +59,21 @@ code-annotations==3.0.0 # edx-toggles colorama==0.4.6 # via tox -coverage[toml]==7.15.2 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==49.0.0 +cryptography==50.0.1 # via # pyjwt # secretstorage ddt==1.7.2 # via -r requirements/test.in -diff-cover==10.4.1 +diff-cover==10.6.0 # via -r requirements/dev.in dill==0.4.1 # via pylint distlib==0.4.3 # via virtualenv -django==5.2.16 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -99,7 +99,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -112,17 +112,17 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-i18n-tools==2.0.0 # via -r requirements/dev.in -edx-lint==6.1.0 +edx-lint==6.2.0 # via # -r requirements/dev.in # -r requirements/quality.in @@ -137,15 +137,15 @@ edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.36.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events -filelock==3.32.0 +filelock==4.0.6 # via # python-discovery # tox @@ -156,11 +156,11 @@ fs==2.4.16 # via xblock id==1.6.1 # via twine -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest -isort==8.0.1 +isort==9.0.2 # via # -r requirements/quality.in # pylint @@ -182,14 +182,14 @@ keyring==25.7.0 # via twine kombu==5.6.2 # via celery -lxml[html-clean]==6.1.1 +lxml[html-clean]==6.1.3 # via # edx-i18n-tools # lxml-html-clean # xblock lxml-html-clean==0.4.5 # via lxml -mako==1.3.12 +mako==1.4.3 # via xblock markdown-it-py==4.2.0 # via rich @@ -208,11 +208,13 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.6 +mypy-extensions==1.1.0 + # via isort +nh3==0.3.7 # via readme-renderer openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # build # kombu @@ -223,12 +225,11 @@ packaging==26.2 # wheel path==16.16.0 # via edx-i18n-tools -pip-tools==7.6.0 +pip-tools==7.6.1 # via -r requirements/dev.in -platformdirs==4.11.0 +platformdirs==4.12.1 # via # pylint - # python-discovery # tox # virtualenv pluggy==1.6.0 @@ -243,23 +244,23 @@ prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils -pycodestyle==2.14.0 +pycodestyle==2.15.0 # via -r requirements/quality.in pycparser==3.0 # via cffi pydocstyle==6.3.0 # via -r requirements/quality.in -pygments==2.20.0 +pygments==2.21.0 # via # diff-cover # pytest # readme-renderer # rich -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pylint==4.0.6 +pylint==4.0.9 # via # edx-lint # pylint-celery @@ -273,15 +274,15 @@ pylint-plugin-utils==0.9.0 # via # pylint-celery # pylint-django -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking pynacl==1.6.2 # via edx-django-utils -pyproject-api==1.11.0 +pyproject-api==1.11.2 # via tox -pyproject-hooks==1.2.0 +pyproject-hooks==1.3.3 # via # build # pip-tools @@ -291,20 +292,20 @@ pytest==9.1.1 # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-discovery==1.5.0 +python-discovery==1.6.1 # via # tox # virtualenv -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.3.post1 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -314,7 +315,7 @@ pyyaml==6.0.3 # code-annotations # edx-i18n-tools # xblock -readme-renderer==45.0 +readme-renderer==46.0 # via twine requests==2.34.2 # via @@ -331,7 +332,7 @@ secretstorage==3.5.0 # via keyring semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -342,9 +343,9 @@ six==1.17.0 # python-dateutil snowballstemmer==3.1.1 # via pydocstyle -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.9.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils @@ -357,17 +358,20 @@ tomlkit==0.15.1 # via # edx-lint # pylint -tox==4.58.0 +tox==4.64.4 # via -r requirements/dev.in twine==7.0.0 # via -r requirements/quality.in typing-extensions==4.16.0 - # via edx-opaque-keys -tzdata==2026.3 + # via + # click-repl + # edx-opaque-keys + # tox +tzdata==2026.4 # via kombu tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via # id # requests @@ -377,17 +381,17 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.7.0 +virtualenv==21.13.0 # via tox -wcwidth==0.8.2 +wcwidth==0.9.1 # via prompt-toolkit -webob==1.8.10 +webob==1.8.11 # via xblock -wheel==0.47.0 +wheel==0.48.0 # via # -r requirements/quality.in # pip-tools -xblock==6.3.1 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/doc.txt b/requirements/doc.txt index e1db7b90..dbae8df6 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -8,7 +8,7 @@ accessible-pygments==0.0.5 # via pydata-sphinx-theme alabaster==1.0.0 # via sphinx -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs @@ -22,19 +22,19 @@ babel==2.18.0 # sphinx beautifulsoup4==4.15.0 # via pydata-sphinx-theme -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.9 +charset-normalizer==3.5.1 # via requests -click==8.4.2 +click==8.5.0 # via # celery # click-didyoumean @@ -46,17 +46,17 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.15.2 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==49.0.0 +cryptography==50.0.1 # via pyjwt ddt==1.7.2 # via -r requirements/test.in -django==5.2.16 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -81,7 +81,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -100,13 +100,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -119,11 +119,11 @@ edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.36.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -131,9 +131,9 @@ freezegun==1.5.5 # via -r requirements/test.in fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests -imagesize==2.0.0 +imagesize==2.0.1 # via sphinx iniconfig==2.3.0 # via pytest @@ -144,9 +144,9 @@ jinja2==3.1.6 # sphinx kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -157,7 +157,7 @@ mock==5.2.0 # via -r requirements/test.in openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest @@ -174,18 +174,18 @@ pycparser==3.0 # via cffi pydata-sphinx-theme==0.20.0 # via sphinx-book-theme -pygments==2.20.0 +pygments==2.21.0 # via # accessible-pygments # doc8 # pydata-sphinx-theme # pytest # sphinx -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking @@ -197,16 +197,16 @@ pytest==9.1.1 # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.3.post1 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -226,7 +226,7 @@ roman-numerals==4.1.0 # via sphinx semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -236,7 +236,7 @@ six==1.17.0 # python-dateutil snowballstemmer==3.1.1 # via sphinx -soupsieve==2.9.1 +soupsieve==2.10 # via beautifulsoup4 sphinx==9.1.0 # via @@ -257,9 +257,9 @@ sphinxcontrib-qthelp==2.0.0 # via sphinx sphinxcontrib-serializinghtml==2.0.0 # via sphinx -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.9.0 +stevedore==5.9.1 # via # code-annotations # doc8 @@ -270,23 +270,24 @@ text-unidecode==1.3 typing-extensions==4.16.0 # via # beautifulsoup4 + # click-repl # edx-opaque-keys -tzdata==2026.3 +tzdata==2026.4 # via kombu tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.8.2 +wcwidth==0.9.1 # via prompt-toolkit -webob==1.8.10 +webob==1.8.11 # via xblock -xblock==6.3.1 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 20aa67f1..df8bedd6 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -4,21 +4,21 @@ # # make upgrade # -build==1.5.0 +build==1.6.1 # via pip-tools -click==8.4.2 +click==8.5.0 # via pip-tools -packaging==26.2 +packaging==26.3 # via # build # wheel -pip-tools==7.6.0 +pip-tools==7.6.1 # via -r requirements/pip-tools.in -pyproject-hooks==1.2.0 +pyproject-hooks==1.3.3 # via # build # pip-tools -wheel==0.47.0 +wheel==0.48.0 # via pip-tools # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip.txt b/requirements/pip.txt index d7766d39..582d6205 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -4,13 +4,15 @@ # # make upgrade # -packaging==26.2 +packaging==26.3 # via wheel -wheel==0.47.0 +wheel==0.48.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.1.2 - # via -r requirements/pip.in -setuptools==83.0.0 +pip==26.2 + # via + # -c requirements/common_constraints.txt + # -r requirements/pip.in +setuptools==84.0.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index 252b6199..0a3cd789 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -4,7 +4,7 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs @@ -16,19 +16,19 @@ astroid==4.0.4 # pylint-celery attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.9 +charset-normalizer==3.5.1 # via requests -click==8.4.2 +click==8.5.0 # via # celery # click-didyoumean @@ -44,15 +44,15 @@ click-log==0.4.0 # via edx-lint click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via # edx-lint # edx-toggles -coverage[toml]==7.15.2 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==49.0.0 +cryptography==50.0.1 # via # pyjwt # secretstorage @@ -60,7 +60,7 @@ ddt==1.7.2 # via -r requirements/test.in dill==0.4.1 # via pylint -django==5.2.16 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -85,7 +85,7 @@ django-waffle==5.0.0 # edx-django-utils # edx-drf-extensions # edx-toggles -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -r requirements/base.in # drf-jwt @@ -98,15 +98,15 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in -edx-lint==6.1.0 +edx-lint==6.2.0 # via -r requirements/quality.in edx-opaque-keys[django]==4.0.0 # via @@ -119,11 +119,11 @@ edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.36.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -133,11 +133,11 @@ fs==2.4.16 # via xblock id==1.6.1 # via twine -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest -isort==8.0.1 +isort==9.0.2 # via # -r requirements/quality.in # pylint @@ -157,9 +157,9 @@ keyring==25.7.0 # via twine kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markdown-it-py==4.2.0 # via rich @@ -178,17 +178,19 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.6 +mypy-extensions==1.1.0 + # via isort +nh3==0.3.7 # via readme-renderer openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest # twine # wheel -platformdirs==4.11.0 +platformdirs==4.12.1 # via pylint pluggy==1.6.0 # via @@ -198,22 +200,22 @@ prompt-toolkit==3.0.53 # via click-repl psutil==7.2.2 # via edx-django-utils -pycodestyle==2.14.0 +pycodestyle==2.15.0 # via -r requirements/quality.in pycparser==3.0 # via cffi pydocstyle==6.3.0 # via -r requirements/quality.in -pygments==2.20.0 +pygments==2.21.0 # via # pytest # readme-renderer # rich -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pylint==4.0.6 +pylint==4.0.9 # via # edx-lint # pylint-celery @@ -227,7 +229,7 @@ pylint-plugin-utils==0.9.0 # via # pylint-celery # pylint-django -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking @@ -239,16 +241,16 @@ pytest==9.1.1 # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.3.post1 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -257,7 +259,7 @@ pyyaml==6.0.3 # via # code-annotations # xblock -readme-renderer==45.0 +readme-renderer==46.0 # via twine requests==2.34.2 # via @@ -274,7 +276,7 @@ secretstorage==3.5.0 # via keyring semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -285,9 +287,9 @@ six==1.17.0 # python-dateutil snowballstemmer==3.1.1 # via pydocstyle -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.9.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils @@ -301,12 +303,14 @@ tomlkit==0.15.1 twine==7.0.0 # via -r requirements/quality.in typing-extensions==4.16.0 - # via edx-opaque-keys -tzdata==2026.3 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via # id # requests @@ -316,17 +320,17 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.8.2 +wcwidth==0.9.1 # via prompt-toolkit -webob==1.8.10 +webob==1.8.11 # via xblock -wheel==0.47.0 +wheel==0.48.0 # via -r requirements/quality.in -xblock==6.3.1 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==83.0.0 +setuptools==84.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/test.txt b/requirements/test.txt index ec7061a0..1da1b6b6 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -4,7 +4,7 @@ # # make upgrade # -amqp==5.3.1 +amqp==5.4.0 # via kombu appdirs==1.4.4 # via fs @@ -12,19 +12,19 @@ asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events -billiard==4.2.4 +billiard==4.3.0 # via celery celery==5.6.3 # via event-tracking certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl -charset-normalizer==3.4.9 +charset-normalizer==3.5.1 # via requests -click==8.4.2 +click==8.5.0 # via # celery # click-didyoumean @@ -36,13 +36,13 @@ click-didyoumean==0.3.1 # via celery click-plugins==1.1.1.2 # via celery -click-repl==0.3.0 +click-repl==0.4.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.15.2 +coverage[toml]==7.16.2 # via pytest-cov -cryptography==49.0.0 +cryptography==50.0.1 # via pyjwt ddt==1.7.2 # via -r requirements/test.in @@ -80,13 +80,13 @@ drf-jwt==1.19.2 # via edx-drf-extensions edx-ccx-keys==2.0.2 # via openedx-events -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via # edx-drf-extensions # edx-toggles # event-tracking # openedx-events -edx-drf-extensions==10.6.0 +edx-drf-extensions==10.9.0 # via -r requirements/base.in edx-opaque-keys[django]==4.0.0 # via @@ -99,11 +99,11 @@ edx-toggles==6.0.0 # via # -r requirements/base.in # event-tracking -event-tracking==4.0.2 +event-tracking==4.1.5 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.36.0 +faker==40.40.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -111,7 +111,7 @@ freezegun==1.5.5 # via -r requirements/test.in fs==2.4.16 # via xblock -idna==3.18 +idna==3.20 # via requests iniconfig==2.3.0 # via pytest @@ -119,9 +119,9 @@ jinja2==3.1.6 # via code-annotations kombu==5.6.2 # via celery -lxml==6.1.1 +lxml==6.1.3 # via xblock -mako==1.3.12 +mako==1.4.3 # via xblock markupsafe==3.0.3 # via @@ -132,7 +132,7 @@ mock==5.2.0 # via -r requirements/test.in openedx-events==11.2.0 # via event-tracking -packaging==26.2 +packaging==26.3 # via # kombu # pytest @@ -146,13 +146,13 @@ psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pygments==2.20.0 +pygments==2.21.0 # via pytest -pyjwt[crypto]==2.13.0 +pyjwt[crypto]==2.15.1 # via # drf-jwt # edx-drf-extensions -pymongo==4.17.0 +pymongo==4.18.2 # via # edx-opaque-keys # event-tracking @@ -164,16 +164,16 @@ pytest==9.1.1 # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via # celery # freezegun # xblock -python-slugify==8.0.4 +python-slugify==9.1.2 # via code-annotations -pytz==2026.3.post1 +pytz==2026.4 # via # -r requirements/base.in # event-tracking @@ -186,7 +186,7 @@ requests==2.34.2 # via edx-drf-extensions semantic-version==2.10.0 # via edx-drf-extensions -simplejson==4.1.1 +simplejson==4.1.2 # via xblock six==1.17.0 # via @@ -194,9 +194,9 @@ six==1.17.0 # event-tracking # fs # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.9.0 +stevedore==5.9.1 # via # code-annotations # edx-django-utils @@ -204,23 +204,25 @@ stevedore==5.9.0 text-unidecode==1.3 # via python-slugify typing-extensions==4.16.0 - # via edx-opaque-keys -tzdata==2026.3 + # via + # click-repl + # edx-opaque-keys +tzdata==2026.4 # via kombu tzlocal==5.4.4 # via celery -urllib3==2.7.0 +urllib3==2.8.0 # via requests vine==5.1.0 # via # amqp # celery # kombu -wcwidth==0.8.2 +wcwidth==0.9.1 # via prompt-toolkit -webob==1.8.10 +webob==1.8.11 # via xblock -xblock==6.3.1 +xblock==6.3.3 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: