diff --git a/requirements/base.txt b/requirements/base.txt index 4a1dcf0..a1b2d06 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -10,7 +10,7 @@ attrs==26.1.0 # via openedx-events certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pynacl @@ -18,9 +18,9 @@ charset-normalizer==3.4.9 # via requests click==8.4.2 # via edx-django-utils -cryptography==49.0.0 +cryptography==50.0.0 # via pyjwt -django==5.2.16 +django==5.2.17 # via # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt # -r requirements/base.in @@ -108,11 +108,11 @@ pymongo==4.17.0 # via edx-opaque-keys pynacl==1.6.2 # via edx-django-utils -pytz==2026.2 +pytz==2026.3.post1 # via -r requirements/base.in pyyaml==6.0.3 # via edx-django-release-util -redis==8.0.1 +redis==8.1.0 # via -r requirements/base.in requests==2.34.2 # via edx-drf-extensions diff --git a/requirements/ci.txt b/requirements/ci.txt index a05190e..d49f23f 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -4,31 +4,30 @@ # # make upgrade # -cachetools==7.1.6 +cachetools==7.1.7 # via tox colorama==0.4.6 # via tox distlib==0.4.3 # via virtualenv -filelock==3.32.0 +filelock==3.32.2 # via # python-discovery # tox # virtualenv -packaging==26.2 +packaging==26.3 # via # pyproject-api # tox platformdirs==4.11.0 # via - # python-discovery # tox # virtualenv pluggy==1.6.0 # via tox pyproject-api==1.11.0 # via tox -python-discovery==1.5.0 +python-discovery==1.5.1 # via # tox # virtualenv @@ -36,5 +35,5 @@ tomli-w==1.2.0 # via tox tox==4.58.0 # via -r requirements/ci.in -virtualenv==21.7.0 +virtualenv==21.7.1 # via tox diff --git a/requirements/constraints.txt b/requirements/constraints.txt index d91704b..7b5612b 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -10,3 +10,13 @@ # Common constraints for edx repos -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt + +# pip 26.2+ is incompatible with pip-tools 7.6.0 (latest pip-tools release only +# supports pip up to 26.1), which breaks `make upgrade`. Remove this once a +# newer pip-tools release restores pip 26.2+ compatibility. +pip<26.2 + +# Pin pip-tools to the version verified compatible with the pip<26.2 constraint +# above; a newer pip-tools release could require a newer pip and reintroduce +# the `make upgrade` breakage this constraint set was added to fix. +pip-tools==7.6.0 diff --git a/requirements/dev.txt b/requirements/dev.txt index 5828ab7..08605c9 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -21,7 +21,7 @@ build==1.5.0 # via # -r requirements/pip-tools.txt # pip-tools -cachetools==7.1.6 +cachetools==7.1.7 # via # -r requirements/ci.txt # tox @@ -29,7 +29,7 @@ certifi==2026.7.22 # via # -r requirements/quality.txt # requests -cffi==2.1.0 +cffi==2.1.1 # via # -r requirements/quality.txt # cryptography @@ -61,11 +61,11 @@ colorama==0.4.6 # via # -r requirements/ci.txt # tox -coverage[toml]==7.15.2 +coverage[toml]==7.15.3 # via # -r requirements/quality.txt # pytest-cov -cryptography==49.0.0 +cryptography==50.0.0 # via # -r requirements/quality.txt # pyjwt @@ -73,7 +73,7 @@ ddt==1.7.2 # via # -r requirements/dev.in # -r requirements/quality.txt -diff-cover==10.4.0 +diff-cover==10.4.1 # via -r requirements/dev.in dill==0.4.1 # via @@ -83,7 +83,7 @@ distlib==0.4.3 # via # -r requirements/ci.txt # virtualenv -django==5.2.16 +django==5.2.17 # via # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt # -r requirements/quality.txt @@ -168,7 +168,7 @@ edx-rbac==3.0.0 # via -r requirements/quality.txt factory-boy==3.3.3 # via -r requirements/quality.txt -faker==40.35.0 +faker==40.36.0 # via # -r requirements/quality.txt # factory-boy @@ -176,7 +176,7 @@ fastavro==1.12.2 # via # -r requirements/quality.txt # openedx-events -filelock==3.32.0 +filelock==3.32.2 # via # -r requirements/ci.txt # python-discovery @@ -219,7 +219,7 @@ mysqlclient==2.2.8 # via -r requirements/quality.txt openedx-events==11.2.0 # via -r requirements/quality.txt -packaging==26.2 +packaging==26.3 # via # -r requirements/ci.txt # -r requirements/pip-tools.txt @@ -232,13 +232,14 @@ packaging==26.2 path==16.16.0 # via edx-i18n-tools pip-tools==7.6.0 - # via -r requirements/pip-tools.txt + # via + # -c requirements/constraints.txt + # -r requirements/pip-tools.txt platformdirs==4.11.0 # via # -r requirements/ci.txt # -r requirements/quality.txt # pylint - # python-discovery # tox # virtualenv pluggy==1.6.0 @@ -323,7 +324,7 @@ pytest-cov==7.1.0 # via -r requirements/quality.txt pytest-django==4.12.0 # via -r requirements/quality.txt -python-discovery==1.5.0 +python-discovery==1.5.1 # via # -r requirements/ci.txt # tox @@ -332,7 +333,7 @@ python-slugify==8.0.4 # via # -r requirements/quality.txt # code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via -r requirements/quality.txt pyyaml==6.0.3 # via @@ -340,7 +341,7 @@ pyyaml==6.0.3 # code-annotations # edx-django-release-util # edx-i18n-tools -redis==8.0.1 +redis==8.1.0 # via -r requirements/quality.txt requests==2.34.2 # via @@ -396,7 +397,7 @@ urllib3==2.7.0 # via # -r requirements/quality.txt # requests -virtualenv==21.7.0 +virtualenv==21.7.1 # via # -r requirements/ci.txt # tox diff --git a/requirements/doc.txt b/requirements/doc.txt index 9486e86..d9ac74a 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -28,7 +28,7 @@ certifi==2026.7.22 # via # -r requirements/test.txt # requests -cffi==2.1.0 +cffi==2.1.1 # via # -r requirements/test.txt # cryptography @@ -44,18 +44,18 @@ click==8.4.2 # edx-django-utils code-annotations==3.0.0 # via -r requirements/test.txt -coverage[toml]==7.15.2 +coverage[toml]==7.15.3 # via # -r requirements/test.txt # pytest-cov -cryptography==49.0.0 +cryptography==50.0.0 # via # -r requirements/test.txt # pyjwt # secretstorage ddt==1.7.2 # via -r requirements/test.txt -django==5.2.16 +django==5.2.17 # via # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt # -r requirements/test.txt @@ -144,7 +144,7 @@ edx-rbac==3.0.0 # via -r requirements/test.txt factory-boy==3.3.3 # via -r requirements/test.txt -faker==40.35.0 +faker==40.36.0 # via # -r requirements/test.txt # factory-boy @@ -202,7 +202,7 @@ nh3==0.3.6 # via readme-renderer openedx-events==11.2.0 # via -r requirements/test.txt -packaging==26.2 +packaging==26.3 # via # -r requirements/test.txt # build @@ -266,7 +266,7 @@ python-slugify==8.0.4 # via # -r requirements/test.txt # code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via -r requirements/test.txt pyyaml==6.0.3 # via @@ -275,7 +275,7 @@ pyyaml==6.0.3 # edx-django-release-util readme-renderer==45.0 # via twine -redis==8.0.1 +redis==8.1.0 # via -r requirements/test.txt requests==2.34.2 # via @@ -347,7 +347,7 @@ text-unidecode==1.3 # via # -r requirements/test.txt # python-slugify -twine==6.2.0 +twine==7.0.0 # via -r requirements/doc.in typing-extensions==4.16.0 # via diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 20aa67f..741d67e 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -8,12 +8,14 @@ build==1.5.0 # via pip-tools click==8.4.2 # via pip-tools -packaging==26.2 +packaging==26.3 # via # build # wheel pip-tools==7.6.0 - # via -r requirements/pip-tools.in + # via + # -c requirements/constraints.txt + # -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via # build diff --git a/requirements/pip.txt b/requirements/pip.txt index d7766d3..b595059 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -4,13 +4,15 @@ # # make upgrade # -packaging==26.2 +packaging==26.3 # via wheel wheel==0.47.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: pip==26.1.2 - # via -r requirements/pip.in + # via + # -c requirements/constraints.txt + # -r requirements/pip.in setuptools==83.0.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index ba0f0be..7821ef6 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -20,7 +20,7 @@ certifi==2026.7.22 # via # -r requirements/test.txt # requests -cffi==2.1.0 +cffi==2.1.1 # via # -r requirements/test.txt # cryptography @@ -42,11 +42,11 @@ code-annotations==3.0.0 # via # -r requirements/test.txt # edx-lint -coverage[toml]==7.15.2 +coverage[toml]==7.15.3 # via # -r requirements/test.txt # pytest-cov -cryptography==49.0.0 +cryptography==50.0.0 # via # -r requirements/test.txt # pyjwt @@ -54,7 +54,7 @@ ddt==1.7.2 # via -r requirements/test.txt dill==0.4.1 # via pylint -django==5.2.16 +django==5.2.17 # via # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt # -r requirements/test.txt @@ -136,7 +136,7 @@ edx-rbac==3.0.0 # via -r requirements/test.txt factory-boy==3.3.3 # via -r requirements/test.txt -faker==40.35.0 +faker==40.36.0 # via # -r requirements/test.txt # factory-boy @@ -172,7 +172,7 @@ mysqlclient==2.2.8 # via -r requirements/test.txt openedx-events==11.2.0 # via -r requirements/test.txt -packaging==26.2 +packaging==26.3 # via # -r requirements/test.txt # pytest @@ -243,14 +243,14 @@ python-slugify==8.0.4 # via # -r requirements/test.txt # code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via -r requirements/test.txt pyyaml==6.0.3 # via # -r requirements/test.txt # code-annotations # edx-django-release-util -redis==8.0.1 +redis==8.1.0 # via -r requirements/test.txt requests==2.34.2 # via diff --git a/requirements/test.txt b/requirements/test.txt index d3f8b37..f61120c 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -16,7 +16,7 @@ certifi==2026.7.22 # via # -r requirements/base.txt # requests -cffi==2.1.0 +cffi==2.1.1 # via # -r requirements/base.txt # cryptography @@ -32,9 +32,9 @@ click==8.4.2 # edx-django-utils code-annotations==3.0.0 # via -r requirements/test.in -coverage[toml]==7.15.2 +coverage[toml]==7.15.3 # via pytest-cov -cryptography==49.0.0 +cryptography==50.0.0 # via # -r requirements/base.txt # pyjwt @@ -119,7 +119,7 @@ edx-rbac==3.0.0 # via -r requirements/base.txt factory-boy==3.3.3 # via -r requirements/test.in -faker==40.35.0 +faker==40.36.0 # via factory-boy fastavro==1.12.2 # via @@ -141,7 +141,7 @@ mysqlclient==2.2.8 # via -r requirements/base.txt openedx-events==11.2.0 # via -r requirements/base.txt -packaging==26.2 +packaging==26.3 # via pytest pluggy==1.6.0 # via @@ -184,14 +184,14 @@ pytest-django==4.12.0 # via -r requirements/test.in python-slugify==8.0.4 # via code-annotations -pytz==2026.2 +pytz==2026.3.post1 # via -r requirements/base.txt pyyaml==6.0.3 # via # -r requirements/base.txt # code-annotations # edx-django-release-util -redis==8.0.1 +redis==8.1.0 # via -r requirements/base.txt requests==2.34.2 # via