From 0c3d53a24e7f6b9ea102bbab159ce7494a97470e Mon Sep 17 00:00:00 2001 From: edX requirements bot Date: Sun, 16 Aug 2026 20:01:42 -0400 Subject: [PATCH] chore: Upgrade Python requirements --- requirements/common_constraints.txt | 23 +++++++++++++++++++++++ requirements/development.txt | 14 +++++++------- requirements/pip_tools.txt | 10 +++++----- requirements/sandbox.txt | 2 +- requirements/testing.txt | 12 ++++++------ requirements/tox.txt | 17 +++++++++-------- 6 files changed, 51 insertions(+), 27 deletions(-) diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index 72cc4cc8..f60f86e0 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -18,3 +18,26 @@ Django<6.0 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 + +# 2026-08-11: pip-tools is only tested against the latest pip released at the time +# pip-tools was released; also, pip-tools package dependencies are extremely permissive +# about the pip version required, so the dependency resolver will not prevent an unwanted +# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained +# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <-> +# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the +# past, but always removed it once the issue was "fixed". Removing this constraint was +# always a mistake. +# +# This is a semi-permanent constraint and should be manually bumped after each pip-tools +# release. +# +# Exceptional conditions for removal: +# - We stop using pip-tools, OR +# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257 +pip<26.2.1 # Known to work with pip-tools==7.6.1 diff --git a/requirements/development.txt b/requirements/development.txt index 16857526..4606ef11 100644 --- a/requirements/development.txt +++ b/requirements/development.txt @@ -4,19 +4,19 @@ # # make upgrade # -asgiref==3.11.1 # via -r requirements/testing.txt, django +asgiref==3.12.1 # via -r requirements/testing.txt, django astroid==4.0.4 # via -r requirements/testing.txt, pylint dill==0.4.1 # via -r requirements/testing.txt, pylint -django==5.2.15 # via -c requirements/common_constraints.txt, -r requirements/testing.txt +django==5.2.17 # via -c requirements/common_constraints.txt, -r requirements/testing.txt iniconfig==2.3.0 # via -r requirements/testing.txt, pytest isort==8.0.1 # via -r requirements/testing.txt, pylint mccabe==0.7.0 # via -r requirements/testing.txt, pylint -packaging==26.2 # via -r requirements/testing.txt, pytest -platformdirs==4.10.0 # via -r requirements/testing.txt, pylint +packaging==26.3 # via -r requirements/testing.txt, pytest +platformdirs==4.11.3 # via -r requirements/testing.txt, pylint pluggy==1.6.0 # via -r requirements/testing.txt, pytest pycodestyle==2.14.0 # via -r requirements/testing.txt pygments==2.20.0 # via -r requirements/testing.txt, pytest -pylint==4.0.6 # via -r requirements/testing.txt +pylint==4.0.7 # via -r requirements/testing.txt pytest==9.1.1 # via -r requirements/testing.txt -sqlparse==0.5.5 # via -r requirements/testing.txt, django -tomlkit==0.15.0 # via -r requirements/testing.txt, pylint +sqlparse==0.6.0 # via -r requirements/testing.txt, django +tomlkit==0.15.1 # via -r requirements/testing.txt, pylint diff --git a/requirements/pip_tools.txt b/requirements/pip_tools.txt index dc732755..a0fed588 100644 --- a/requirements/pip_tools.txt +++ b/requirements/pip_tools.txt @@ -6,11 +6,11 @@ # build==1.5.0 # via pip-tools click==8.4.2 # via pip-tools -packaging==26.2 # via build, wheel -pip-tools==7.5.3 # via -r requirements/pip_tools.in +packaging==26.3 # via build, wheel +pip-tools==7.6.1 # via -r requirements/pip_tools.in pyproject-hooks==1.2.0 # via build, pip-tools -wheel==0.47.0 # via pip-tools +wheel==0.48.0 # via pip-tools # The following packages are considered to be unsafe in a requirements file: -pip==26.1.2 # via pip-tools -setuptools==82.0.1 # via pip-tools +pip==26.2 # via -c requirements/common_constraints.txt, pip-tools +setuptools==84.0.0 # via pip-tools diff --git a/requirements/sandbox.txt b/requirements/sandbox.txt index a841d2e0..8a3ff482 100644 --- a/requirements/sandbox.txt +++ b/requirements/sandbox.txt @@ -4,5 +4,5 @@ # # make upgrade # -numpy==2.5.0 # via -r requirements/sandbox.in +numpy==2.5.2 # via -r requirements/sandbox.in six==1.17.0 # via -r requirements/sandbox.in diff --git a/requirements/testing.txt b/requirements/testing.txt index 28ff70ba..b6ebfdbf 100644 --- a/requirements/testing.txt +++ b/requirements/testing.txt @@ -4,18 +4,18 @@ # # make upgrade # -asgiref==3.11.1 # via django +asgiref==3.12.1 # via django astroid==4.0.4 # via pylint dill==0.4.1 # via pylint iniconfig==2.3.0 # via pytest isort==8.0.1 # via -r requirements/testing.in, pylint mccabe==0.7.0 # via pylint -packaging==26.2 # via pytest -platformdirs==4.10.0 # via pylint +packaging==26.3 # via pytest +platformdirs==4.11.3 # via pylint pluggy==1.6.0 # via pytest pycodestyle==2.14.0 # via -r requirements/testing.in pygments==2.20.0 # via pytest -pylint==4.0.6 # via -r requirements/testing.in +pylint==4.0.7 # via -r requirements/testing.in pytest==9.1.1 # via -r requirements/testing.in -sqlparse==0.5.5 # via django -tomlkit==0.15.0 # via pylint +sqlparse==0.6.0 # via django +tomlkit==0.15.1 # via pylint diff --git a/requirements/tox.txt b/requirements/tox.txt index a4111893..cb5751c3 100644 --- a/requirements/tox.txt +++ b/requirements/tox.txt @@ -4,15 +4,16 @@ # # make upgrade # -cachetools==7.1.4 # via tox +cachetools==7.1.7 # via tox colorama==0.4.6 # via tox distlib==0.4.3 # via virtualenv -filelock==3.29.4 # via python-discovery, tox, virtualenv -packaging==26.2 # via pyproject-api, tox -platformdirs==4.10.0 # via python-discovery, tox, virtualenv +filelock==3.32.3 # via python-discovery, tox, virtualenv +packaging==26.3 # via pyproject-api, tox +platformdirs==4.11.3 # via tox, virtualenv pluggy==1.6.0 # via tox -pyproject-api==1.10.1 # via tox -python-discovery==1.4.2 # via tox, virtualenv +pyproject-api==1.11.0 # via tox +python-discovery==1.5.2 # via tox, virtualenv tomli-w==1.2.0 # via tox -tox==4.56.1 # via -r requirements/tox.in -virtualenv==21.5.1 # via tox +tox==4.60.0 # via -r requirements/tox.in +typing-extensions==4.16.0 # via tox +virtualenv==21.7.4 # via tox