build: pin pip and pip-tools, upgrade requirements

requirements/base.txt

@@ -10,17 +10,17 @@ attrs==26.1.0
     # via openedx-events
 certifi==2026.7.22
     # via requests
-cffi==2.1.0
+cffi==2.1.1
     # via
     #   cryptography
     #   pynacl
 charset-normalizer==3.4.9
     # via requests
 click==8.4.2
     # via edx-django-utils
-cryptography==49.0.0
+cryptography==50.0.0
     # via pyjwt
-django==5.2.16
+django==5.2.17
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/base.in
@@ -108,11 +108,11 @@ pymongo==4.17.0
     # via edx-opaque-keys
 pynacl==1.6.2
     # via edx-django-utils
-pytz==2026.2
+pytz==2026.3.post1
     # via -r requirements/base.in
 pyyaml==6.0.3
     # via edx-django-release-util
-redis==8.0.1
+redis==8.1.0
     # via -r requirements/base.in
 requests==2.34.2
     # via edx-drf-extensions

requirements/ci.txt

@@ -4,37 +4,36 @@
 #
 #    make upgrade
 #
-cachetools==7.1.6
+cachetools==7.1.7
     # via tox
 colorama==0.4.6
     # via tox
 distlib==0.4.3
     # via virtualenv
-filelock==3.32.0
+filelock==3.32.2
     # via
     #   python-discovery
     #   tox
     #   virtualenv
-packaging==26.2
+packaging==26.3
     # via
     #   pyproject-api
     #   tox
 platformdirs==4.11.0
     # via
-    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.6.0
     # via tox
 pyproject-api==1.11.0
     # via tox
-python-discovery==1.5.0
+python-discovery==1.5.1
     # via
     #   tox
     #   virtualenv
 tomli-w==1.2.0
     # via tox
 tox==4.58.0
     # via -r requirements/ci.in
-virtualenv==21.7.0
+virtualenv==21.7.1
     # via tox

requirements/constraints.txt

@@ -10,3 +10,13 @@
 
 # Common constraints for edx repos
 -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+
+# pip 26.2+ is incompatible with pip-tools 7.6.0 (latest pip-tools release only
+# supports pip up to 26.1), which breaks `make upgrade`. Remove this once a
+# newer pip-tools release restores pip 26.2+ compatibility.
+pip<26.2
+
+# Pin pip-tools to the version verified compatible with the pip<26.2 constraint
+# above; a newer pip-tools release could require a newer pip and reintroduce
+# the `make upgrade` breakage this constraint set was added to fix.
+pip-tools==7.6.0

requirements/dev.txt

@@ -21,15 +21,15 @@ build==1.5.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools
-cachetools==7.1.6
+cachetools==7.1.7
     # via
     #   -r requirements/ci.txt
     #   tox
 certifi==2026.7.22
     # via
     #   -r requirements/quality.txt
     #   requests
-cffi==2.1.0
+cffi==2.1.1
     # via
     #   -r requirements/quality.txt
     #   cryptography
@@ -61,19 +61,19 @@ colorama==0.4.6
     # via
     #   -r requirements/ci.txt
     #   tox
-coverage[toml]==7.15.2
+coverage[toml]==7.15.3
     # via
     #   -r requirements/quality.txt
     #   pytest-cov
-cryptography==49.0.0
+cryptography==50.0.0
     # via
     #   -r requirements/quality.txt
     #   pyjwt
 ddt==1.7.2
     # via
     #   -r requirements/dev.in
     #   -r requirements/quality.txt
-diff-cover==10.4.0
+diff-cover==10.4.1
     # via -r requirements/dev.in
 dill==0.4.1
     # via
@@ -83,7 +83,7 @@ distlib==0.4.3
     # via
     #   -r requirements/ci.txt
     #   virtualenv
-django==5.2.16
+django==5.2.17
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/quality.txt
@@ -168,15 +168,15 @@ edx-rbac==3.0.0
     # via -r requirements/quality.txt
 factory-boy==3.3.3
     # via -r requirements/quality.txt
-faker==40.35.0
+faker==40.36.0
     # via
     #   -r requirements/quality.txt
     #   factory-boy
 fastavro==1.12.2
     # via
     #   -r requirements/quality.txt
     #   openedx-events
-filelock==3.32.0
+filelock==3.32.2
     # via
     #   -r requirements/ci.txt
     #   python-discovery
@@ -219,7 +219,7 @@ mysqlclient==2.2.8
     # via -r requirements/quality.txt
 openedx-events==11.2.0
     # via -r requirements/quality.txt
-packaging==26.2
+packaging==26.3
     # via
     #   -r requirements/ci.txt
     #   -r requirements/pip-tools.txt
@@ -232,13 +232,14 @@ packaging==26.2
 path==16.16.0
     # via edx-i18n-tools
 pip-tools==7.6.0
-    # via -r requirements/pip-tools.txt
+    # via
+    #   -c requirements/constraints.txt
+    #   -r requirements/pip-tools.txt
 platformdirs==4.11.0
     # via
     #   -r requirements/ci.txt
     #   -r requirements/quality.txt
     #   pylint
-    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.6.0
@@ -323,7 +324,7 @@ pytest-cov==7.1.0
     # via -r requirements/quality.txt
 pytest-django==4.12.0
     # via -r requirements/quality.txt
-python-discovery==1.5.0
+python-discovery==1.5.1
     # via
     #   -r requirements/ci.txt
     #   tox
@@ -332,15 +333,15 @@ python-slugify==8.0.4
     # via
     #   -r requirements/quality.txt
     #   code-annotations
-pytz==2026.2
+pytz==2026.3.post1
     # via -r requirements/quality.txt
 pyyaml==6.0.3
     # via
     #   -r requirements/quality.txt
     #   code-annotations
     #   edx-django-release-util
     #   edx-i18n-tools
-redis==8.0.1
+redis==8.1.0
     # via -r requirements/quality.txt
 requests==2.34.2
     # via
@@ -396,7 +397,7 @@ urllib3==2.7.0
     # via
     #   -r requirements/quality.txt
     #   requests
-virtualenv==21.7.0
+virtualenv==21.7.1
     # via
     #   -r requirements/ci.txt
     #   tox

requirements/doc.txt

@@ -28,7 +28,7 @@ certifi==2026.7.22
     # via
     #   -r requirements/test.txt
     #   requests
-cffi==2.1.0
+cffi==2.1.1
     # via
     #   -r requirements/test.txt
     #   cryptography
@@ -44,18 +44,18 @@ click==8.4.2
     #   edx-django-utils
 code-annotations==3.0.0
     # via -r requirements/test.txt
-coverage[toml]==7.15.2
+coverage[toml]==7.15.3
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==49.0.0
+cryptography==50.0.0
     # via
     #   -r requirements/test.txt
     #   pyjwt
     #   secretstorage
 ddt==1.7.2
     # via -r requirements/test.txt
-django==5.2.16
+django==5.2.17
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -144,7 +144,7 @@ edx-rbac==3.0.0
     # via -r requirements/test.txt
 factory-boy==3.3.3
     # via -r requirements/test.txt
-faker==40.35.0
+faker==40.36.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
@@ -202,7 +202,7 @@ nh3==0.3.6
     # via readme-renderer
 openedx-events==11.2.0
     # via -r requirements/test.txt
-packaging==26.2
+packaging==26.3
     # via
     #   -r requirements/test.txt
     #   build
@@ -266,7 +266,7 @@ python-slugify==8.0.4
     # via
     #   -r requirements/test.txt
     #   code-annotations
-pytz==2026.2
+pytz==2026.3.post1
     # via -r requirements/test.txt
 pyyaml==6.0.3
     # via
@@ -275,7 +275,7 @@ pyyaml==6.0.3
     #   edx-django-release-util
 readme-renderer==45.0
     # via twine
-redis==8.0.1
+redis==8.1.0
     # via -r requirements/test.txt
 requests==2.34.2
     # via
@@ -347,7 +347,7 @@ text-unidecode==1.3
     # via
     #   -r requirements/test.txt
     #   python-slugify
-twine==6.2.0
+twine==7.0.0
     # via -r requirements/doc.in
 typing-extensions==4.16.0
     # via

requirements/pip-tools.txt

@@ -8,12 +8,14 @@ build==1.5.0
     # via pip-tools
 click==8.4.2
     # via pip-tools
-packaging==26.2
+packaging==26.3
     # via
     #   build
     #   wheel
 pip-tools==7.6.0
-    # via -r requirements/pip-tools.in
+    # via
+    #   -c requirements/constraints.txt
+    #   -r requirements/pip-tools.in
 pyproject-hooks==1.2.0
     # via
     #   build

requirements/pip.txt

@@ -4,13 +4,15 @@
 #
 #    make upgrade
 #
-packaging==26.2
+packaging==26.3
     # via wheel
 wheel==0.47.0
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==26.1.2
-    # via -r requirements/pip.in
+    # via
+    #   -c requirements/constraints.txt
+    #   -r requirements/pip.in
 setuptools==83.0.0
     # via -r requirements/pip.in

requirements/quality.txt

@@ -20,7 +20,7 @@ certifi==2026.7.22
     # via
     #   -r requirements/test.txt
     #   requests
-cffi==2.1.0
+cffi==2.1.1
     # via
     #   -r requirements/test.txt
     #   cryptography
@@ -42,19 +42,19 @@ code-annotations==3.0.0
     # via
     #   -r requirements/test.txt
     #   edx-lint
-coverage[toml]==7.15.2
+coverage[toml]==7.15.3
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==49.0.0
+cryptography==50.0.0
     # via
     #   -r requirements/test.txt
     #   pyjwt
 ddt==1.7.2
     # via -r requirements/test.txt
 dill==0.4.1
     # via pylint
-django==5.2.16
+django==5.2.17
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -136,7 +136,7 @@ edx-rbac==3.0.0
     # via -r requirements/test.txt
 factory-boy==3.3.3
     # via -r requirements/test.txt
-faker==40.35.0
+faker==40.36.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
@@ -172,7 +172,7 @@ mysqlclient==2.2.8
     # via -r requirements/test.txt
 openedx-events==11.2.0
     # via -r requirements/test.txt
-packaging==26.2
+packaging==26.3
     # via
     #   -r requirements/test.txt
     #   pytest
@@ -243,14 +243,14 @@ python-slugify==8.0.4
     # via
     #   -r requirements/test.txt
     #   code-annotations
-pytz==2026.2
+pytz==2026.3.post1
     # via -r requirements/test.txt
 pyyaml==6.0.3
     # via
     #   -r requirements/test.txt
     #   code-annotations
     #   edx-django-release-util
-redis==8.0.1
+redis==8.1.0
     # via -r requirements/test.txt
 requests==2.34.2
     # via