From 912318580806e39014821d601e08638b566847fc Mon Sep 17 00:00:00 2001 From: edX requirements bot Date: Tue, 21 Jul 2026 11:51:50 -0400 Subject: [PATCH] chore: Upgrade Python requirements --- requirements/base.txt | 33 +++++++------- requirements/ci.txt | 14 +++--- requirements/common_constraints.txt | 6 +++ requirements/dev.txt | 67 ++++++++++++++--------------- requirements/doc.txt | 50 ++++++++++----------- requirements/pip-tools.txt | 4 +- requirements/pip.txt | 2 +- requirements/quality.txt | 55 ++++++++++++----------- requirements/test.txt | 35 ++++++++------- 9 files changed, 134 insertions(+), 132 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 20008d43..40bd41b6 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -16,15 +16,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.6.17 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -40,9 +40,9 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -92,6 +92,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -166,18 +167,18 @@ six==1.17.0 # python-dateutil sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -186,17 +187,15 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==83.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/ci.txt b/requirements/ci.txt index dd8adcff..05644db1 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -8,9 +8,9 @@ cachetools==7.1.4 # via tox colorama==0.4.6 # via tox -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -filelock==3.29.0 +filelock==3.32.0 # via # python-discovery # tox @@ -21,22 +21,22 @@ packaging==26.2 # via # pyproject-api # tox -platformdirs==4.10.0 +platformdirs==4.11.0 # via # python-discovery # tox # virtualenv pluggy==1.6.0 # via tox -pyproject-api==1.10.1 +pyproject-api==1.11.0 # via tox -python-discovery==1.4.0 +python-discovery==1.5.0 # via # tox # virtualenv tomli-w==1.2.0 # via tox -tox==4.55.0 +tox==4.58.0 # via -r requirements/ci.in -virtualenv==21.4.2 +virtualenv==21.7.0 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index 72cc4cc8..edb1bcb8 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -18,3 +18,9 @@ Django<6.0 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 diff --git a/requirements/dev.txt b/requirements/dev.txt index d38785f5..640c4bd2 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -24,17 +24,17 @@ cachetools==7.1.4 # via tox celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.6.17 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl chardet==7.4.3 # via diff-cover -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -59,9 +59,9 @@ code-annotations==3.0.0 # edx-toggles colorama==0.4.6 # via tox -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via # pyjwt # secretstorage @@ -71,9 +71,9 @@ diff-cover==10.3.0 # via -r requirements/dev.in dill==0.4.1 # via pylint -distlib==0.4.1 +distlib==0.4.3 # via virtualenv -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -132,6 +132,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -140,11 +141,11 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.32.0 # via factory-boy fastavro==1.12.2 # via openedx-events -filelock==3.29.0 +filelock==3.32.0 # via # python-discovery # tox @@ -167,7 +168,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -207,7 +208,7 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +nh3==0.3.6 # via readme-renderer openedx-events==11.2.0 # via event-tracking @@ -222,9 +223,9 @@ packaging==26.2 # wheel path==16.16.0 # via edx-i18n-tools -pip-tools==7.5.3 +pip-tools==7.6.0 # via -r requirements/dev.in -platformdirs==4.10.0 +platformdirs==4.11.0 # via # pylint # python-discovery @@ -258,7 +259,7 @@ pyjwt[crypto]==2.13.0 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.6 # via # edx-lint # pylint-celery @@ -266,7 +267,7 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via @@ -278,13 +279,13 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pyproject-api==1.10.1 +pyproject-api==1.11.0 # via tox pyproject-hooks==1.2.0 # via # build # pip-tools -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -297,7 +298,7 @@ python-dateutil==2.9.0.post0 # celery # freezegun # xblock -python-discovery==1.4.0 +python-discovery==1.5.0 # via # tox # virtualenv @@ -313,7 +314,7 @@ pyyaml==6.0.3 # code-annotations # edx-i18n-tools # xblock -readme-renderer==44.0 +readme-renderer==45.0 # via twine requests==2.34.2 # via @@ -339,11 +340,11 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils @@ -352,19 +353,19 @@ text-unidecode==1.3 # via python-slugify tomli-w==1.2.0 # via tox -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint -tox==4.55.0 +tox==4.58.0 # via -r requirements/dev.in twine==6.2.0 # via -r requirements/quality.in -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via @@ -376,19 +377,17 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.4.2 +virtualenv==21.7.0 # via tox -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock wheel==0.47.0 # via # -r requirements/quality.in # pip-tools -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/doc.txt b/requirements/doc.txt index b8678e2a..511227a4 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -12,7 +12,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -20,21 +20,21 @@ babel==2.18.0 # via # pydata-sphinx-theme # sphinx -beautifulsoup4==4.14.3 +beautifulsoup4==4.15.0 # via pydata-sphinx-theme billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.6.17 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -50,13 +50,13 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt ddt==1.7.2 # via -r requirements/test.in -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -114,6 +114,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -122,7 +123,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.32.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -139,6 +140,7 @@ iniconfig==2.3.0 jinja2==3.1.6 # via # code-annotations + # pydata-sphinx-theme # sphinx kombu==5.6.2 # via celery @@ -170,7 +172,7 @@ psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pydata-sphinx-theme==0.16.1 +pydata-sphinx-theme==0.20.0 # via sphinx-book-theme pygments==2.20.0 # via @@ -189,7 +191,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -216,6 +218,7 @@ pyyaml==6.0.3 requests==2.34.2 # via # edx-drf-extensions + # pydata-sphinx-theme # sphinx restructuredtext-lint==2.0.2 # via doc8 @@ -231,16 +234,16 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via sphinx -soupsieve==2.8.4 +soupsieve==2.9 # via beautifulsoup4 sphinx==9.1.0 # via # -r requirements/doc.in # pydata-sphinx-theme # sphinx-book-theme -sphinx-book-theme==1.2.0 +sphinx-book-theme==1.4.0 # via -r requirements/doc.in sphinxcontrib-applehelp==2.0.0 # via sphinx @@ -256,7 +259,7 @@ sphinxcontrib-serializinghtml==2.0.0 # via sphinx sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # doc8 @@ -264,14 +267,13 @@ stevedore==5.8.0 # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via # beautifulsoup4 # edx-opaque-keys - # pydata-sphinx-theme -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -280,13 +282,11 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index ae6076a0..20aa67f1 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -6,13 +6,13 @@ # build==1.5.0 # via pip-tools -click==8.4.1 +click==8.4.2 # via pip-tools packaging==26.2 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.0 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index f3c15550..d7766d39 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -12,5 +12,5 @@ wheel==0.47.0 # The following packages are considered to be unsafe in a requirements file: pip==26.1.2 # via -r requirements/pip.in -setuptools==82.0.1 +setuptools==83.0.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index beaf6049..1f11c97f 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django astroid==4.0.4 # via @@ -20,15 +20,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.6.17 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -50,9 +50,9 @@ code-annotations==3.0.0 # via # edx-lint # edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via # pyjwt # secretstorage @@ -60,7 +60,7 @@ ddt==1.7.2 # via -r requirements/test.in dill==0.4.1 # via pylint -django==5.2.14 +django==5.2.16 # via # -c requirements/common_constraints.txt # -r requirements/base.in @@ -114,6 +114,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -122,7 +123,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.32.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -144,7 +145,7 @@ jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.5.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -177,7 +178,7 @@ more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +nh3==0.3.6 # via readme-renderer openedx-events==11.2.0 # via event-tracking @@ -187,7 +188,7 @@ packaging==26.2 # pytest # twine # wheel -platformdirs==4.10.0 +platformdirs==4.11.0 # via pylint pluggy==1.6.0 # via @@ -212,7 +213,7 @@ pyjwt[crypto]==2.13.0 # via # drf-jwt # edx-drf-extensions -pylint==4.0.5 +pylint==4.0.6 # via # edx-lint # pylint-celery @@ -220,7 +221,7 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via @@ -232,7 +233,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -256,7 +257,7 @@ pyyaml==6.0.3 # via # code-annotations # xblock -readme-renderer==44.0 +readme-renderer==45.0 # via twine requests==2.34.2 # via @@ -282,28 +283,28 @@ six==1.17.0 # event-tracking # fs # python-dateutil -snowballstemmer==3.1.0 +snowballstemmer==3.1.1 # via pydocstyle sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -tomlkit==0.15.0 +tomlkit==0.15.1 # via # edx-lint # pylint twine==6.2.0 # via -r requirements/quality.in -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via @@ -315,19 +316,17 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock wheel==0.47.0 # via -r requirements/quality.in -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: -setuptools==82.0.1 +setuptools==83.0.0 # via # -r requirements/base.in # fs diff --git a/requirements/test.txt b/requirements/test.txt index 5c9dd145..5f9616df 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -8,7 +8,7 @@ amqp==5.3.1 # via kombu appdirs==1.4.4 # via fs -asgiref==3.11.1 +asgiref==3.12.1 # via django attrs==26.1.0 # via openedx-events @@ -16,15 +16,15 @@ billiard==4.2.4 # via celery celery==5.6.3 # via event-tracking -certifi==2026.5.20 +certifi==2026.6.17 # via requests -cffi==2.0.0 +cffi==2.1.0 # via # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.4.9 # via requests -click==8.4.1 +click==8.4.2 # via # celery # click-didyoumean @@ -40,9 +40,9 @@ click-repl==0.3.0 # via celery code-annotations==3.0.0 # via edx-toggles -coverage[toml]==7.14.1 +coverage[toml]==7.15.2 # via pytest-cov -cryptography==48.0.0 +cryptography==49.0.0 # via pyjwt ddt==1.7.2 # via -r requirements/test.in @@ -94,6 +94,7 @@ edx-opaque-keys[django]==4.0.0 # edx-ccx-keys # edx-drf-extensions # openedx-events + # xblock edx-toggles==6.0.0 # via # -r requirements/base.in @@ -102,7 +103,7 @@ event-tracking==4.0.2 # via -r requirements/base.in factory-boy==3.3.3 # via -r requirements/test.in -faker==40.20.0 +faker==40.32.0 # via factory-boy fastavro==1.12.2 # via openedx-events @@ -157,7 +158,7 @@ pymongo==4.17.0 # event-tracking pynacl==1.6.2 # via edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django @@ -195,18 +196,18 @@ six==1.17.0 # python-dateutil sqlparse==0.5.5 # via django -stevedore==5.8.0 +stevedore==5.9.0 # via # code-annotations # edx-django-utils # edx-opaque-keys text-unidecode==1.3 # via python-slugify -typing-extensions==4.15.0 +typing-extensions==4.16.0 # via edx-opaque-keys -tzdata==2026.2 +tzdata==2026.3 # via kombu -tzlocal==5.3.1 +tzlocal==5.4.4 # via celery urllib3==2.7.0 # via requests @@ -215,13 +216,11 @@ vine==5.1.0 # amqp # celery # kombu -wcwidth==0.7.0 +wcwidth==0.8.2 # via prompt-toolkit -web-fragments==4.0.0 - # via xblock -webob==1.8.9 +webob==1.8.10 # via xblock -xblock==6.1.0 +xblock==6.3.1 # via -r requirements/base.in # The following packages are considered to be unsafe in a requirements file: