Release 1.150.0

[odlbot]

renovate[bot]

• Update dependency wagtail to v7.3.2 [SECURITY] (Update dependency wagtail to v7.3.2 [SECURITY] #3569) (14899ab6)
• Update dependency setuptools to <80.11 (Update dependency setuptools to <80.11 #3566) (19dcbec6)
• Update dependency faker to >=40.15.0,<=40.15.0 (Update dependency faker to >=40.15.0,<=40.15.0 #3565) (70982b14)
• Update nginx Docker tag to v1.30 (Update nginx Docker tag to v1.30 #3564) (c131102b)
• Update redis Docker tag to v8.6.2 (Update redis Docker tag to v8.6.2 #3560) (f55b04f4)
• Update astral-sh/setup-uv action to v8.1.0 (Update astral-sh/setup-uv action to v8.1.0 #3561) (e8ca39fa)
• Update dependency granian to v2.7.4 [SECURITY] (Update dependency granian to v2.7.4 [SECURITY] #3559) (e685318f)

annagav

• Upgrade django to 5.2 (Upgrade django to 5.2 #3133) (ad69fec0)

Nathan Levesque

• Cache the results of _get_filtered_runs (Cache the results of _get_filtered_runs #3555) (36f3b56b)

Dan Subak

• Log if theres a misconfigured enrollment code given in attach API, return 404 (Log if theres a misconfigured enrollment code given in attach API, return 404 #3554) (64bbc735)
• Add --make-codes flag to b2b_courseware call in test_datagen and language fixes (Add --make-codes flag to b2b_courseware call in test_datagen and language fixes #3552) (3c95d526)

Muhammad Anas

• fix: sort users by id in faulty openedx user repair test assertions (fix: sort users by id in faulty openedx user repair test assertions #3562) (b9078d43)

[github-actions]

OpenAPI Changes

Show/hide ## Changes for v0.yaml:

## Changes for v0.yaml:
No changes detected

## Changes for v1.yaml:
No changes detected

## Changes for v2.yaml:
No changes detected

Unexpected changes? Ensure your branch is up-to-date with main (consider rebasing).

[sentry]

Bug: Direct int() conversion of org_id and contract_id query parameters without error handling can raise a ValueError if a non-integer value is provided, causing a 500 error.
_{Severity: HIGH}

Suggested Fix

Wrap the int() conversions for org_id and contract_id in a try-except ValueError block. Handle the case where the conversion fails, for example, by using a default value or ignoring the parameter.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: courses/views/v2/__init__.py#L454

Potential issue: In `CourseViewSet.get_serializer_context()`, the `org_id` and
`contract_id` query parameters are directly converted to integers using `int()`. If a
non-integer string is passed for either parameter, this will raise a `ValueError`. The
view's filter class silently fails on invalid input, but the unconverted string remains
in `request.query_params` and is passed to `get_serializer_context`. Since this
`ValueError` is not caught, it results in an unhandled exception and a 500 server error.
This endpoint is publicly accessible as `permission_classes = []`.

_{Did we get this right? 👍 / 👎 to inform future reviews.}