diff --git a/requirements/base.txt b/requirements/base.txt index ae568c27..26fc3ffc 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -4,17 +4,17 @@ # # make upgrade # -asgiref==3.11.1 +asgiref==3.12.1 # via django -certifi==2026.4.22 +certifi==2026.7.22 # via requests -cffi==2.0.0 +cffi==2.1.1 # via pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via requests -click==8.3.3 +click==8.5.0 # via edx-django-utils -django==5.2.13 +django==5.2.17 # via # -c requirements/common_constraints.txt # django-crum @@ -24,23 +24,23 @@ django-crum==0.7.9 # via edx-django-utils django-waffle==5.0.0 # via edx-django-utils -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via -r requirements/base.in -idna==3.13 +idna==3.19 # via requests psutil==7.2.2 # via edx-django-utils pycparser==3.0 # via cffi -pyjwt==2.12.1 +pyjwt==2.13.0 # via -r requirements/base.in pynacl==1.6.2 # via edx-django-utils -requests==2.33.1 +requests==2.34.2 # via -r requirements/base.in -sqlparse==0.5.5 +sqlparse==0.6.0 # via django -stevedore==5.7.0 +stevedore==5.9.1 # via edx-django-utils -urllib3==2.6.3 +urllib3==2.7.0 # via requests diff --git a/requirements/ci.txt b/requirements/ci.txt index 9a885e8d..9ea10527 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -4,15 +4,15 @@ # # make upgrade # -cachetools==7.1.1 +cachetools==7.1.8 # via tox -chardet==7.4.3 +chardet==7.6.0 # via tox colorama==0.4.6 # via tox -distlib==0.4.0 +distlib==0.4.3 # via virtualenv -filelock==3.29.0 +filelock==3.32.5 # via # python-discovery # tox @@ -25,7 +25,6 @@ packaging==24.2 platformdirs==4.3.6 # via # -c requirements/constraints.txt - # python-discovery # tox # virtualenv pluggy==1.5.0 @@ -34,9 +33,9 @@ pluggy==1.5.0 # tox pyproject-api==1.9.0 # via tox -python-discovery==1.2.2 +python-discovery==1.6.0 # via virtualenv tox==4.27.0 # via -r requirements/ci.in -virtualenv==21.3.1 +virtualenv==21.7.7 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index 43c7b4d2..50d07f65 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -23,3 +23,26 @@ Django<6.0 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 + +# 2026-08-11: pip-tools is only tested against the latest pip released at the time +# pip-tools was released; also, pip-tools package dependencies are extremely permissive +# about the pip version required, so the dependency resolver will not prevent an unwanted +# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained +# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <-> +# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the +# past, but always removed it once the issue was "fixed". Removing this constraint was +# always a mistake. +# +# This is a semi-permanent constraint and should be manually bumped after each pip-tools +# release. +# +# Exceptional conditions for removal: +# - We stop using pip-tools, OR +# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257 +pip<26.2.1 # Known to work with pip-tools==7.6.1 diff --git a/requirements/dev.txt b/requirements/dev.txt index 4f353c4a..a925dc62 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -4,7 +4,7 @@ # # make upgrade # -asgiref==3.11.1 +asgiref==3.12.1 # via # -r requirements/test.txt # django @@ -13,32 +13,32 @@ astroid==4.0.4 # -r requirements/test.txt # pylint # pylint-celery -build==1.5.0 +build==1.6.0 # via # -r requirements/pip-tools.txt # pip-tools -cachetools==7.0.3 +cachetools==7.1.1 # via # -r requirements/ci.txt # tox -certifi==2026.4.22 +certifi==2026.7.22 # via # -r requirements/test.txt # requests -cffi==2.0.0 +cffi==2.1.1 # via # -r requirements/test.txt # cryptography # pynacl -chardet==7.0.1 +chardet==7.4.3 # via # -r requirements/ci.txt # tox -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via # -r requirements/test.txt # requests -click==8.3.3 +click==8.5.0 # via # -r requirements/pip-tools.txt # -r requirements/test.txt @@ -59,11 +59,11 @@ colorama==0.4.6 # via # -r requirements/ci.txt # tox -coverage[toml]==7.13.5 +coverage[toml]==7.16.0 # via # -r requirements/test.txt # pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via # -r requirements/test.txt # secretstorage @@ -77,7 +77,7 @@ distlib==0.4.0 # via # -r requirements/ci.txt # virtualenv -django==5.2.13 +django==5.2.17 # via # -c requirements/common_constraints.txt # -r requirements/test.txt @@ -92,15 +92,15 @@ django-waffle==5.0.0 # via # -r requirements/test.txt # edx-django-utils -docutils==0.22.4 +docutils==0.23 # via # -r requirements/test.txt # readme-renderer -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via -r requirements/test.txt -edx-lint==6.1.0 +edx-lint==6.2.0 # via -r requirements/test.txt -filelock==3.25.0 +filelock==3.29.0 # via # -r requirements/ci.txt # python-discovery @@ -112,7 +112,7 @@ id==1.6.1 # via # -r requirements/test.txt # twine -idna==3.13 +idna==3.19 # via # -r requirements/test.txt # requests @@ -120,7 +120,7 @@ iniconfig==2.3.0 # via # -r requirements/test.txt # pytest -isort==8.0.1 +isort==9.0.1 # via # -r requirements/test.txt # pylint @@ -132,7 +132,7 @@ jaraco-context==6.1.2 # via # -r requirements/test.txt # keyring -jaraco-functools==4.4.0 +jaraco-functools==4.6.0 # via # -r requirements/test.txt # keyring @@ -149,7 +149,7 @@ keyring==25.7.0 # via # -r requirements/test.txt # twine -markdown-it-py==4.0.0 +markdown-it-py==4.2.0 # via # -r requirements/test.txt # rich @@ -165,12 +165,16 @@ mdurl==0.1.2 # via # -r requirements/test.txt # markdown-it-py -more-itertools==11.0.2 +more-itertools==11.1.0 # via # -r requirements/test.txt # jaraco-classes # jaraco-functools -nh3==0.3.5 +mypy-extensions==1.1.0 + # via + # -r requirements/test.txt + # isort +nh3==0.3.7 # via # -r requirements/test.txt # readme-renderer @@ -186,7 +190,7 @@ packaging==24.2 # tox # twine # wheel -pip-tools==7.5.3 +pip-tools==7.6.1 # via -r requirements/pip-tools.txt platformdirs==4.3.6 # via @@ -215,15 +219,15 @@ pycparser==3.0 # via # -r requirements/test.txt # cffi -pygments==2.20.0 +pygments==2.21.0 # via # -r requirements/test.txt # pytest # readme-renderer # rich -pyjwt==2.12.1 +pyjwt==2.13.0 # via -r requirements/test.txt -pylint==4.0.5 +pylint==4.0.8 # via # -r requirements/test.txt # edx-lint @@ -234,7 +238,7 @@ pylint-celery==0.3 # via # -r requirements/test.txt # edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via # -r requirements/test.txt # edx-lint @@ -256,20 +260,20 @@ pyproject-hooks==1.2.0 # -r requirements/pip-tools.txt # build # pip-tools -pytest==9.0.3 +pytest==9.1.1 # via # -r requirements/test.txt # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.txt -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.txt python-dateutil==2.9.0.post0 # via # -r requirements/test.txt # freezegun -python-discovery==1.1.0 +python-discovery==1.2.2 # via # -r requirements/ci.txt # virtualenv @@ -282,11 +286,11 @@ pyyaml==6.0.3 # -r requirements/test.txt # code-annotations # responses -readme-renderer==44.0 +readme-renderer==46.0 # via # -r requirements/test.txt # twine -requests==2.33.1 +requests==2.34.2 # via # -r requirements/test.txt # requests-toolbelt @@ -296,7 +300,7 @@ requests-toolbelt==1.0.0 # via # -r requirements/test.txt # twine -responses==0.26.0 +responses==0.26.3 # via -r requirements/test.txt rfc3986==2.0.0 # via @@ -315,11 +319,11 @@ six==1.17.0 # -r requirements/test.txt # edx-lint # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via # -r requirements/test.txt # django -stevedore==5.7.0 +stevedore==5.9.1 # via # -r requirements/test.txt # code-annotations @@ -328,7 +332,7 @@ text-unidecode==1.3 # via # -r requirements/test.txt # python-slugify -tomlkit==0.14.0 +tomlkit==0.15.1 # via # -r requirements/test.txt # edx-lint @@ -337,28 +341,29 @@ tox==4.27.0 # via -r requirements/ci.txt twine==6.2.0 # via -r requirements/test.txt -urllib3==2.6.3 +urllib3==2.7.0 # via # -r requirements/test.txt # id # requests # responses # twine -virtualenv==21.1.0 +virtualenv==21.3.1 # via # -r requirements/ci.txt # tox -wheel==0.47.0 +wheel==0.48.0 # via # -r requirements/pip-tools.txt # pip-tools # The following packages are considered to be unsafe in a requirements file: -pip==26.1.1 +pip==26.2 # via + # -c requirements/common_constraints.txt # -r requirements/pip-tools.txt # pip-tools -setuptools==82.0.1 +setuptools==84.0.0 # via # -r requirements/pip-tools.txt # pip-tools diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 072bdd91..eb76e925 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -4,26 +4,28 @@ # # make upgrade # -build==1.5.0 +build==1.6.0 # via pip-tools -click==8.3.3 +click==8.5.0 # via pip-tools packaging==24.2 # via # -c requirements/constraints.txt # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.1 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via # build # pip-tools -wheel==0.47.0 +wheel==0.48.0 # via pip-tools # The following packages are considered to be unsafe in a requirements file: -pip==26.1.1 - # via pip-tools -setuptools==82.0.1 +pip==26.2 + # via + # -c requirements/common_constraints.txt + # pip-tools +setuptools==84.0.0 # via pip-tools diff --git a/requirements/pip.txt b/requirements/pip.txt index 941a1e4b..0955bf49 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -8,11 +8,13 @@ packaging==24.2 # via # -c requirements/constraints.txt # wheel -wheel==0.47.0 +wheel==0.48.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.1.1 - # via -r requirements/pip.in -setuptools==82.0.1 +pip==26.2 + # via + # -c requirements/common_constraints.txt + # -r requirements/pip.in +setuptools==84.0.0 # via -r requirements/pip.in diff --git a/requirements/test.txt b/requirements/test.txt index 8ce2d1bb..29f23d2b 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -4,7 +4,7 @@ # # make upgrade # -asgiref==3.11.1 +asgiref==3.12.1 # via # -r requirements/base.txt # django @@ -12,20 +12,20 @@ astroid==4.0.4 # via # pylint # pylint-celery -certifi==2026.4.22 +certifi==2026.7.22 # via # -r requirements/base.txt # requests -cffi==2.0.0 +cffi==2.1.1 # via # -r requirements/base.txt # cryptography # pynacl -charset-normalizer==3.4.7 +charset-normalizer==3.5.1 # via # -r requirements/base.txt # requests -click==8.3.3 +click==8.5.0 # via # -r requirements/base.txt # click-log @@ -36,9 +36,9 @@ click-log==0.4.0 # via edx-lint code-annotations==3.0.0 # via edx-lint -coverage[toml]==7.13.5 +coverage[toml]==7.16.0 # via pytest-cov -cryptography==48.0.0 +cryptography==50.0.1 # via secretstorage ddt==1.7.2 # via -r requirements/test.in @@ -58,29 +58,29 @@ django-waffle==5.0.0 # via # -r requirements/base.txt # edx-django-utils -docutils==0.22.4 +docutils==0.23 # via readme-renderer -edx-django-utils==8.0.1 +edx-django-utils==8.0.2 # via -r requirements/base.txt -edx-lint==6.1.0 +edx-lint==6.2.0 # via -r requirements/test.in freezegun==1.5.5 # via -r requirements/test.in id==1.6.1 # via twine -idna==3.13 +idna==3.19 # via # -r requirements/base.txt # requests iniconfig==2.3.0 # via pytest -isort==8.0.1 +isort==9.0.1 # via pylint jaraco-classes==3.4.0 # via keyring jaraco-context==6.1.2 # via keyring -jaraco-functools==4.4.0 +jaraco-functools==4.6.0 # via keyring jeepney==0.9.0 # via @@ -90,7 +90,7 @@ jinja2==3.1.6 # via code-annotations keyring==25.7.0 # via twine -markdown-it-py==4.0.0 +markdown-it-py==4.2.0 # via rich markupsafe==3.0.3 # via jinja2 @@ -98,11 +98,13 @@ mccabe==0.7.0 # via pylint mdurl==0.1.2 # via markdown-it-py -more-itertools==11.0.2 +more-itertools==11.1.0 # via # jaraco-classes # jaraco-functools -nh3==0.3.5 +mypy-extensions==1.1.0 + # via isort +nh3==0.3.7 # via readme-renderer packaging==24.2 # via @@ -128,14 +130,14 @@ pycparser==3.0 # via # -r requirements/base.txt # cffi -pygments==2.20.0 +pygments==2.21.0 # via # pytest # readme-renderer # rich -pyjwt==2.12.1 +pyjwt==2.13.0 # via -r requirements/base.txt -pylint==4.0.5 +pylint==4.0.8 # via # edx-lint # pylint-celery @@ -143,7 +145,7 @@ pylint==4.0.5 # pylint-plugin-utils pylint-celery==0.3 # via edx-lint -pylint-django==2.7.0 +pylint-django==2.8.0 # via edx-lint pylint-plugin-utils==0.9.0 # via @@ -153,13 +155,13 @@ pynacl==1.6.2 # via # -r requirements/base.txt # edx-django-utils -pytest==9.0.3 +pytest==9.1.1 # via # pytest-cov # pytest-django pytest-cov==7.1.0 # via -r requirements/test.in -pytest-django==4.12.0 +pytest-django==4.14.0 # via -r requirements/test.in python-dateutil==2.9.0.post0 # via freezegun @@ -169,9 +171,9 @@ pyyaml==6.0.3 # via # code-annotations # responses -readme-renderer==44.0 +readme-renderer==46.0 # via twine -requests==2.33.1 +requests==2.34.2 # via # -r requirements/base.txt # requests-toolbelt @@ -179,7 +181,7 @@ requests==2.33.1 # twine requests-toolbelt==1.0.0 # via twine -responses==0.26.0 +responses==0.26.3 # via -r requirements/test.in rfc3986==2.0.0 # via twine @@ -191,24 +193,24 @@ six==1.17.0 # via # edx-lint # python-dateutil -sqlparse==0.5.5 +sqlparse==0.6.0 # via # -r requirements/base.txt # django -stevedore==5.7.0 +stevedore==5.9.1 # via # -r requirements/base.txt # code-annotations # edx-django-utils text-unidecode==1.3 # via python-slugify -tomlkit==0.14.0 +tomlkit==0.15.1 # via # edx-lint # pylint twine==6.2.0 # via -r requirements/test.in -urllib3==2.6.3 +urllib3==2.7.0 # via # -r requirements/base.txt # id