chore: Upgrade Python requirements

requirements/base.txt

@@ -4,17 +4,17 @@
 #
 #    make upgrade
 #
-asgiref==3.11.1
+asgiref==3.12.1
     # via django
-certifi==2026.4.22
+certifi==2026.7.22
     # via requests
-cffi==2.0.0
+cffi==2.1.1
     # via pynacl
-charset-normalizer==3.4.7
+charset-normalizer==3.5.1
     # via requests
-click==8.3.3
+click==8.4.2
     # via edx-django-utils
-django==5.2.13
+django==5.2.17
     # via
     #   -c requirements/common_constraints.txt
     #   django-crum
@@ -26,21 +26,21 @@ django-waffle==5.0.0
     # via edx-django-utils
 edx-django-utils==8.0.1
     # via -r requirements/base.in
-idna==3.13
+idna==3.19
     # via requests
 psutil==7.2.2
     # via edx-django-utils
 pycparser==3.0
     # via cffi
-pyjwt==2.12.1
+pyjwt==2.13.0
     # via -r requirements/base.in
 pynacl==1.6.2
     # via edx-django-utils
-requests==2.33.1
+requests==2.34.2
     # via -r requirements/base.in
-sqlparse==0.5.5
+sqlparse==0.6.0
     # via django
-stevedore==5.7.0
+stevedore==5.9.1
     # via edx-django-utils
-urllib3==2.6.3
+urllib3==2.7.0
     # via requests

requirements/ci.txt

@@ -4,15 +4,15 @@
 #
 #    make upgrade
 #
-cachetools==7.1.1
+cachetools==7.1.7
     # via tox
-chardet==7.4.3
+chardet==7.6.0
     # via tox
 colorama==0.4.6
     # via tox
-distlib==0.4.0
+distlib==0.4.3
     # via virtualenv
-filelock==3.29.0
+filelock==3.32.4
     # via
     #   python-discovery
     #   tox
@@ -25,7 +25,6 @@ packaging==24.2
 platformdirs==4.3.6
     # via
     #   -c requirements/constraints.txt
-    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.5.0
@@ -34,9 +33,9 @@ pluggy==1.5.0
     #   tox
 pyproject-api==1.9.0
     # via tox
-python-discovery==1.2.2
+python-discovery==1.5.3
     # via virtualenv
 tox==4.27.0
     # via -r requirements/ci.in
-virtualenv==21.3.1
+virtualenv==21.7.4
     # via tox

requirements/common_constraints.txt

@@ -23,3 +23,26 @@ Django<6.0
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
 # See https://github.com/openedx/edx-platform/issues/35126 for more info
 elasticsearch<7.14.0
+
+# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with
+# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.)
+# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561
+social-auth-app-django<6.0.0
+social-auth-core<5.0.0
+
+# 2026-08-11: pip-tools is only tested against the latest pip released at the time
+# pip-tools was released; also, pip-tools package dependencies are extremely permissive
+# about the pip version required, so the dependency resolver will not prevent an unwanted
+# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained
+# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <->
+# pip-tools compatibility.  We've constrained pip here in common_constraints.txt in the
+# past, but always removed it once the issue was "fixed". Removing this constraint was
+# always a mistake.
+#
+# This is a semi-permanent constraint and should be manually bumped after each pip-tools
+# release.
+#
+# Exceptional conditions for removal:
+# - We stop using pip-tools, OR
+# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257
+pip<26.2.1  # Known to work with pip-tools==7.6.1

requirements/dev.txt

@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-asgiref==3.11.1
+asgiref==3.12.1
     # via
     #   -r requirements/test.txt
     #   django
@@ -17,28 +17,28 @@ build==1.5.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools
-cachetools==7.0.3
+cachetools==7.1.1
     # via
     #   -r requirements/ci.txt
     #   tox
-certifi==2026.4.22
+certifi==2026.7.22
     # via
     #   -r requirements/test.txt
     #   requests
-cffi==2.0.0
+cffi==2.1.1
     # via
     #   -r requirements/test.txt
     #   cryptography
     #   pynacl
-chardet==7.0.1
+chardet==7.4.3
     # via
     #   -r requirements/ci.txt
     #   tox
-charset-normalizer==3.4.7
+charset-normalizer==3.5.1
     # via
     #   -r requirements/test.txt
     #   requests
-click==8.3.3
+click==8.4.2
     # via
     #   -r requirements/pip-tools.txt
     #   -r requirements/test.txt
@@ -59,11 +59,11 @@ colorama==0.4.6
     # via
     #   -r requirements/ci.txt
     #   tox
-coverage[toml]==7.13.5
+coverage[toml]==7.15.4
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==48.0.0
+cryptography==50.0.0
     # via
     #   -r requirements/test.txt
     #   secretstorage
@@ -77,7 +77,7 @@ distlib==0.4.0
     # via
     #   -r requirements/ci.txt
     #   virtualenv
-django==5.2.13
+django==5.2.17
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/test.txt
@@ -92,15 +92,15 @@ django-waffle==5.0.0
     # via
     #   -r requirements/test.txt
     #   edx-django-utils
-docutils==0.22.4
+docutils==0.23
     # via
     #   -r requirements/test.txt
     #   readme-renderer
 edx-django-utils==8.0.1
     # via -r requirements/test.txt
-edx-lint==6.1.0
+edx-lint==6.2.0
     # via -r requirements/test.txt
-filelock==3.25.0
+filelock==3.29.0
     # via
     #   -r requirements/ci.txt
     #   python-discovery
@@ -112,7 +112,7 @@ id==1.6.1
     # via
     #   -r requirements/test.txt
     #   twine
-idna==3.13
+idna==3.19
     # via
     #   -r requirements/test.txt
     #   requests
@@ -132,7 +132,7 @@ jaraco-context==6.1.2
     # via
     #   -r requirements/test.txt
     #   keyring
-jaraco-functools==4.4.0
+jaraco-functools==4.6.0
     # via
     #   -r requirements/test.txt
     #   keyring
@@ -149,7 +149,7 @@ keyring==25.7.0
     # via
     #   -r requirements/test.txt
     #   twine
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
     # via
     #   -r requirements/test.txt
     #   rich
@@ -165,12 +165,12 @@ mdurl==0.1.2
     # via
     #   -r requirements/test.txt
     #   markdown-it-py
-more-itertools==11.0.2
+more-itertools==11.1.0
     # via
     #   -r requirements/test.txt
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.5
+nh3==0.3.7
     # via
     #   -r requirements/test.txt
     #   readme-renderer
@@ -186,7 +186,7 @@ packaging==24.2
     #   tox
     #   twine
     #   wheel
-pip-tools==7.5.3
+pip-tools==7.6.1
     # via -r requirements/pip-tools.txt
 platformdirs==4.3.6
     # via
@@ -215,15 +215,15 @@ pycparser==3.0
     # via
     #   -r requirements/test.txt
     #   cffi
-pygments==2.20.0
+pygments==2.21.0
     # via
     #   -r requirements/test.txt
     #   pytest
     #   readme-renderer
     #   rich
-pyjwt==2.12.1
+pyjwt==2.13.0
     # via -r requirements/test.txt
-pylint==4.0.5
+pylint==4.0.7
     # via
     #   -r requirements/test.txt
     #   edx-lint
@@ -234,7 +234,7 @@ pylint-celery==0.3
     # via
     #   -r requirements/test.txt
     #   edx-lint
-pylint-django==2.7.0
+pylint-django==2.8.0
     # via
     #   -r requirements/test.txt
     #   edx-lint
@@ -256,20 +256,20 @@ pyproject-hooks==1.2.0
     #   -r requirements/pip-tools.txt
     #   build
     #   pip-tools
-pytest==9.0.3
+pytest==9.1.1
     # via
     #   -r requirements/test.txt
     #   pytest-cov
     #   pytest-django
 pytest-cov==7.1.0
     # via -r requirements/test.txt
-pytest-django==4.12.0
+pytest-django==4.14.0
     # via -r requirements/test.txt
 python-dateutil==2.9.0.post0
     # via
     #   -r requirements/test.txt
     #   freezegun
-python-discovery==1.1.0
+python-discovery==1.2.2
     # via
     #   -r requirements/ci.txt
     #   virtualenv
@@ -282,11 +282,11 @@ pyyaml==6.0.3
     #   -r requirements/test.txt
     #   code-annotations
     #   responses
-readme-renderer==44.0
+readme-renderer==45.0
     # via
     #   -r requirements/test.txt
     #   twine
-requests==2.33.1
+requests==2.34.2
     # via
     #   -r requirements/test.txt
     #   requests-toolbelt
@@ -296,7 +296,7 @@ requests-toolbelt==1.0.0
     # via
     #   -r requirements/test.txt
     #   twine
-responses==0.26.0
+responses==0.26.2
     # via -r requirements/test.txt
 rfc3986==2.0.0
     # via
@@ -315,11 +315,11 @@ six==1.17.0
     #   -r requirements/test.txt
     #   edx-lint
     #   python-dateutil
-sqlparse==0.5.5
+sqlparse==0.6.0
     # via
     #   -r requirements/test.txt
     #   django
-stevedore==5.7.0
+stevedore==5.9.1
     # via
     #   -r requirements/test.txt
     #   code-annotations
@@ -328,7 +328,7 @@ text-unidecode==1.3
     # via
     #   -r requirements/test.txt
     #   python-slugify
-tomlkit==0.14.0
+tomlkit==0.15.1
     # via
     #   -r requirements/test.txt
     #   edx-lint
@@ -337,28 +337,29 @@ tox==4.27.0
     # via -r requirements/ci.txt
 twine==6.2.0
     # via -r requirements/test.txt
-urllib3==2.6.3
+urllib3==2.7.0
     # via
     #   -r requirements/test.txt
     #   id
     #   requests
     #   responses
     #   twine
-virtualenv==21.1.0
+virtualenv==21.3.1
     # via
     #   -r requirements/ci.txt
     #   tox
-wheel==0.47.0
+wheel==0.48.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==26.1.1
+pip==26.2
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/pip-tools.txt
     #   pip-tools
-setuptools==82.0.1
+setuptools==84.0.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools